Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: 818lgR/gQcpo7zytkRFkaxU4iXaswLZ+GKd8DDg022Q=
Subject key identifier: 23:CF:20:B2:D4:5B:1D:C1:1F:69:87:9E:D4:B4:6A:3B:34:DA:82:8F
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 019F92B69A446613CE92F0996AC550322E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 15ED
Signing time: Fri 24 Jul 2026 06:01:08 +0000
Manifest this update: Fri 24 Jul 2026 06:01:08 +0000
Manifest next update: Sat 25 Jul 2026 06:01:08 +0000
Files and hashes: 1: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: tGqXthJjjnFDI9FSSrviG51alejbuwYyYREL+Z4xcZs=)
2: c57yC7tB1OJCUcmD7P1hLz2EMFE.roa (hash: ZXukYGaWgtp5a3QMVvyaz5oNdYorD6FVcR+u7jbZN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:9a:44:66:13:ce:92:f0:99:6a:c5:50:32:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Jul 24 06:01:08 2026 GMT
Not After : Jul 25 06:01:08 2026 GMT
Subject: CN=23cf20b2d45b1dc11f69879ed4b46a3b34da828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:c4:b5:57:f8:b4:30:bd:e3:35:64:75:3d:
23:39:c5:21:3f:1b:e7:7d:56:10:7b:cb:8e:c2:8a:
9a:95:49:40:3c:36:96:40:28:b7:00:52:a2:ac:90:
f8:17:9a:b6:18:13:ba:cd:17:fc:2c:3a:b4:94:df:
f9:9b:cf:65:81:0a:6d:55:b5:45:61:15:34:f0:d2:
d5:ba:6e:92:7f:08:55:e1:26:33:04:fe:b5:22:23:
c2:2a:b8:b9:d0:7e:5c:1b:3a:f2:ce:23:fa:86:dd:
47:a0:2d:6c:88:1c:6c:a6:ae:8f:d8:cc:58:44:65:
95:cd:ed:bb:0e:c6:26:cf:09:3c:84:d5:b7:9a:98:
fe:78:5e:8c:4d:e8:ac:03:3e:70:df:6c:99:5a:84:
8b:7b:17:a3:53:da:3e:be:39:d1:c0:88:39:2c:85:
3e:31:27:35:71:6a:ba:1e:b6:fe:63:43:0d:c9:18:
27:ac:69:ab:b3:46:43:6b:3a:c9:7c:3a:20:57:09:
5f:4c:09:4a:60:90:bd:a5:37:0d:27:84:9d:7a:18:
54:99:e6:7c:9e:87:37:26:35:7a:16:f0:6c:74:f1:
6f:6e:bb:40:d2:ff:7d:1b:72:8a:3b:f0:b1:74:5f:
0d:17:3f:27:c7:02:79:d3:76:04:dc:be:79:6f:77:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:20:B2:D4:5B:1D:C1:1F:69:87:9E:D4:B4:6A:3B:34:DA:82:8F
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:33:24:1e:ff:8f:16:76:33:e2:0b:16:fd:db:65:fe:89:
69:69:74:3c:50:3e:00:ae:dd:0e:7c:a7:72:ec:73:fb:70:b0:
49:21:5f:fe:e5:2d:f2:b8:09:b1:ec:d2:a8:d6:a3:1d:4c:56:
65:89:9b:59:03:a5:14:06:b4:81:ca:a8:8d:8e:b6:8f:08:39:
6e:74:89:bb:19:50:54:62:a5:29:22:5b:22:75:43:70:7f:07:
3d:05:15:ac:f0:c9:61:e6:fe:fd:fb:e4:41:ae:f6:5a:9c:d5:
b6:b5:0a:fb:c6:0b:3b:b4:53:6e:f5:f2:ea:3e:95:8a:8b:f4:
61:50:cd:0d:ad:07:1a:36:8e:29:9e:76:a5:59:56:18:9b:8a:
27:db:89:1d:c8:d7:4d:f8:63:96:15:51:a5:b6:d0:b0:e6:96:
1b:44:9b:4a:74:c1:dc:38:cc:9d:aa:cc:2a:28:72:bb:e5:4d:
cf:53:03:46:89:48:01:59:31:b0:2e:0a:fd:a1:49:f5:5b:9a:
bc:a5:85:7e:44:0d:ce:27:f1:ab:cb:ef:fb:81:5f:eb:0f:fb:
be:cd:f0:ff:61:5b:73:85:c5:cc:a8:eb:04:e8:66:ab:c8:70:
ea:46:68:65:4a:16:84:7d:1d:c6:45:95:1b:7f:f9:91:fd:06:
da:9f:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:11 2026 by rpki-client