Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: 0vxJgV1TAoQyBrppoPBSSr+wXh/dn4LX4UmDuza7F6w=
Subject key identifier: 34:64:0E:57:1C:73:8B:DD:80:50:E9:8A:07:4B:7C:2D:A7:A2:AF:B2
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 019D26CDA062B192D4163CB9CB5B824044D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 04D1
Signing time: Wed 25 Mar 2026 21:01:43 +0000
Manifest this update: Wed 25 Mar 2026 21:01:43 +0000
Manifest next update: Thu 26 Mar 2026 21:01:43 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: jacwvuZ/fTgihjCaXXpS6nnEoO4gKeNaYBfyJdDi5ko=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:a0:62:b1:92:d4:16:3c:b9:cb:5b:82:40:44:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Mar 25 21:01:43 2026 GMT
Not After : Mar 26 21:01:43 2026 GMT
Subject: CN=34640e571c738bdd8050e98a074b7c2da7a2afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:e8:61:c3:0a:1c:0f:8f:b3:2f:18:82:22:
a6:b6:5a:63:c0:91:7e:2b:d8:b3:18:28:fb:f4:34:
d8:15:28:25:86:36:85:cd:5f:f9:d1:e3:d9:79:01:
f6:d4:27:d8:e8:e0:27:61:02:25:d9:07:21:a6:79:
b0:cc:64:81:43:5a:96:e4:1b:95:4d:21:a0:04:6d:
7b:ac:c5:ac:bc:1b:69:9b:45:e7:cf:30:6a:eb:15:
e1:8f:cd:53:a8:18:ce:90:68:2a:d5:49:24:cb:15:
89:a6:db:ef:12:4a:50:5c:15:db:ca:22:26:55:72:
27:28:0e:c7:85:dc:0d:c4:cb:a2:96:ce:ec:b3:12:
63:1a:e2:41:7d:9b:12:b4:24:bf:9b:b0:f0:81:4b:
5c:c1:34:a6:e5:ed:e5:45:97:89:ef:9b:1e:79:52:
38:2f:ab:79:63:33:41:23:22:92:76:cd:ce:03:0a:
04:f1:c2:b9:f2:99:20:14:b5:24:76:be:71:85:f3:
aa:e4:99:6b:19:4c:07:54:91:de:43:5d:eb:82:07:
90:eb:6c:67:c9:24:73:1a:85:d7:2e:2c:d3:d6:e4:
cb:2b:0d:08:30:0a:26:28:2a:53:b6:66:ea:fb:01:
cf:fc:d9:21:3f:a7:13:06:7f:61:40:bd:a3:ef:97:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:0E:57:1C:73:8B:DD:80:50:E9:8A:07:4B:7C:2D:A7:A2:AF:B2
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:bb:fb:b6:94:82:78:97:7e:c6:7a:0e:2f:53:13:59:51:
5a:05:32:dd:3a:54:54:cd:d3:0e:b6:22:ad:16:51:e3:9c:ca:
e1:ed:0e:6f:be:8f:8f:d4:53:00:c5:6a:a3:c2:13:32:51:ea:
d4:90:9d:a9:df:da:62:05:37:c5:76:06:ec:e0:29:ea:64:21:
fe:c3:3c:fe:34:e4:89:4b:12:03:85:49:3c:a3:9a:3d:06:fe:
1a:3b:09:9a:3a:d2:57:92:8d:d1:fe:fa:e6:27:3b:a1:b5:16:
a0:ea:5b:77:75:52:9a:d6:f6:6d:87:f2:91:9a:15:f4:82:ce:
c9:c5:0a:b3:3b:b2:2b:12:fd:3e:8b:71:35:61:59:9a:66:0b:
a3:47:e7:f9:fa:6c:05:e1:72:2c:fe:4f:7c:29:c5:33:de:1a:
86:8d:4f:14:df:2e:73:c4:a2:8a:99:b0:02:a8:35:3b:e7:64:
04:a7:0c:4f:4a:d8:ff:94:64:c3:08:4f:a5:12:b0:92:14:e3:
bc:a4:a5:2c:98:b5:3e:42:d7:e0:6d:a3:57:d7:82:19:7d:7f:
37:be:2c:f0:6c:39:98:d2:7e:57:c1:fa:d7:01:31:34:fb:3c:
13:bf:d8:c9:8f:12:d9:28:38:4e:19:ce:6a:b9:dc:20:14:fc:
57:20:ac:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzaBisZLUFjy5y1uCQETYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2JmMjM3NTZjNmU3ZDY0ZDY4MjJmNTk3YjFkNTgwNDli
ZDQ4ZjEwHhcNMjYwMzI1MjEwMTQzWhcNMjYwMzI2MjEwMTQzWjAzMTEwLwYDVQQD
EygzNDY0MGU1NzFjNzM4YmRkODA1MGU5OGEwNzRiN2MyZGE3YTJhZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUjoYcMKHA+Psy8YgiKmtlpjwJF+
K9izGCj79DTYFSglhjaFzV/50ePZeQH21CfY6OAnYQIl2QchpnmwzGSBQ1qW5BuV
TSGgBG17rMWsvBtpm0XnzzBq6xXhj81TqBjOkGgq1UkkyxWJptvvEkpQXBXbyiIm
VXInKA7HhdwNxMuils7ssxJjGuJBfZsStCS/m7DwgUtcwTSm5e3lRZeJ75seeVI4
L6t5YzNBIyKSds3OAwoE8cK58pkgFLUkdr5xhfOq5JlrGUwHVJHeQ13rggeQ62xn
ySRzGoXXLizT1uTLKw0IMAomKCpTtmbq+wHP/NkhP6cTBn9hQL2j75ctoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRkDlccc4vdgFDpigdLfC2noq+yMB8GA1UdIwQY
MBaAFB878jdWxufWTWgi9Zex1YBJvUjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzIt
NDNkYzJkYmNhYjc3LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzItNDNkYzJkYmNhYjc3
LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEe7+7aU
gniXfsZ6Di9TE1lRWgUy3TpUVM3TDrYirRZR45zK4e0Ob76Pj9RTAMVqo8ITMlHq
1JCdqd/aYgU3xXYG7OAp6mQh/sM8/jTkiUsSA4VJPKOaPQb+GjsJmjrSV5KN0f76
5ic7obUWoOpbd3VSmtb2bYfykZoV9ILOycUKszuyKxL9PotxNWFZmmYLo0fn+fps
BeFyLP5PfCnFM94aho1PFN8uc8SiipmwAqg1O+dkBKcMT0rY/5RkwwhPpRKwkhTj
vKSlLJi1PkLX4G2jV9eCGX1/N74s8Gw5mNJ+V8H61wExNPs8E7/YyY8S2Sg4ThnO
arncIBT8VyCs2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:07 2026 by rpki-client