
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: CoqpF73wiO4x5pPZhzWXZEOLCNwmjByfRbqTueYxI88=
Subject key identifier: 78:23:38:52:B2:51:37:E0:F4:33:6B:AF:18:6D:1A:E0:98:40:7D:24
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 019F92B60AD7B8FEB6538FCF8794E7237732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0612
Signing time: Fri 24 Jul 2026 06:00:31 +0000
Manifest this update: Fri 24 Jul 2026 06:00:31 +0000
Manifest next update: Sat 25 Jul 2026 06:00:31 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: rY3qp3VUgi92iaD1tHDQ7baVtvkZLofHB9fJJOo/UmI=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:0a:d7:b8:fe:b6:53:8f:cf:87:94:e7:23:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Jul 24 06:00:31 2026 GMT
Not After : Jul 25 06:00:31 2026 GMT
Subject: CN=78233852b25137e0f4336baf186d1ae098407d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:d6:f1:c5:0e:57:a9:0a:0b:80:fd:f3:85:
d7:7f:1a:9a:dc:98:c7:9c:fb:f3:49:2f:e4:4a:2b:
e9:2c:b3:07:c3:40:cb:e5:48:64:6a:4c:c6:52:8b:
d0:8a:a1:f9:05:b6:3c:41:bc:74:b3:0c:b0:13:de:
19:11:4e:1e:aa:a6:73:45:29:2c:b5:32:d5:a8:3b:
22:a9:1d:c9:66:a6:58:5c:2a:da:bb:75:9c:f1:54:
2e:35:2e:e0:ed:ff:04:fe:04:65:b5:21:b4:4e:81:
0f:ab:4a:66:96:92:51:3d:c5:85:96:b2:b7:7c:a1:
4e:f8:af:9f:20:85:46:04:8e:b2:60:7f:ed:84:08:
1a:42:eb:c2:6b:de:56:1e:8c:4d:a3:b3:00:bf:c2:
4c:2d:84:00:1a:9b:d8:33:4a:9a:25:68:5f:5d:8b:
19:af:31:fe:a9:d3:f7:e7:ce:39:f8:c8:e2:f0:2c:
5d:6e:4b:40:94:95:35:98:a9:de:27:45:f3:b6:26:
3d:2e:5b:c9:50:c7:34:fd:6d:bb:3e:fd:fe:ff:4b:
dd:6a:bd:99:40:7a:69:ab:57:7b:02:65:dc:b7:00:
91:40:37:44:61:7b:c8:86:be:ff:e7:21:ee:1d:1e:
83:6e:19:3b:4d:da:68:64:9a:bc:8a:73:59:0e:00:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:38:52:B2:51:37:E0:F4:33:6B:AF:18:6D:1A:E0:98:40:7D:24
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:b2:fd:04:b4:41:b7:58:94:9a:9f:08:0b:93:73:dd:b4:
3d:11:aa:9c:29:5e:da:c0:af:f4:af:cb:01:02:30:a3:43:78:
2b:40:31:db:38:39:57:e7:bc:98:a0:e7:ed:93:4c:85:92:6c:
10:5e:bd:d9:62:59:e0:b3:04:93:6e:96:89:a5:36:a4:41:0b:
5c:ec:2c:da:d8:69:02:0f:c5:84:b5:74:60:af:b2:8e:42:45:
59:f4:22:3a:6d:16:46:71:58:02:43:76:96:17:5f:f6:6d:d9:
61:17:91:cf:79:88:c8:cb:18:3a:81:f2:b3:8c:d4:db:12:22:
93:ee:b4:39:33:e3:a5:bc:df:87:f9:57:93:fe:af:f4:71:c5:
a3:bd:91:31:e0:80:7a:ff:59:d2:7f:4d:b0:52:28:04:93:df:
18:7e:40:2c:6e:20:80:f8:46:94:16:77:5b:f5:74:99:0f:ed:
de:5a:98:b7:43:42:2b:2c:80:94:a6:38:52:34:82:ff:9b:d3:
c5:0c:ea:94:8d:4a:aa:a2:59:f9:5f:f4:68:e6:02:f7:cc:33:
42:4d:49:58:99:44:c7:05:b8:a2:b3:6f:ad:bb:56:51:73:5f:
08:ff:ed:6a:ae:1b:73:6d:bb:6d:6f:38:b1:56:ff:9a:8d:d1:
88:29:4e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StgrXuP62U4/Ph5TnI3cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2JmMjM3NTZjNmU3ZDY0ZDY4MjJmNTk3YjFkNTgwNDli
ZDQ4ZjEwHhcNMjYwNzI0MDYwMDMxWhcNMjYwNzI1MDYwMDMxWjAzMTEwLwYDVQQD
Eyg3ODIzMzg1MmIyNTEzN2UwZjQzMzZiYWYxODZkMWFlMDk4NDA3ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04HW8cUOV6kKC4D984XXfxqa3JjH
nPvzSS/kSivpLLMHw0DL5UhkakzGUovQiqH5BbY8Qbx0swywE94ZEU4eqqZzRSks
tTLVqDsiqR3JZqZYXCrau3Wc8VQuNS7g7f8E/gRltSG0ToEPq0pmlpJRPcWFlrK3
fKFO+K+fIIVGBI6yYH/thAgaQuvCa95WHoxNo7MAv8JMLYQAGpvYM0qaJWhfXYsZ
rzH+qdP35845+Mji8CxdbktAlJU1mKneJ0XztiY9LlvJUMc0/W27Pv3+/0vdar2Z
QHppq1d7AmXctwCRQDdEYXvIhr7/5yHuHR6Dbhk7TdpoZJq8inNZDgDlkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgjOFKyUTfg9DNrrxhtGuCYQH0kMB8GA1UdIwQY
MBaAFB878jdWxufWTWgi9Zex1YBJvUjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzIt
NDNkYzJkYmNhYjc3LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzItNDNkYzJkYmNhYjc3
LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp+y/QS0
QbdYlJqfCAuTc920PRGqnCle2sCv9K/LAQIwo0N4K0Ax2zg5V+e8mKDn7ZNMhZJs
EF692WJZ4LMEk26WiaU2pEELXOws2thpAg/FhLV0YK+yjkJFWfQiOm0WRnFYAkN2
lhdf9m3ZYReRz3mIyMsYOoHys4zU2xIik+60OTPjpbzfh/lXk/6v9HHFo72RMeCA
ev9Z0n9NsFIoBJPfGH5ALG4ggPhGlBZ3W/V0mQ/t3lqYt0NCKyyAlKY4UjSC/5vT
xQzqlI1KqqJZ+V/0aOYC98wzQk1JWJlExwW4orNvrbtWUXNfCP/taq4bc227bW84
sVb/mo3RiClOjg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:03 2026 by rpki-client