
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: bQH4rPtbALLxJm0DmgSKkH62dehsRJ9wYKZQ12dao0M=
Subject key identifier: BB:BF:52:3F:B7:75:F9:05:97:A5:D8:48:5A:7E:29:46:C2:09:31:55
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 01A0F7FC38A792DF1880BE1D33F7668B79E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 06CB
Signing time: Thu 01 Oct 2026 15:01:36 +0000
Manifest this update: Thu 01 Oct 2026 15:01:36 +0000
Manifest next update: Fri 02 Oct 2026 15:01:36 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: vCNNsdgcfxl+yYPnJo7Gky//ZoDHmaPeIlIekKb07JI=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fc:38:a7:92:df:18:80:be:1d:33:f7:66:8b:79:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Oct 1 15:01:36 2026 GMT
Not After : Oct 2 15:01:36 2026 GMT
Subject: CN=bbbf523fb775f90597a5d8485a7e2946c2093155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:58:21:9c:cd:30:5c:d9:b5:75:48:83:96:
5e:57:16:c2:8e:3d:5c:0a:c8:b1:37:13:48:4c:cd:
36:d8:aa:26:92:09:df:be:f7:a5:81:90:da:8d:b8:
ff:39:00:af:81:d3:4b:f3:e6:1e:1e:4c:10:9e:b5:
2f:65:a1:52:79:c9:6b:96:ca:00:ca:3c:47:bd:e5:
27:49:96:99:6e:9d:2f:39:6d:7e:8d:c4:83:a2:da:
8c:7b:1b:d9:e0:51:81:7a:f8:1d:1c:b8:73:e1:a8:
75:e4:13:cf:e3:61:21:83:e7:b0:3a:8e:80:3d:eb:
78:95:b8:dc:4a:3e:e4:57:e9:74:5d:18:63:fe:12:
cb:d7:37:1d:9f:65:75:e7:eb:41:b4:cf:f6:1d:ec:
c0:e3:f0:b7:08:f1:ae:51:8e:f3:98:90:3d:fb:83:
2d:13:1d:92:31:b2:1e:0f:87:d4:80:03:5e:4a:ab:
86:48:79:4e:f4:f0:b7:cf:bd:66:82:93:bc:e3:b1:
e1:8b:1f:16:82:b9:e5:9f:66:85:d6:3c:d7:6d:20:
38:3a:cb:90:96:18:a4:de:ac:1a:b5:a2:6d:f0:9e:
a0:4d:ef:17:15:7e:8a:a3:5f:39:ef:e1:b5:ab:03:
16:8f:16:b4:10:4d:5d:bf:dd:3e:5a:42:ba:ba:4d:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:52:3F:B7:75:F9:05:97:A5:D8:48:5A:7E:29:46:C2:09:31:55
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:da:0e:57:83:3d:de:88:1a:2c:7d:f0:8e:7f:83:15:85:
8b:32:04:64:49:0b:aa:db:fc:44:1e:16:fd:d9:a3:3e:da:b1:
b2:12:b1:49:6e:5b:f4:5c:87:bf:9a:8c:d2:fe:3d:d6:ab:cc:
00:a2:bd:5a:c9:85:39:b4:9b:bc:93:47:35:5e:f7:fa:24:3b:
22:43:10:b5:dd:a0:34:f8:80:5a:ed:ed:09:e0:91:b4:54:74:
f9:de:fb:a7:37:45:1b:ee:c7:96:f9:d5:9e:76:98:b5:e9:69:
d2:ea:b9:5a:9d:f1:b6:ac:62:e5:73:46:2b:65:e1:a1:85:16:
b0:dd:96:ed:20:48:e5:cc:fa:81:a7:6a:16:60:44:01:23:cd:
ab:75:10:94:9e:20:02:2b:8b:41:ec:82:5f:9f:eb:7b:2b:64:
28:68:77:36:5a:32:01:ec:2d:c8:0a:ad:bb:65:89:86:8e:a5:
4b:23:0c:27:ad:2a:ef:e1:74:57:03:9a:ee:0c:21:79:63:9d:
d5:05:0b:d7:74:2c:74:cd:7e:40:b4:b5:bd:2f:91:a8:e9:71:
f6:59:ec:9d:87:88:e8:2e:a2:97:12:c2:02:72:5f:f9:69:3d:
d6:43:e5:65:15:65:30:ed:d4:bd:c5:ad:f4:e6:fa:56:b4:0b:
68:51:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:48:01 2026 by rpki-client