Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: fIXxE740rwrG8LrywRF5vfhsPXtE0z/SYWP77DcyX3g=
Subject key identifier: 47:3B:3D:0D:82:04:C3:15:46:ED:83:D3:8F:F5:86:A5:35:00:14:45
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 019E1FED309CA274378FA338A9E688EDD87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0552
Signing time: Wed 13 May 2026 06:01:38 +0000
Manifest this update: Wed 13 May 2026 06:01:38 +0000
Manifest next update: Thu 14 May 2026 06:01:38 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: 87fmji7SJGU0L0ItNTjFew4H/zinsbdAnYtDGnYUpiM=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:30:9c:a2:74:37:8f:a3:38:a9:e6:88:ed:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: May 13 06:01:38 2026 GMT
Not After : May 14 06:01:38 2026 GMT
Subject: CN=473b3d0d8204c31546ed83d38ff586a535001445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:63:33:3a:c5:8c:86:79:0a:52:6f:29:73:
a2:37:e9:55:a3:04:26:d4:82:35:62:e1:1a:13:30:
1e:7a:f3:06:9a:24:94:37:d2:07:c2:56:66:ce:f5:
b2:7d:06:07:bf:c4:77:b8:2e:91:33:6a:6b:fd:78:
c2:19:f9:1b:6e:74:d6:88:e3:d5:de:9a:d7:8b:b7:
e3:ae:ae:ba:2a:c1:f4:9e:6c:6f:a4:be:71:3b:51:
da:6f:71:dd:84:50:82:3b:af:7d:5f:5b:36:0e:86:
11:d0:a2:6c:c1:3a:8b:22:7e:41:4b:74:6b:bb:f8:
49:37:56:50:d0:3d:47:ca:98:77:71:a0:0c:08:2a:
0c:6b:e3:91:36:20:cc:64:25:41:b3:09:e4:f7:98:
5b:84:8f:5f:07:1b:7d:5a:02:1d:fd:89:17:d0:52:
3b:68:09:6b:d9:46:68:8a:1f:5d:88:5b:11:06:e4:
2c:fc:fc:cc:e9:04:5a:e5:81:30:ab:a9:d5:41:67:
db:d9:c7:d4:44:55:5c:a8:2e:1b:b9:bf:27:00:76:
dc:11:cf:29:d1:46:f6:dc:17:81:59:ff:cb:03:bb:
16:56:b5:34:5f:7d:41:d2:c8:a6:64:f3:9f:e4:92:
7e:8d:b5:90:12:01:52:09:69:0d:d4:24:24:65:b2:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:3D:0D:82:04:C3:15:46:ED:83:D3:8F:F5:86:A5:35:00:14:45
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:30:f1:b9:12:c7:48:23:31:85:d1:e5:ab:1f:24:21:c8:
4f:41:8e:00:c5:75:34:9c:84:b9:8a:f1:d1:24:c4:0d:3e:d5:
27:0f:cf:a2:63:ca:b7:e4:ee:c1:77:6d:2f:84:3c:97:ea:e6:
cb:48:87:03:cb:d6:87:08:5f:1e:a5:16:ba:f8:6c:d4:92:88:
0c:2b:8e:bd:e4:98:76:72:d8:e8:f8:51:29:02:88:4d:c7:21:
de:88:47:d1:0d:7b:ad:11:e4:23:79:6c:e4:46:fd:f3:55:e7:
49:ae:a7:20:e0:8d:77:a9:d5:12:71:1b:80:ee:58:cc:42:93:
be:06:51:0e:ae:9d:b2:0d:60:5e:4b:eb:12:22:5b:76:a0:c6:
02:6d:03:33:2c:62:37:ef:fc:7d:ec:0c:7a:87:f7:e7:92:bb:
65:5c:69:a7:d5:63:0d:da:2b:85:14:09:82:c9:a3:d6:fa:b8:
c9:e4:3e:ad:bb:c3:f7:be:94:53:7b:40:53:b9:b0:95:4b:94:
c6:37:78:5e:16:3c:ce:e0:aa:aa:a5:a7:a8:6d:ef:86:cc:3f:
18:45:64:b8:a1:5d:22:e4:89:17:c7:b1:fd:70:ef:a6:74:57:
4d:f1:8d:3c:17:56:27:3f:ef:57:75:0d:4c:73:09:3a:a9:3f:
4d:28:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:21 2026 by rpki-client