Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: qQa645vQzK7xr/1+2AfHXMl3FYYfXz68Rl+mIvSo98Y=
Subject key identifier: AA:31:59:45:29:42:B4:A0:B3:A9:C6:CA:DE:96:DA:05:52:BD:57:28
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 019F8F7EBCCB05F4E436AE7FC41A845C986C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 15:01:15 +0000
Manifest this update: Thu 23 Jul 2026 15:01:15 +0000
Manifest next update: Fri 24 Jul 2026 15:01:15 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: /jjQt+KVf91AfQ2la0nYkvIK7/b7HrTX76lSY6WVnnQ=)
2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:bc:cb:05:f4:e4:36:ae:7f:c4:1a:84:5c:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Jul 23 15:01:15 2026 GMT
Not After : Jul 24 15:01:15 2026 GMT
Subject: CN=aa3159452942b4a0b3a9c6cade96da0552bd5728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6d:68:0c:8b:ae:5b:e7:c4:07:ba:d7:3e:12:
8b:a0:e5:b6:af:25:4e:61:75:20:a1:23:48:26:67:
82:33:6b:42:dc:ff:f3:04:19:d7:6e:01:dc:eb:f8:
98:ee:ad:8e:82:42:c7:f7:dd:cb:58:7b:1b:30:80:
5b:71:d4:42:24:8f:61:b1:4d:fe:48:64:e8:26:3d:
8a:9f:f6:15:40:69:ab:16:0f:b7:07:69:9d:ca:50:
15:53:3b:06:4e:69:6c:0e:13:ae:4e:26:35:ff:c9:
0a:1f:5b:7b:09:20:7f:e6:ff:b7:6b:df:0d:ed:ab:
4e:10:5b:6c:f5:67:e7:a3:b9:09:3a:11:a2:25:bd:
85:5e:40:1d:7b:50:0c:b3:a6:85:ec:4b:61:47:65:
0c:47:c3:7a:39:4c:be:fe:0c:b2:69:15:df:14:0d:
ac:3e:16:bf:69:17:4b:ef:7b:44:78:01:7c:8c:03:
d5:0c:3e:3e:93:4b:37:f9:2d:41:f1:3d:69:0f:af:
d6:55:3a:65:86:b9:78:04:3d:37:ca:0e:aa:4a:27:
3e:fd:34:64:3c:15:b9:e1:92:f9:cd:4e:e4:4c:00:
d5:e4:70:d6:4c:c8:8d:f0:f1:c5:4e:12:86:fb:51:
fa:f9:5f:60:ea:29:df:79:47:75:70:00:a9:1a:18:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:59:45:29:42:B4:A0:B3:A9:C6:CA:DE:96:DA:05:52:BD:57:28
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:5d:6e:60:4b:5c:6f:22:08:08:dc:08:9d:3b:03:d5:4d:
ac:53:ad:e5:ea:95:2f:ec:67:28:8b:04:3a:5e:1c:73:95:24:
56:d3:e7:45:69:4b:72:82:06:ab:24:1c:26:23:41:5f:24:bb:
55:fe:8a:9a:0c:47:c2:08:6e:ef:16:26:23:98:ac:5d:01:b9:
14:ce:c6:b3:d5:03:5e:18:80:c0:b3:ea:ee:73:5a:90:97:b3:
93:ca:70:f5:9e:93:45:49:bc:84:07:fe:2d:bd:e9:23:11:a2:
0d:3b:f1:86:14:97:20:de:34:fc:86:36:3b:40:44:d4:44:69:
2f:56:77:a0:da:d9:31:c8:a4:b9:fb:a4:a1:4c:0d:f7:80:ea:
bd:df:d3:cc:23:85:fc:f1:10:8c:c9:04:13:06:c1:06:b7:ec:
fc:19:65:53:d8:d4:6a:d1:50:38:ab:21:3f:74:3a:8f:70:8a:
66:90:22:17:58:84:61:49:f1:7a:e6:21:15:19:fc:62:20:53:
2c:4d:30:ea:28:da:26:de:d7:43:d8:8a:e0:07:ea:62:38:30:
e4:f7:38:ec:af:9c:ae:28:a0:a9:db:ff:92:79:9c:70:cb:86:
cd:69:ad:ad:01:a9:24:ae:48:62:93:a0:37:ca:29:66:a9:61:
94:c8:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:54 2026 by rpki-client