Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
File: HzJorQbzq480bQ3jm9SuqztlhNk.mft (raw, json)
Hash identifier: ruXpsjHfJug2hyTk6jWiwwM97hOkCEmjeoEbMqkypVE=
Subject key identifier: 89:30:00:2D:8E:C5:D2:DE:40:BE:E9:4B:E5:67:62:5B:EE:2F:02:F2
Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
Certificate issuer: /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Certificate serial: 01A0D153C5AE4AE0C5BED3808D9FB2FFEA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
Manifest number: 0C68
Signing time: Thu 24 Sep 2026 02:52:03 +0000
Manifest this update: Thu 24 Sep 2026 02:52:03 +0000
Manifest next update: Fri 25 Sep 2026 02:52:03 +0000
Files and hashes: 1: HzJorQbzq480bQ3jm9SuqztlhNk.crl (hash: 8tZrxfKEiAqtdFYWOun7EFVAHE08jiEoRJdBr5Hz3kM=)
2: uX6G6oNTckN7kVPvHw_a7JGfCgE.asa (hash: AWmDV4s/Ux9QWzIm4jFVC0kYhmIKhvOkIVReNClzdzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:53:c5:ae:4a:e0:c5:be:d3:80:8d:9f:b2:ff:ea:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Validity
Not Before: Sep 24 02:52:03 2026 GMT
Not After : Sep 25 02:52:03 2026 GMT
Subject: CN=8930002d8ec5d2de40bee94be567625bee2f02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:92:42:3f:36:74:94:c5:f2:20:bf:b9:1f:
7a:0d:c5:8a:b2:36:f1:9c:03:01:62:e2:c7:de:16:
b1:f5:da:b9:dc:8a:b5:19:45:a2:ed:ec:2f:54:9b:
15:c9:e2:61:3e:10:87:e3:95:f8:23:7c:40:bd:5d:
22:40:1b:14:c1:e8:20:25:ad:96:e4:a6:2f:c4:4b:
e7:37:f8:23:f6:2f:b1:70:b4:ba:84:c6:e9:14:24:
ad:20:a3:95:6f:bb:d7:cc:24:13:3d:e5:9b:52:66:
22:9f:8e:79:3d:8e:97:9e:46:29:c2:f8:28:ea:19:
01:8a:90:bc:82:57:6b:bb:3d:fd:a5:40:23:87:7c:
65:54:ad:24:9b:18:1b:e2:34:ba:31:cf:0b:6b:32:
85:ea:c1:53:35:bd:c1:8f:b9:71:33:d6:b3:fe:44:
87:97:c1:cb:d7:93:17:34:d2:38:c9:28:09:da:e7:
cb:42:e0:04:5a:79:4d:2e:38:5e:ca:78:e0:39:0f:
8c:18:d4:b3:68:1e:6f:b0:e6:71:0c:82:ad:0c:5e:
ac:f2:3f:fe:d0:77:2f:9e:dd:61:76:71:13:d8:81:
22:b4:7e:ce:ce:7e:a2:0d:bd:e2:9f:55:0a:bd:7e:
70:4c:48:72:e5:f6:ec:db:9a:a3:f6:46:a1:9b:d8:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:00:2D:8E:C5:D2:DE:40:BE:E9:4B:E5:67:62:5B:EE:2F:02:F2
X509v3 Authority Key Identifier:
keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:86:cd:e1:5c:3c:32:be:4b:71:10:7a:13:b9:05:b7:e2:34:
e8:a0:8b:1a:3e:c8:bd:d1:69:e2:79:49:1f:29:ea:1c:94:73:
56:01:24:7b:d4:5e:59:e0:d5:5c:a9:f6:3d:75:64:80:1c:a4:
e5:d5:cc:a6:8c:71:23:0f:50:2c:7a:2c:08:18:24:8e:ba:6d:
50:66:cc:48:2d:69:78:56:59:25:3c:ec:cd:70:ed:a1:c4:8d:
80:ad:00:bf:5e:b5:8b:f4:72:4b:e3:15:e8:1e:4b:9f:86:b5:
45:b3:47:3a:58:14:f9:df:66:0e:ad:b4:c8:bc:90:97:5c:59:
03:d9:11:ca:67:56:98:76:98:bd:10:57:82:2d:46:6d:8e:cd:
7b:a0:0e:3f:7d:c5:7e:f3:a2:db:6c:d4:98:5a:b0:83:99:6f:
0a:05:a3:2e:ad:01:c1:d3:10:7d:5b:c2:d5:4d:57:00:8d:14:
13:96:c1:e1:e5:61:b0:61:16:37:af:fe:57:7e:98:f6:fa:79:
07:81:9b:9d:2e:51:9b:67:ff:88:a7:77:11:8e:73:da:0f:0e:
d2:3f:2d:0f:a1:22:c3:4d:df:5c:c4:d7:e3:eb:5e:dd:a3:15:
a6:89:62:5f:78:58:7d:2a:c4:1a:cc:c9:27:4d:22:36:57:c6:
d6:ee:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:08:55 2026 by rpki-client