Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: sN6WKxcV0rK07ipkMhW0qsAVTjIWfafO/6GMzSgzOpE=
Subject key identifier: 86:73:02:FB:1A:97:1E:84:E8:9F:EC:37:1A:E4:BB:E7:A8:05:6E:34
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019EC25C737F6EC80A7C227A5E66E0FD3776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 13EA
Signing time: Sat 13 Jun 2026 19:01:39 +0000
Manifest this update: Sat 13 Jun 2026 19:01:39 +0000
Manifest next update: Sun 14 Jun 2026 19:01:39 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: +sZv3ypbdDOaaEQWxeJnf0WbwgblNejSHpEFfRyclg4=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:73:7f:6e:c8:0a:7c:22:7a:5e:66:e0:fd:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jun 13 19:01:39 2026 GMT
Not After : Jun 14 19:01:39 2026 GMT
Subject: CN=867302fb1a971e84e89fec371ae4bbe7a8056e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:75:07:ef:f9:52:7f:b5:64:03:94:b3:b0:
37:e5:95:fd:db:64:06:a4:8a:16:c4:35:e9:fd:4d:
58:c9:d4:e1:f7:09:29:98:19:30:92:e8:96:b0:f5:
62:e6:f5:02:2a:39:16:3a:35:9d:e5:c3:67:3c:a7:
ce:94:36:3d:ca:26:31:ef:17:42:b9:10:de:5e:72:
a2:c1:32:fe:2b:1e:92:2a:f9:72:6d:44:6b:48:73:
d1:a3:11:32:02:bc:87:d6:a3:ad:ea:60:d1:f3:d0:
2b:24:72:cd:43:db:fb:27:9e:43:6b:b6:32:eb:eb:
fd:5e:ba:3e:99:76:2f:d0:c3:37:f5:da:e1:f9:cd:
1b:8d:4f:25:5d:c8:bb:44:28:37:c6:67:ff:f8:0b:
45:9c:f0:80:cc:74:bd:32:df:43:bc:39:0b:cb:d6:
b1:e5:9e:ec:01:26:7f:88:9e:91:a3:0a:63:db:fa:
76:1e:40:4a:c0:58:7a:4e:d6:2c:f8:73:4c:a1:d9:
ce:b4:67:b9:3c:11:be:c7:d5:38:b2:bb:62:28:0f:
3b:2d:59:10:b3:99:01:c5:8f:eb:b7:13:f5:7a:15:
1e:08:8d:e6:4e:61:93:c5:c5:98:d3:fc:ff:8d:fe:
00:c9:14:f0:73:d7:c4:ba:32:da:36:a9:a3:84:6e:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:02:FB:1A:97:1E:84:E8:9F:EC:37:1A:E4:BB:E7:A8:05:6E:34
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fc:62:3a:35:0f:01:49:19:29:a3:24:a3:21:2b:35:62:bd:
87:9d:31:68:2f:fa:0c:c5:06:51:a9:b1:44:74:4d:8f:73:9e:
88:ab:71:cd:02:54:68:6e:04:1e:20:86:9e:5d:a3:1a:74:3a:
57:53:e7:28:e4:30:20:03:6d:1d:e1:9c:e5:fd:e5:c0:50:e6:
e8:ad:33:d7:3d:f6:44:95:46:75:92:20:af:33:18:34:d9:f0:
ba:2c:00:4d:42:a0:fa:d3:fb:40:03:1f:2c:55:80:ca:12:50:
07:80:5e:8d:12:87:b4:4b:7b:70:c2:2c:41:2f:89:ad:4e:8f:
cf:53:83:db:22:ea:04:ad:cb:03:f4:dc:27:a2:82:4a:55:0f:
2d:36:5d:bd:44:ca:bb:1a:d6:ca:b0:a4:e4:9a:40:bd:56:73:
9d:12:65:8a:23:81:23:67:0b:79:53:87:14:db:09:72:af:1e:
90:6c:b2:2c:5b:f1:77:49:a2:34:b0:30:81:e4:a6:a1:79:ff:
e4:fb:80:52:51:ce:52:f1:5d:52:66:08:4f:42:50:c3:dd:76:
02:ae:22:50:c0:a7:4c:33:dc:28:51:f3:d5:c9:21:c2:03:7b:
08:70:84:68:76:25:30:4e:db:08:19:b1:6e:6f:0f:1a:e8:c5:
66:7c:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:17:56 2026 by rpki-client