Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: 7mly4rsPsyYRk+8VAXLCpSdBJuBNBdzzgKIdeJVb8Us=
Subject key identifier: 96:93:3C:36:41:F7:BD:38:01:4D:CA:55:92:46:57:B1:63:64:16:BC
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 01A0D382CECC3D63C69840FB6EF0F99A97E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 14FC
Signing time: Thu 24 Sep 2026 13:02:40 +0000
Manifest this update: Thu 24 Sep 2026 13:02:40 +0000
Manifest next update: Fri 25 Sep 2026 13:02:40 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: zHcCAbl5Fhd69ykVKuDU+3Sq87H3VI9yqJ7gqhiPzE4=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:ce:cc:3d:63:c6:98:40:fb:6e:f0:f9:9a:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Sep 24 13:02:40 2026 GMT
Not After : Sep 25 13:02:40 2026 GMT
Subject: CN=96933c3641f7bd38014dca55924657b1636416bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:71:64:d9:ac:0e:bd:7b:99:ae:4b:d7:f9:
1b:d0:c9:b1:22:45:83:fe:38:0e:d3:88:17:71:2c:
fc:12:a5:fa:99:aa:a7:3d:51:11:30:59:49:c2:fa:
08:89:69:a6:85:8d:d8:ec:05:e1:cc:d7:7b:b3:99:
ab:a3:54:4e:21:37:a1:4c:81:9c:8c:80:21:03:b8:
23:32:ab:ee:e7:4f:85:39:95:51:88:31:ec:80:47:
ab:9b:0c:dc:ba:b9:f3:1e:2b:f2:24:f4:89:ff:ea:
7f:78:28:3b:dc:8d:16:ba:ce:6d:4f:01:d6:79:f7:
d5:4e:46:e5:a5:97:99:b7:b7:99:de:de:e7:b9:69:
4b:70:31:d9:e2:45:9e:44:2b:b2:14:6b:7b:9d:c5:
c3:89:46:d0:03:f0:13:e3:9e:85:fa:0e:1a:9d:a6:
59:55:6f:38:11:9d:81:30:c4:a2:74:28:60:0e:15:
a6:fa:0c:d0:ed:24:58:2d:b9:67:4c:d4:7f:87:3a:
ef:c4:56:b4:c0:a7:3c:08:2a:98:51:22:68:26:6a:
24:52:de:39:c9:8e:2d:a1:5a:a4:df:5e:a4:6f:9d:
93:da:cc:cc:bf:72:7a:b9:a2:fa:6a:ea:22:ff:c6:
bb:0c:e2:e4:a8:ec:26:ca:24:a7:38:49:97:5d:72:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:3C:36:41:F7:BD:38:01:4D:CA:55:92:46:57:B1:63:64:16:BC
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:f1:f1:e2:21:c3:5a:d4:e5:94:ee:7b:8a:ee:28:ae:8b:
59:3f:8f:6e:c8:8e:66:ff:7c:f7:f4:c4:ff:86:41:00:6f:4e:
53:46:c0:f0:6a:07:ce:2b:f6:bc:ff:b7:f4:26:0e:ed:a2:d2:
ea:4b:d7:0f:f0:49:45:42:cd:c3:4d:84:c8:3b:80:13:e1:4e:
81:fb:a2:ff:af:d5:33:a5:92:3b:9d:70:bf:c5:af:f7:d2:e5:
8c:02:b2:63:37:eb:26:cd:54:fd:c2:d6:cf:b4:9b:22:0d:eb:
81:cf:be:cd:98:43:d1:a8:eb:a6:61:88:c0:53:12:03:03:b7:
fd:9f:4a:1d:c5:7e:94:9c:3d:c8:16:5b:cb:0f:78:b1:eb:b9:
46:7d:6f:0d:bb:32:80:39:13:f6:5a:bd:7a:45:bc:0a:d5:e1:
c8:e0:06:d3:4c:4c:69:73:60:6d:26:90:6b:6b:aa:b1:e7:e5:
09:6c:b7:aa:e9:89:85:23:01:b4:1d:2c:40:ba:f9:bd:54:42:
5e:e7:6c:9c:20:8b:64:65:08:06:7c:a5:df:c1:15:78:29:c0:
a1:79:7f:2b:d6:a2:64:78:ee:60:b4:c3:f9:61:a5:a1:be:3d:
a9:d2:2f:b8:4b:4a:e3:16:fb:2a:56:6b:41:13:98:74:d6:9d:
76:95:0a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgs7MPWPGmED7bvD5mpfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1
YmFhZDUwHhcNMjYwOTI0MTMwMjQwWhcNMjYwOTI1MTMwMjQwWjAzMTEwLwYDVQQD
Eyg5NjkzM2MzNjQxZjdiZDM4MDE0ZGNhNTU5MjQ2NTdiMTYzNjQxNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvZxZNmsDr17ma5L1/kb0MmxIkWD
/jgO04gXcSz8EqX6maqnPVERMFlJwvoIiWmmhY3Y7AXhzNd7s5mro1ROITehTIGc
jIAhA7gjMqvu50+FOZVRiDHsgEermwzcurnzHivyJPSJ/+p/eCg73I0Wus5tTwHW
effVTkblpZeZt7eZ3t7nuWlLcDHZ4kWeRCuyFGt7ncXDiUbQA/AT456F+g4anaZZ
VW84EZ2BMMSidChgDhWm+gzQ7SRYLblnTNR/hzrvxFa0wKc8CCqYUSJoJmokUt45
yY4toVqk316kb52T2szMv3J6uaL6auoi/8a7DOLkqOwmyiSnOEmXXXICiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaTPDZB9704AU3KVZJGV7FjZBa8MB8GA1UdIwQY
MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt
YmUxN2I4YWFkNTU0LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0
LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB7x8eIh
w1rU5ZTue4ruKK6LWT+PbsiOZv989/TE/4ZBAG9OU0bA8GoHziv2vP+39CYO7aLS
6kvXD/BJRULNw02EyDuAE+FOgfui/6/VM6WSO51wv8Wv99LljAKyYzfrJs1U/cLW
z7SbIg3rgc++zZhD0ajrpmGIwFMSAwO3/Z9KHcV+lJw9yBZbyw94seu5Rn1vDbsy
gDkT9lq9ekW8CtXhyOAG00xMaXNgbSaQa2uqseflCWy3qumJhSMBtB0sQLr5vVRC
XudsnCCLZGUIBnyl38EVeCnAoXl/K9aiZHjuYLTD+WGlob49qdIvuEtK4xb7KlZr
QROYdNaddpUK4w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:44:05 2026 by rpki-client