Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: OWXisg0xJ6E9Z71ALKajfaMLNHRwAPH3vO38dqSSi60=
Subject key identifier: 3C:34:03:4C:01:B3:6E:9A:61:7B:B3:0C:E4:8A:9F:00:7A:50:15:29
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019CAB6B1325023AC34EF24CEF628FE96A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 12D5
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: mwTbKq6NfAZ6NJvlt2BhFVMx+R/+RubfptsxdRoDHEU=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:13:25:02:3a:c3:4e:f2:4c:ef:62:8f:e9:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=3c34034c01b36e9a617bb30ce48a9f007a501529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:60:30:13:45:f8:4a:f4:02:97:df:4b:5e:
49:f2:b0:81:87:b9:68:59:d2:3d:88:77:60:ce:e3:
24:d2:c9:f9:87:b1:fa:34:87:7a:55:6b:dc:14:63:
b7:75:41:47:f8:aa:4a:1a:d9:b7:7f:88:87:e9:be:
b3:b8:47:22:1b:94:21:c3:db:a0:89:d8:3c:d3:d0:
dc:41:eb:eb:92:25:d6:9b:e1:7f:e5:68:f7:48:6a:
a4:3c:62:d4:37:ad:8c:75:32:ae:a4:15:ae:b7:30:
27:7e:67:6e:84:1f:65:f3:dc:0b:ee:38:da:41:e2:
09:f4:8b:e9:66:71:20:ae:67:fc:b4:38:90:ff:a1:
c6:2d:a9:29:ab:c9:17:90:4f:9f:71:12:fd:1a:e5:
80:89:89:cf:92:ed:00:40:7e:cc:b1:38:cb:3c:d2:
63:e0:f0:8d:e1:a4:92:43:ba:63:22:4a:cf:08:4f:
0c:b9:6e:33:d0:e9:c9:60:fc:c8:f3:a0:43:3c:ae:
6a:95:e1:89:1b:bc:be:e4:3d:5e:a7:04:28:e8:53:
e2:3d:6a:39:40:80:9d:35:95:e3:ff:77:da:4f:d6:
a3:75:8b:f3:02:dd:2d:64:18:03:b8:f2:0b:d5:53:
61:8e:7f:08:04:27:25:56:83:dd:5a:3c:40:05:c5:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:34:03:4C:01:B3:6E:9A:61:7B:B3:0C:E4:8A:9F:00:7A:50:15:29
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:81:0b:c8:db:0a:a7:95:6e:24:9a:19:c2:ce:80:c1:d1:12:
73:65:94:ca:ef:35:eb:50:79:8d:7c:a1:88:ed:d4:cc:81:78:
a7:0c:34:a4:72:cb:cd:81:3f:ea:88:7f:3e:86:fc:e6:9c:69:
a3:26:3e:69:15:79:eb:7d:1c:50:cc:ab:7e:1a:67:1f:4b:75:
5c:9d:37:ad:10:69:ef:57:e8:00:83:2d:c4:a6:1e:eb:7f:3b:
e0:c8:94:d4:89:e8:24:39:6a:d5:7a:18:65:67:05:0b:e8:8d:
bc:f0:55:70:e3:e6:be:60:22:3b:40:21:d6:59:86:f5:b9:87:
7b:c1:9a:43:72:0a:48:b1:72:70:30:7d:f6:5b:f3:e5:f3:14:
ab:4d:9b:8f:8b:bb:22:65:32:c1:6f:6a:55:0e:2b:88:18:38:
22:ad:79:58:eb:9f:6a:9e:83:49:61:2f:33:c6:c8:ee:78:aa:
ab:8e:4c:f8:78:1e:79:ab:50:ef:a3:98:6c:66:dd:5a:06:44:
c7:54:b5:04:50:1d:e0:43:c2:a5:95:8c:18:35:70:b7:70:8b:
22:68:b3:1e:36:20:a8:20:db:0a:b9:2b:ca:75:e2:42:3d:29:
92:57:c4:b0:4e:d7:05:75:e8:32:36:20:37:36:14:9b:ec:07:
03:91:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:44 2026 by rpki-client