Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: MWBSR1faWtNQtRJKHAgeGTAKv2VmWG3llXVLWb78cAA=
Subject key identifier: F2:5F:F1:06:90:3F:F9:C9:A7:9B:B8:1B:72:28:AD:14:03:D6:36:12
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019D98F4FE7D51A80519EC8C85B0B4E9EFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 1350
Signing time: Fri 17 Apr 2026 01:01:25 +0000
Manifest this update: Fri 17 Apr 2026 01:01:25 +0000
Manifest next update: Sat 18 Apr 2026 01:01:25 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: vpxVHalMwk2jfMfWGUJ5NJ+KOhOT8ge6Ldyc0icXz9k=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:fe:7d:51:a8:05:19:ec:8c:85:b0:b4:e9:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Apr 17 01:01:25 2026 GMT
Not After : Apr 18 01:01:25 2026 GMT
Subject: CN=f25ff106903ff9c9a79bb81b7228ad1403d63612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:0c:2d:20:9a:80:59:02:84:31:31:b8:5f:
e2:e5:8c:00:da:81:fb:e3:3c:72:d0:53:7b:ba:e7:
05:bc:e2:cb:5d:fd:7f:8d:c5:05:61:92:06:d6:4d:
2e:22:dc:24:29:09:34:5f:7d:be:e0:b3:8d:a8:aa:
ff:be:bf:b4:59:55:6a:b2:ee:43:21:52:e2:23:cc:
c9:5a:57:06:74:e7:4d:c1:cc:c1:55:5c:9e:cf:32:
0f:c4:fa:ec:1f:8a:25:4a:fa:dc:27:23:25:48:61:
bf:23:33:15:2d:3c:2f:b0:31:59:cd:83:7f:27:23:
cf:33:11:59:4a:d4:af:12:6e:12:51:bc:c6:04:1a:
c1:e4:04:1d:b4:e6:62:cf:2c:82:42:c8:3c:68:65:
a9:6f:d6:fa:49:6d:d7:58:18:06:27:e3:47:40:18:
c9:34:9b:8c:1e:1a:f1:21:bd:56:66:4b:eb:5e:84:
2c:9a:bc:b8:85:54:3c:69:ae:71:b7:dc:42:93:5f:
9a:49:d4:06:90:3f:18:23:44:85:7a:b0:5f:18:67:
6b:ee:9e:90:3e:cc:9c:e1:29:9d:59:13:8f:1a:26:
b4:9d:b7:ed:b9:76:ce:56:b8:6f:b3:47:6c:95:a5:
58:f7:46:99:88:4e:27:68:c2:60:9c:3e:d5:04:4f:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:F1:06:90:3F:F9:C9:A7:9B:B8:1B:72:28:AD:14:03:D6:36:12
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:e4:77:88:8b:0b:f6:03:12:68:09:b5:1d:c5:e7:60:6e:
cc:98:db:df:50:f6:6b:c5:f4:bc:2c:88:b6:44:57:e9:cb:f4:
91:46:9d:f3:95:15:12:65:80:31:1d:d5:95:06:64:58:5e:d9:
d1:91:8b:bb:70:21:63:86:fd:c4:35:27:4d:1e:c0:ca:84:ea:
8f:a4:54:6f:3e:6b:de:8c:03:89:09:ca:c2:30:b2:f4:91:2d:
a2:a5:b9:03:c3:d9:3e:42:70:99:67:7e:f9:c4:fc:fa:dc:6f:
ad:89:c0:16:69:2f:6d:8d:9b:d0:7c:fe:69:37:69:05:79:69:
d9:a2:b6:4f:09:9f:30:18:ff:32:2f:e6:ee:04:24:d8:8a:e2:
3d:b1:e8:92:37:94:79:ce:8a:ef:a0:cb:23:d2:87:55:3e:ae:
fb:4c:96:6f:d3:15:0d:a0:2d:5b:73:b3:e8:32:c5:c2:46:5c:
48:66:4a:10:aa:89:c1:52:2b:44:d8:de:77:90:39:59:7f:1a:
7a:a2:3e:24:a6:e8:8f:a8:ca:b3:86:e5:44:bd:f9:5b:7b:51:
ae:3d:ab:a0:a8:7b:27:f5:8c:17:81:7d:ef:e8:74:0c:74:f0:
31:4a:36:03:2c:e5:b4:54:9b:5d:bb:33:66:c4:9f:90:7a:96:
dd:56:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:23 2026 by rpki-client