Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: 2wzJSiqk7Z6Cavdr4RBMxWqyDaRH9BfxIEXAi69jPRY=
Subject key identifier: F3:B4:0F:55:57:39:7E:C1:09:69:C1:C9:02:C6:64:69:17:E5:77:BE
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 019D9AABDB8060DE6F54C4F3C9D1ABF4346A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 14E8
Signing time: Fri 17 Apr 2026 09:00:46 +0000
Manifest this update: Fri 17 Apr 2026 09:00:46 +0000
Manifest next update: Sat 18 Apr 2026 09:00:46 +0000
Files and hashes: 1: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: 0h58xVzAWicw53bTUc95FtKkpgulZzlMNgbc7SNRPLI=)
2: c57yC7tB1OJCUcmD7P1hLz2EMFE.roa (hash: ZXukYGaWgtp5a3QMVvyaz5oNdYorD6FVcR+u7jbZN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:db:80:60:de:6f:54:c4:f3:c9:d1:ab:f4:34:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Apr 17 09:00:46 2026 GMT
Not After : Apr 18 09:00:46 2026 GMT
Subject: CN=f3b40f5557397ec10969c1c902c6646917e577be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:87:a9:db:67:63:fb:86:9e:4e:18:8c:ce:
02:bc:a5:65:8d:23:da:13:10:d2:42:28:c7:b2:0f:
d8:e7:c6:86:3e:06:38:8c:5b:03:ee:94:bd:2e:60:
13:1c:bb:5c:f6:5e:3b:b7:be:d8:d5:21:4e:bd:bc:
f6:ae:e9:73:dd:4f:60:46:51:3e:16:1b:18:ef:fc:
f2:00:69:0e:12:7a:6d:dc:09:79:f8:ea:55:d8:69:
2f:61:a5:28:5f:7b:8e:7b:01:ac:36:02:a3:a3:62:
35:4d:a0:e0:db:17:f5:dc:35:77:1e:28:b2:c0:b9:
91:3f:39:8d:c7:9a:c7:3c:3a:0b:77:7d:b4:85:f9:
44:f0:ae:64:2d:62:95:21:62:9d:68:22:a5:56:bf:
dd:ce:83:21:31:d9:61:e8:a3:72:28:88:e7:31:7f:
d1:56:3f:0c:51:55:fe:84:0f:0f:c6:b3:22:11:0a:
99:8d:f3:0c:5a:05:35:5b:4a:3b:8d:f1:f1:2b:70:
ac:8b:31:9f:27:df:ad:f5:af:e1:b9:d3:df:4a:83:
15:6e:30:3e:2e:56:fd:ef:db:e7:2b:fd:f5:25:cd:
08:8a:09:da:33:03:6c:54:d2:b5:00:14:d5:4c:40:
bc:b2:31:92:a9:59:a3:be:b9:db:22:c8:80:fb:3f:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:0F:55:57:39:7E:C1:09:69:C1:C9:02:C6:64:69:17:E5:77:BE
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:3e:df:a4:3e:47:fe:22:4d:03:cd:fd:9a:11:3c:79:01:
9c:fd:0f:a6:a9:b9:99:8b:37:5a:7b:96:d1:48:27:97:1d:7f:
5e:21:90:39:81:e3:84:a9:51:81:e6:f6:36:3e:bb:80:4f:c3:
57:4c:fa:dd:b0:c0:58:e6:12:2f:18:63:27:37:51:71:80:f8:
53:dd:b7:31:b4:0b:22:9f:e6:fd:27:ef:37:58:d5:ae:ff:39:
a8:f6:8e:85:fc:0b:19:bd:ae:81:cb:17:6c:06:2a:81:cc:8f:
93:7d:a7:a4:a6:c1:2c:9c:a0:64:28:c8:cc:6b:92:24:21:3a:
6e:4e:7f:c4:65:99:9b:c9:b8:f0:0b:00:38:4c:a1:9a:a7:b6:
98:d2:85:2f:44:2a:43:6e:f2:f6:a4:fe:46:4a:7c:73:38:28:
bb:62:1f:6e:ee:ff:aa:21:12:f0:ad:16:c7:46:db:21:9c:7b:
7e:bc:7a:6f:12:51:ea:9b:7c:03:fc:13:f8:e3:aa:d9:94:cf:
da:bf:40:16:e9:6f:5e:67:2f:11:d3:20:ac:f1:4c:ab:68:cc:
3b:e6:50:b0:62:8f:d9:95:8a:af:bd:84:d2:67:96:80:4b:cc:
0e:8a:19:80:c4:71:8a:a8:1c:94:5a:22:6e:79:f3:65:25:51:
d5:a4:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:41 2026 by rpki-client