Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: dek7ZomFZo+8W51GKMa7i03m0qpEE0rLLGiMRnx/9Cg=
Subject key identifier: 3B:68:D9:8E:18:39:06:0C:B6:37:56:7C:E8:64:9D:73:62:C5:B7:77
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 019CAD224F24DE0600493BA7A23BE6FAE76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 146D
Signing time: Mon 02 Mar 2026 06:00:32 +0000
Manifest this update: Mon 02 Mar 2026 06:00:32 +0000
Manifest next update: Tue 03 Mar 2026 06:00:32 +0000
Files and hashes: 1: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: gg3Eoa58MwN0w1aQNfLHYM9gUvdRgGIzQw67sYIcGEI=)
2: c57yC7tB1OJCUcmD7P1hLz2EMFE.roa (hash: ZXukYGaWgtp5a3QMVvyaz5oNdYorD6FVcR+u7jbZN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:4f:24:de:06:00:49:3b:a7:a2:3b:e6:fa:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Mar 2 06:00:32 2026 GMT
Not After : Mar 3 06:00:32 2026 GMT
Subject: CN=3b68d98e1839060cb637567ce8649d7362c5b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:d5:25:52:da:b0:44:0e:2e:14:91:02:9e:
26:7d:a6:76:25:35:52:61:bf:dc:a5:1e:d2:6e:4f:
ba:42:02:11:09:85:c5:5b:5a:63:ed:d8:66:25:9f:
b6:f7:25:15:6e:f8:b8:e3:ed:61:51:58:fc:e2:2d:
69:32:39:bd:7b:9d:07:06:36:eb:33:00:aa:9b:cb:
06:41:61:0d:71:c8:d3:e5:f7:b6:4d:4c:35:df:cb:
42:52:da:f1:d1:7a:59:7d:17:ce:3d:cc:73:3d:31:
73:d6:eb:39:f0:fe:db:54:3f:46:13:86:67:3e:f4:
d8:48:5c:e1:ca:aa:00:8e:18:22:98:de:0b:43:d1:
de:ab:da:6a:58:39:96:73:23:1c:ee:9d:5a:21:f7:
32:3f:b7:3d:b8:36:73:bf:a2:3a:16:4d:d7:43:a6:
28:6a:a0:84:87:99:90:0e:63:ac:68:c1:ef:00:09:
be:58:5d:ae:e0:92:5d:3b:4f:1a:7a:84:0e:ea:a8:
35:5a:4a:c2:90:9c:85:d1:1e:49:c7:63:8d:ca:7a:
b7:4c:ea:65:e2:71:a3:9f:8b:74:10:62:f9:9b:26:
05:47:b5:ba:4a:f7:f5:bf:61:19:65:35:3f:cc:c2:
db:1c:c4:36:4b:a7:e6:9c:4e:1d:68:97:2c:51:8c:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:D9:8E:18:39:06:0C:B6:37:56:7C:E8:64:9D:73:62:C5:B7:77
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d7:3f:70:02:c3:1b:48:de:bd:7d:6a:6b:70:8f:57:61:11:
f0:58:02:6e:fd:f9:d5:ff:56:aa:44:43:6e:de:50:b8:cf:c4:
6f:fe:53:5a:89:2c:5a:11:c4:22:41:c0:66:d4:e1:9a:91:24:
20:90:e1:30:36:49:06:41:18:d8:0b:18:6f:fa:d9:76:76:02:
4a:cd:ad:26:f1:2e:ef:92:4b:10:1a:8f:d6:5d:80:b9:a9:82:
32:b9:1d:8d:24:47:72:62:5e:51:b1:6b:79:e5:e8:7c:fc:28:
0f:f2:94:ee:0b:e9:f7:d1:41:c6:ae:6a:85:47:a1:0f:06:2a:
e6:65:69:79:59:71:0f:11:ff:82:5e:12:13:eb:c9:61:a0:b3:
eb:6b:86:94:42:5b:c1:7b:1d:6a:4b:09:d8:44:8d:26:07:4f:
d1:0f:ea:ee:21:f5:a6:f2:8c:f9:05:57:58:14:aa:4c:64:05:
9b:8a:5b:98:c9:3b:4b:69:fd:e9:1b:ae:23:26:dc:27:62:b7:
8b:37:a9:28:c0:f0:30:9c:4a:2a:49:62:59:97:83:c9:e1:a9:
5c:59:0e:43:0d:2d:c3:3c:dc:d8:75:09:54:1c:ce:fd:0a:66:
a4:ef:4b:60:60:67:f0:55:c8:8c:6a:f2:95:73:b7:c5:5d:f5:
d5:63:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:39 2026 by rpki-client