Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: ZTS86zrVLnlSFxB76H2evVGkJXj/F2GQ6akuAyjDFXE=
Subject key identifier: A1:F4:D7:8E:D4:EE:2E:82:C3:C0:CB:F6:C3:F1:78:8F:98:43:5C:DE
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019D9AAC202C34A831DF679CB98F57B2F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 172A
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: 3TszphJMM1zL+fYF31i0hF7HUetg2Kud0GRGfh+LRB4=)
2: vYZoGtk4d0GzH5SleNmOLABE2e8.roa (hash: UQ3FNogo3gxDT9intgC9NLW8P4+ImpGBfyWrhItInS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:20:2c:34:a8:31:df:67:9c:b9:8f:57:b2:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=a1f4d78ed4ee2e82c3c0cbf6c3f1788f98435cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:ae:41:bf:27:3c:0b:37:00:c5:68:b8:e6:
33:f3:18:ec:35:f1:a9:4c:d1:39:d5:16:88:1a:9f:
36:3e:2f:08:14:60:b2:f0:c5:22:0e:11:a6:60:78:
5e:f4:b7:e4:2a:04:6c:e6:1e:7a:c0:0e:24:26:9a:
2b:19:b2:51:49:d4:15:1c:4c:8f:e0:85:4e:fd:0c:
e2:21:15:43:77:80:2e:0d:1d:8b:b8:e1:22:56:d9:
36:45:78:74:9d:2e:f2:e2:8b:d0:ea:a0:04:6c:42:
ae:e4:62:0d:55:4f:c7:c3:8a:00:b9:62:e9:67:50:
fd:f0:ef:23:b9:84:b5:a9:c7:f9:8a:a6:ca:7d:ec:
0f:24:7b:b5:4a:43:26:d8:97:06:f7:69:97:a4:3e:
3f:51:9c:38:79:4f:9c:1f:40:aa:66:22:30:a6:ba:
47:29:4e:fe:63:e5:5f:00:b6:2f:28:3b:c7:53:9e:
a0:95:31:96:3f:0c:3f:3e:21:00:f5:01:19:0b:87:
1d:59:a9:7b:e6:e5:fc:eb:bf:0f:a8:17:28:9f:05:
b6:fe:62:6a:d7:6b:b8:3e:bd:35:06:9a:51:e1:75:
ec:db:c5:66:1f:76:38:36:55:25:50:e3:75:fc:0a:
83:1b:92:40:11:fc:66:1c:7e:39:94:54:9b:37:7b:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:D7:8E:D4:EE:2E:82:C3:C0:CB:F6:C3:F1:78:8F:98:43:5C:DE
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:24:21:40:0f:49:7f:93:91:8c:19:de:9a:97:8a:0a:a6:
f1:72:9d:b5:1d:23:76:f7:56:51:4f:0e:c3:5a:8f:ce:71:39:
6c:cf:02:4b:c1:63:09:bc:07:18:32:f2:c2:32:95:6c:99:df:
b9:f1:5e:66:19:ba:12:89:b2:5f:f8:65:4f:fb:9a:fa:de:33:
9f:3f:7b:2e:d1:92:cf:3f:24:1d:a4:58:b5:29:4e:65:3a:12:
44:d0:6a:72:d8:69:d4:fb:e2:fa:2f:53:46:66:68:85:ca:9c:
d2:bb:d0:f9:b7:cb:48:eb:19:32:3b:e1:db:02:3c:da:db:ee:
cf:93:b4:0f:af:be:9a:ca:00:b8:02:c9:32:92:c6:37:14:74:
87:66:47:0c:3b:00:2e:bb:dd:89:2d:bf:a7:99:bf:5e:6b:99:
6f:c5:c1:85:44:e7:20:99:0e:b5:69:79:22:b8:92:08:ae:3f:
04:3b:10:07:57:b9:5a:91:97:fc:fc:2b:c4:ac:d1:e0:66:27:
a0:bf:5b:56:13:62:54:9e:8e:5e:ce:5b:c1:38:05:98:d7:9e:
f5:d0:07:9f:9f:f3:63:32:24:f8:72:ba:8a:af:72:82:60:50:
37:cf:5e:38:86:c3:c7:74:f2:6a:8f:f3:d7:b5:92:63:2c:63:
a8:2e:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:32 2026 by rpki-client