Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: v+JZ4z/zUQ20oYGQmnbTV+RjHF1IXPt8KjrT/8tePgY=
Subject key identifier: F0:F4:7B:9A:F6:53:37:F6:F2:C8:D4:0B:00:F5:9F:E8:07:56:08:41
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019D37F76AA557A133E3C47D4FDBA25FB334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0E61
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: PPitSZuRvTIuYET2fTr2uybz-Tg.roa (hash: 3kuiLKHDLxUf6+yboDVRpg9YOVajrkYmPy+E5r4q0G0=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: mMlw/o4uklAcrLm85XICnJo2QJgShwsRM99f2SNhV+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6a:a5:57:a1:33:e3:c4:7d:4f:db:a2:5f:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=f0f47b9af65337f6f2c8d40b00f59fe807560841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:59:e3:ab:3b:a8:6d:3a:80:2b:9b:dc:29:
4d:8d:05:2b:19:96:a4:f2:b9:e9:d8:98:11:3b:89:
a5:cd:4f:c7:0c:72:dc:29:8b:f1:c2:51:e3:01:e4:
41:6d:8a:49:a2:7f:e0:c6:ef:02:5b:31:09:28:92:
be:a8:2b:c9:3f:7f:02:c3:a1:7d:29:83:28:c0:34:
fb:ea:14:2b:66:a1:53:bf:3f:7d:86:8f:40:05:1b:
89:55:15:91:02:b8:65:64:82:b5:66:f9:21:9e:be:
5d:0a:a5:a7:e7:84:17:4b:29:0c:6d:cd:7e:89:f7:
d6:a6:be:76:15:4d:f0:46:54:0e:95:c3:e1:ce:8a:
51:6c:69:e7:22:57:78:ee:ea:48:56:dd:7b:a3:85:
da:c5:e8:67:53:c2:43:4b:7e:c1:3b:c7:34:69:c9:
79:be:e1:4a:5f:0c:05:ce:7d:1c:a5:c4:0d:90:04:
a8:2d:d9:f5:e7:43:2d:b9:ce:0e:ec:c7:eb:1f:2e:
91:ca:a5:f2:e7:58:ed:1b:fa:72:16:61:3e:c8:dd:
ec:20:2a:13:9f:1d:41:d1:c8:11:e1:8c:c8:2f:3d:
49:12:e4:40:8f:8d:34:55:df:0c:0f:48:1f:f8:7f:
32:61:05:b8:69:c0:36:77:bf:f3:86:ff:7d:eb:94:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:7B:9A:F6:53:37:F6:F2:C8:D4:0B:00:F5:9F:E8:07:56:08:41
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:cc:71:f7:10:b9:80:40:06:3c:5b:82:09:7e:d4:4d:04:
6d:38:0d:c8:05:d4:84:6c:79:3c:08:15:41:b2:40:04:78:2c:
1b:bc:28:c3:bc:3f:7b:b6:8d:18:fb:39:df:02:df:93:fc:42:
42:24:6a:a8:e4:53:d1:ef:ee:76:ef:91:1d:46:d2:e7:ca:54:
b6:d7:bb:f3:0c:4a:1f:7e:7a:95:a4:9e:b2:53:73:de:86:99:
c4:b7:eb:4d:5d:80:91:5d:61:7d:e7:f1:8d:d8:8e:cb:66:b7:
c2:a1:1b:43:3b:d4:64:82:59:b1:e8:81:7f:1c:48:36:ba:db:
bc:08:4f:4c:9c:25:08:4d:4c:3b:9b:04:d6:ac:b6:f0:18:08:
0f:07:30:aa:71:5f:f9:1c:3d:04:dc:58:10:a3:dc:82:83:6e:
a0:f3:a8:b2:da:6f:db:c8:86:f0:bf:2d:7d:d1:1f:61:29:6d:
0d:46:ce:18:fb:bb:50:dd:6e:de:db:73:54:15:ea:5a:28:bb:
ac:d7:79:b6:c2:04:2f:14:f2:0f:bb:88:ef:fb:56:cf:dd:25:
f3:7c:f2:cb:5c:b5:e2:e6:eb:9b:6c:70:55:c5:4c:df:7b:0e:
e2:22:a0:48:38:cd:21:0e:e9:dd:f0:b9:72:e0:10:d6:fd:12:
bc:02:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:26 2026 by rpki-client