Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
File: Hy75gBLIyDg-iFI6a5roKGn5r08.mft (raw, json)
Hash identifier: wkG4iLrHU8CHDyd6H5bYvDxfy5jfziFDU5yG+Kufi9E=
Subject key identifier: 16:5E:95:71:9B:3C:9A:B0:B0:01:8C:48:B2:DE:48:4B:71:CC:99:E5
Authority key identifier: 1F:2E:F9:80:12:C8:C8:38:3E:88:52:3A:6B:9A:E8:28:69:F9:AF:4F
Certificate issuer: /CN=1f2ef98012c8c8383e88523a6b9ae82869f9af4f
Certificate serial: 01A10693ECC527ECFB2D19917A1F4A0FAEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
Manifest number: 30
Signing time: Sun 04 Oct 2026 11:01:59 +0000
Manifest this update: Sun 04 Oct 2026 11:01:59 +0000
Manifest next update: Mon 05 Oct 2026 11:01:59 +0000
Files and hashes: 1: Hy75gBLIyDg-iFI6a5roKGn5r08.crl (hash: wtdoYaPYNhZGUM1kPe5OeFQWIfExcSUtV9jvdImWrVk=)
2: qmxeUdPOWKrxFdpOzEjX-ePZBWI.asa (hash: vivER6ZGAcLBIX9JiNDdJmoNKeYx7QZpKCmwQ6MUN+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:ec:c5:27:ec:fb:2d:19:91:7a:1f:4a:0f:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2ef98012c8c8383e88523a6b9ae82869f9af4f
Validity
Not Before: Oct 4 11:01:59 2026 GMT
Not After : Oct 5 11:01:59 2026 GMT
Subject: CN=165e95719b3c9ab0b0018c48b2de484b71cc99e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:a0:1b:fa:14:68:36:96:20:4d:82:1f:29:
56:70:fb:2e:f3:2b:05:75:7e:30:70:8b:cd:a5:e9:
a5:d2:00:cd:4f:c4:ce:72:3e:c1:0c:bd:4d:a7:90:
4a:91:5a:2c:72:31:62:f3:64:d8:7f:b6:40:b9:79:
ce:bd:02:e7:b2:9e:3d:45:b9:44:a9:ac:15:5c:8f:
eb:2a:0c:9f:4d:cd:e7:04:65:0b:61:a4:52:8f:d4:
9d:7e:25:ea:99:db:0a:06:96:bb:dc:a0:cc:6d:f2:
e3:a8:81:32:b6:64:b5:5b:5f:96:2b:f5:26:41:10:
cd:49:4c:78:18:01:05:95:4d:23:9e:c1:5f:25:f8:
7c:89:c4:e7:89:fe:c8:00:ce:56:eb:5d:29:be:f0:
6a:93:61:26:f3:b9:8b:81:a5:40:6c:b2:7e:ab:3a:
7d:43:32:56:99:4c:80:a6:65:62:8f:52:b3:40:84:
71:f2:5a:50:aa:66:2c:40:22:06:22:ef:2d:f5:93:
97:48:2f:1d:05:3f:d5:13:41:7f:d5:28:de:32:ad:
c0:44:4c:fc:de:db:d4:fc:8b:7a:8c:1c:77:ca:2a:
e0:1b:fc:d5:8a:02:93:78:f8:c8:02:3e:9e:18:88:
f4:d6:07:69:84:df:bf:2d:ea:3d:91:4e:c5:4b:c9:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:95:71:9B:3C:9A:B0:B0:01:8C:48:B2:DE:48:4B:71:CC:99:E5
X509v3 Authority Key Identifier:
keyid:1F:2E:F9:80:12:C8:C8:38:3E:88:52:3A:6B:9A:E8:28:69:F9:AF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:9a:f1:f8:47:66:9b:b9:52:fe:bd:bd:69:2d:4b:f0:05:
07:a0:98:0e:5a:25:9a:b6:0a:8c:fe:4a:00:b8:df:84:1c:5d:
a4:47:a2:92:c1:3a:99:9e:7b:cc:de:fc:ac:98:6b:26:8e:5b:
99:24:3e:a6:bf:91:32:9c:a4:25:d5:ed:90:39:14:be:98:9d:
67:5b:29:7c:6f:7a:64:1a:69:3a:1d:f7:89:a0:84:bb:fc:60:
14:30:57:cd:01:51:4f:e6:56:4b:66:ad:52:4a:13:1f:7f:6a:
cc:86:66:91:22:a8:ab:cf:20:17:e3:6a:59:d7:89:d8:f9:73:
56:e1:7e:4c:a1:73:3b:78:d8:74:6a:5a:00:79:00:58:8d:62:
7a:80:c7:a1:b6:d1:81:d5:2f:92:0d:73:80:62:19:38:74:e9:
4f:e6:e8:50:e0:2c:8a:77:f1:dc:4a:17:af:ce:bf:70:df:b8:
1c:52:71:47:bf:00:75:46:b8:08:75:a7:36:1b:52:98:72:6b:
23:d2:a6:f0:4d:5b:d4:73:f4:ab:33:c9:99:54:cb:bb:e5:b4:
14:b2:31:21:e8:f2:5f:c9:f3:f5:31:8f:f7:bd:40:46:fa:ae:
ec:13:7f:83:82:2f:e0:8b:2d:81:ee:03:4d:f0:4d:d3:34:54:
bf:8f:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:03:53 2026 by rpki-client