Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: jUUpuV9jt2MZzJ7imixb33q1l5TYZvFOp5fvp1VibR4=
Subject key identifier: 0D:D3:45:8E:6A:5B:19:61:F2:48:1B:10:91:74:D8:7B:91:76:6B:BF
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019D37890D990D6604E4EB877180DAA311BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: 4Wrio_4iNnpl1Y6QGrJWPm_-8xA.roa (hash: 6jBbtoStgIk6zifFLk4lujFoBwI6HFMnQNdG0panh3s=)
2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: Zn+BpqGmohg5tjmyeHKXjvyUJsZ+2gQLYLhuaB/Z/Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0d:99:0d:66:04:e4:eb:87:71:80:da:a3:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=0dd3458e6a5b1961f2481b109174d87b91766bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:7d:98:c6:11:20:19:8f:6b:78:62:5a:17:
78:e7:c2:81:65:7e:51:13:d2:57:63:be:83:59:80:
fd:61:b2:b8:a6:5e:4b:2e:90:31:48:91:1b:d4:4b:
25:3d:42:f3:a7:d3:78:bb:85:23:27:7d:38:09:2a:
d3:d5:93:8d:81:66:6f:23:64:6e:c3:96:9b:d0:da:
31:e3:e1:bb:c6:3e:64:7f:fb:d9:61:03:55:f2:86:
55:e0:dd:c3:3b:46:80:92:b0:d4:79:5c:c2:96:ad:
e9:12:1d:2e:9b:79:4c:54:c9:46:39:c8:d0:6d:42:
cb:a1:29:7f:63:ee:b1:7d:bb:de:08:0f:11:b7:d9:
03:65:60:2f:29:b5:27:46:ee:a2:c4:6c:51:85:22:
79:2e:97:2a:88:f3:13:88:80:60:49:9b:47:03:31:
ba:1f:0a:c2:81:d3:9b:ac:e5:8e:74:73:3c:cb:1d:
e3:3c:a8:3c:97:4f:81:37:e3:38:49:0b:de:4f:b3:
25:52:c2:f8:91:50:23:62:69:96:49:2e:7e:8f:6f:
0e:41:3f:1c:7f:45:98:49:2a:10:be:95:e8:cf:84:
4a:a7:25:59:2a:e6:d5:df:39:60:11:2a:d5:19:d2:
88:1f:1e:e0:f0:48:44:4b:8f:60:a5:95:0e:36:84:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:45:8E:6A:5B:19:61:F2:48:1B:10:91:74:D8:7B:91:76:6B:BF
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:92:09:40:7a:5c:1f:c0:33:45:54:3e:ca:7e:bd:8e:09:8e:
c7:59:c3:6d:d3:4b:fb:ca:d4:f6:00:bd:ac:f5:66:ee:db:e1:
b4:2e:98:22:0b:10:6d:1a:74:ba:78:9f:20:29:eb:4b:77:d0:
fb:a7:54:ac:94:46:4a:d2:e0:b6:38:0e:c1:4f:bb:63:32:15:
ec:16:e3:6b:23:d1:71:34:d8:85:f0:ed:da:88:49:44:08:59:
bb:ab:cf:6a:81:ea:cc:20:15:9a:05:3b:32:d8:d7:fb:58:1c:
27:cd:20:50:63:7f:f8:8c:c4:76:f6:4f:39:0d:55:34:79:80:
e8:a3:86:88:22:e0:48:7b:50:e8:da:7f:46:ea:37:25:b6:ee:
91:d1:8e:2d:25:ed:08:d8:55:17:72:16:fb:e8:65:03:97:e8:
cc:7b:b4:84:86:a2:69:7d:f7:12:31:25:52:49:cd:66:bb:cf:
0d:8d:cb:4d:aa:16:8c:7c:64:2a:41:e0:22:15:1b:d2:62:74:
4c:25:93:2f:2d:d8:2d:a9:85:13:c3:d7:80:2e:22:cf:0e:4f:
c0:c6:b7:66:6c:f3:98:7c:aa:4a:54:94:fa:f3:eb:d7:3e:cb:
e0:36:59:98:7e:59:c5:39:9b:15:5e:d3:53:70:a7:63:d2:3e:
4e:42:7d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:13 2026 by rpki-client