
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: GQ7OZXT6VabVQybCZEwKTkOubfUqqypVadSYsrthiY4=
Subject key identifier: E0:AB:D1:37:6C:30:2B:03:9A:8A:55:83:A6:2E:B4:F6:3D:45:86:09
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 01A00281D77604059EC49409C3CD893E711A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 16ED
Signing time: Fri 14 Aug 2026 23:00:58 +0000
Manifest this update: Fri 14 Aug 2026 23:00:58 +0000
Manifest next update: Sat 15 Aug 2026 23:00:58 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: CpfbsgeBMizT+RdeWpievcE6nTbHMWtLcgl7yxHEtV0=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:d7:76:04:05:9e:c4:94:09:c3:cd:89:3e:71:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Aug 14 23:00:58 2026 GMT
Not After : Aug 15 23:00:58 2026 GMT
Subject: CN=e0abd1376c302b039a8a5583a62eb4f63d458609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:f8:f0:e9:2b:be:05:7f:91:66:5b:8b:b2:
01:ae:f9:1c:1b:80:23:92:82:0d:17:4a:bf:4e:0a:
c2:75:98:45:35:b2:cf:66:5c:ea:9a:41:63:b4:f7:
d5:5e:c5:a0:ac:96:b2:73:fa:a6:57:56:cd:19:af:
e7:30:77:49:a0:55:ff:e2:5a:24:fe:7d:b3:86:e5:
8c:e6:7e:09:40:0e:2f:b0:f8:0c:92:9a:93:84:e5:
3d:e6:47:63:42:d7:62:3f:0f:65:c3:06:31:59:44:
89:6c:9f:ee:49:f3:33:e8:5d:35:19:5d:54:b7:22:
1a:ff:43:49:25:43:08:f7:bb:14:be:22:7d:05:ae:
13:ee:78:2b:48:c4:c8:8b:9c:91:70:c5:53:1f:2a:
04:7a:ce:fc:55:5b:62:15:04:ac:41:a7:69:f9:45:
8a:91:37:eb:b9:37:32:9d:5c:4e:69:fd:98:6c:f6:
fc:d4:cf:e1:c4:58:1f:1f:01:fb:b5:4c:6a:03:2f:
29:b3:b6:bc:ae:92:79:84:be:49:f4:fe:62:ea:1d:
9a:7a:97:77:b9:ee:10:1e:4b:82:b1:28:74:be:93:
f6:b2:09:d1:f7:0b:4b:2c:ff:fa:70:df:77:73:90:
47:59:d2:c7:51:66:fb:44:a0:d6:42:89:4f:03:1e:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:D1:37:6C:30:2B:03:9A:8A:55:83:A6:2E:B4:F6:3D:45:86:09
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:a1:85:be:c0:1c:9a:51:0b:81:1f:9c:3a:ae:70:1c:a6:
01:06:e9:16:fc:47:e1:33:de:dc:c0:2b:e1:9f:2a:7d:77:04:
9d:83:45:12:66:97:ac:fb:87:d6:3e:d0:5d:06:57:a0:eb:31:
57:c6:31:2e:50:ba:0f:bc:62:35:5b:6e:ee:29:1e:84:1b:6c:
a0:f2:51:74:7e:74:a9:a4:50:1e:e7:52:0c:9c:b4:43:2d:be:
e8:a1:06:13:36:c3:e7:ed:45:db:c7:6d:3c:06:c7:d5:14:97:
d0:da:30:97:e9:2c:a3:e0:79:c5:33:6e:1a:bd:f4:c2:19:be:
4f:9d:2b:be:ba:8c:c4:fa:ca:b8:b6:62:51:67:e7:49:c1:2e:
2a:83:0a:d1:ad:31:1a:65:76:03:6e:8d:3e:8b:8d:e4:26:eb:
ec:0e:40:af:a6:7b:27:ae:fc:00:0c:7f:e8:1a:2c:7d:fe:1d:
10:df:aa:ed:18:8f:ac:da:5d:dc:9e:02:a8:2a:68:92:82:60:
c1:7e:c4:16:8a:44:98:fa:a4:b8:a0:40:ce:af:f5:32:0a:3e:
94:a7:dd:df:3e:c1:8c:3b:53:c9:2e:2a:55:e6:ea:b3:ba:a7:
be:54:45:51:f2:2f:03:5a:d1:cc:52:55:17:5f:96:1d:fa:65:
ee:c6:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:20 2026 by rpki-client