
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: 3xlKomJuuk0bb9oZIgh7q7RE5Y/OAKowU2mdv+HePo8=
Subject key identifier: FF:E5:12:55:FF:FE:4D:94:42:F6:DA:BA:0F:0B:AA:C7:94:BF:7D:34
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019E31178FC8A7BEDC1AFB237838BBE56ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 15FC
Signing time: Sat 16 May 2026 14:01:28 +0000
Manifest this update: Sat 16 May 2026 14:01:28 +0000
Manifest next update: Sun 17 May 2026 14:01:28 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: V3I0l5MwB15CFd00XzQFzouxkw7avB9iwnJuNvi9Hr4=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:8f:c8:a7:be:dc:1a:fb:23:78:38:bb:e5:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: May 16 14:01:28 2026 GMT
Not After : May 17 14:01:28 2026 GMT
Subject: CN=ffe51255fffe4d9442f6daba0f0baac794bf7d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:2e:b2:37:64:5a:67:b1:a7:26:f8:fb:58:
cc:8b:05:d0:a4:f3:61:c1:32:a9:3e:b6:67:aa:05:
0c:b3:25:ac:c3:c9:49:61:ea:12:64:73:dd:6a:fb:
e5:c7:07:65:ba:e1:4e:8c:b8:31:89:1f:21:f6:3d:
25:f7:44:65:28:75:18:a9:08:21:8f:c4:95:ce:7e:
96:7a:2c:4e:db:b1:b2:73:d4:0b:5a:cd:5c:73:d5:
0e:55:06:53:0f:11:c9:2e:69:e1:bb:a4:71:d9:e0:
01:11:6b:ca:30:7f:5f:bb:f6:91:2b:db:6f:af:45:
0b:de:de:8d:4f:5c:f2:cc:e0:49:ff:e7:65:60:42:
53:ec:fd:7a:ff:ec:b2:96:ab:3f:39:ef:86:53:60:
24:a1:94:04:26:d1:48:95:4d:4b:1b:99:b1:86:a7:
76:57:32:ee:60:2b:c8:2f:0f:80:68:7d:2f:ac:47:
1a:5d:66:a3:66:ad:d0:f4:18:18:4e:d3:31:51:8a:
06:a4:09:41:31:d8:91:06:1a:b9:af:19:d1:c4:54:
50:3c:b2:a2:10:a2:c9:82:38:2f:59:73:fa:5e:da:
6f:6e:a2:42:ba:bf:f8:71:00:4d:e4:3e:f4:41:02:
d0:1e:95:43:88:df:0e:b2:79:31:a5:93:e3:c4:a8:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:12:55:FF:FE:4D:94:42:F6:DA:BA:0F:0B:AA:C7:94:BF:7D:34
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:69:95:5d:8e:17:a8:5b:0c:6d:a8:08:55:73:ad:d4:ba:
0e:b0:f6:aa:3e:38:b8:25:09:be:4e:24:46:22:c1:99:b1:0c:
92:50:fa:db:5b:9a:10:d7:36:c4:80:ee:14:56:3b:a6:b1:43:
53:27:3d:55:48:ab:04:51:af:12:32:73:21:7f:e4:61:62:e9:
4a:dd:40:43:7a:9a:5b:0b:82:9c:47:af:c2:c5:e5:7a:00:15:
4e:2e:f6:12:f5:51:a9:a4:07:fd:09:7d:6c:82:5b:3d:47:69:
f1:8e:d1:cd:f6:f3:65:5e:61:a6:ab:f1:ca:f3:a0:39:e7:bb:
b5:df:da:c4:6d:8f:a3:44:d1:28:a9:d4:67:8e:12:1b:2d:9c:
ec:e4:6d:89:52:ab:60:2e:0c:52:cd:ec:3e:5d:01:ee:64:34:
a4:f3:bf:da:1f:0f:d7:24:26:cb:60:70:f9:ae:b6:ee:15:c0:
38:9f:28:bd:2f:6c:4c:3a:89:2f:ea:d1:23:46:74:6f:76:14:
22:3a:ba:96:c6:54:b1:59:68:80:ed:d4:0a:8d:08:61:16:30:
a7:98:a2:a8:85:c8:b5:57:88:22:a6:95:69:5c:a4:68:55:26:
98:29:7c:71:65:50:09:59:5c:c5:d8:5c:7e:f5:29:d4:2e:34:
2b:ec:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:28 2026 by rpki-client