Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: xsYgyIsKyNWi/XWFqvDtGiC8/KdRmVNmAgobdlN9doY=
Subject key identifier: 31:F4:0D:05:B0:E7:CF:90:7A:27:5B:53:D4:2B:D5:7B:CF:62:0D:D2
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019D3A1C2E240240770DE095476E44945824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0ADF
Signing time: Sun 29 Mar 2026 15:00:18 +0000
Manifest this update: Sun 29 Mar 2026 15:00:18 +0000
Manifest next update: Mon 30 Mar 2026 15:00:18 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: Z/oveiJMYi53dd2HR9XMkfEG267qBLrCdXNJjnFSNBs=)
2: nWV2WhqZ994NDP00nWeEB2vRwb0.roa (hash: Cup9ltThtrCZ1UgDAuujOsPqhg/Kcg7e9Ea+9DWDXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:2e:24:02:40:77:0d:e0:95:47:6e:44:94:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Mar 29 15:00:18 2026 GMT
Not After : Mar 30 15:00:18 2026 GMT
Subject: CN=31f40d05b0e7cf907a275b53d42bd57bcf620dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:22:9f:43:ed:15:91:9b:73:16:dd:17:7f:
2a:94:b0:ed:de:af:04:1b:e6:80:c8:de:48:35:1e:
ee:d0:d5:d2:18:f8:d8:41:6b:5f:83:06:70:15:0c:
dd:7f:80:fe:0e:21:bd:03:06:8a:a8:b9:59:ac:d4:
79:6d:37:df:96:6f:96:7a:db:08:52:df:5f:a9:86:
b2:97:b8:cd:62:c4:43:b1:74:89:0e:cb:85:bb:b7:
5a:6d:d5:c7:90:fc:79:bc:46:07:8d:2b:96:37:84:
59:be:ed:9c:6e:9a:23:ed:e1:d8:9a:86:00:0b:c4:
05:14:6f:2a:25:1d:c1:d5:c8:79:bd:47:20:a7:58:
23:a3:eb:8c:a7:86:07:c3:d6:84:36:ca:0a:a8:6f:
11:ec:b5:80:92:54:e2:a6:85:c1:a3:8f:80:46:66:
9a:68:ab:da:49:45:ce:d2:30:2a:4d:25:95:97:ba:
b8:ba:fb:ef:d5:8d:0f:78:d3:42:b2:0c:3e:c3:dc:
b9:fd:85:b4:71:dc:a0:49:ca:b0:a3:a8:2e:6c:f2:
d7:e5:79:17:23:6a:c6:fc:11:c0:d8:4e:e1:b9:2d:
d5:8b:60:e4:6c:93:71:79:2d:fc:5b:c1:cd:8b:dd:
f4:b8:17:7d:6f:53:80:12:da:df:47:32:41:be:b7:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:0D:05:B0:E7:CF:90:7A:27:5B:53:D4:2B:D5:7B:CF:62:0D:D2
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8e:f1:c3:16:5c:38:d5:33:1c:3d:40:82:b3:58:c6:41:60:
6d:f2:db:59:b0:c2:ac:0e:b0:39:38:be:e3:59:fc:27:64:c9:
b3:08:42:84:c9:f7:07:c1:38:82:28:d2:b4:0f:2b:a6:aa:35:
10:99:15:ec:75:be:a9:2e:f8:b1:2e:13:a8:8f:92:cb:a7:69:
17:30:18:7b:96:3a:2a:6c:ab:91:b1:5f:c9:2e:d1:72:fa:6c:
fa:17:31:ce:e6:8e:a7:e0:66:79:ed:47:b5:46:93:aa:e7:ad:
df:6d:3b:86:2a:6e:51:63:06:cf:9e:9a:02:d8:10:aa:31:2e:
18:fe:94:8c:f9:a8:09:bd:55:80:f4:af:19:44:44:f0:99:58:
48:ac:f1:7f:0e:81:5b:44:67:4d:41:43:44:c5:01:14:01:d2:
a3:70:df:4d:ce:14:72:ee:c2:64:56:e2:93:f5:44:a0:c8:a1:
60:c2:cc:9f:88:e9:f3:53:bf:2c:a4:5b:64:9e:35:81:6a:64:
9b:a9:29:72:fa:8f:34:b7:3e:77:83:21:78:3d:e0:65:c0:fe:
6a:1b:04:ce:74:58:6f:82:c5:41:08:25:4d:41:37:b2:7c:1e:
b5:f5:25:12:b5:f7:75:4e:e2:dd:d7:6a:b4:4a:84:70:94:b0:
03:74:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:40 2026 by rpki-client