Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: 3mnWit9ovBLM318CE1vqHv9jLK2zwvAGGuGDTXzegqk=
Subject key identifier: 0B:51:1C:CD:04:C1:EC:25:C8:09:3D:BA:62:F0:74:C8:25:6B:6D:7A
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01A08A8C937550501E20D022548B3060E106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 066A
Signing time: Thu 10 Sep 2026 09:01:03 +0000
Manifest this update: Thu 10 Sep 2026 09:01:03 +0000
Manifest next update: Fri 11 Sep 2026 09:01:03 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: PJ9Fjd+pX9fI+tuUBuK0I32fFT0ibO3/TBnqoegvQlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:93:75:50:50:1e:20:d0:22:54:8b:30:60:e1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Sep 10 09:01:03 2026 GMT
Not After : Sep 11 09:01:03 2026 GMT
Subject: CN=0b511ccd04c1ec25c8093dba62f074c8256b6d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:66:b9:f8:62:92:89:ac:9e:88:91:77:32:
8e:64:05:0e:45:8b:fc:30:32:35:36:5b:07:ee:86:
de:ca:30:4e:1e:11:79:40:dc:6b:25:9e:b9:71:32:
33:70:2f:1e:59:42:59:d6:bc:1b:94:82:d3:c3:43:
c6:93:94:c6:70:ee:50:e2:96:1a:1a:4a:d9:67:17:
b7:a8:79:49:a2:14:66:ec:2a:15:e9:82:f6:99:0b:
26:ad:25:ef:34:d8:16:94:51:22:56:02:04:dd:40:
04:01:3f:49:de:7d:96:e7:99:59:c2:86:36:8f:8d:
7e:90:96:ea:29:af:aa:0e:0b:9f:2c:62:94:6d:60:
04:d8:96:6c:f0:b6:20:d1:1e:99:92:e8:27:57:95:
d0:b4:c8:62:0d:77:fb:aa:78:2e:49:4b:fa:4d:cc:
1f:04:c5:64:ec:61:16:f4:45:4c:d6:ea:41:a1:80:
dc:a8:53:e0:8d:44:2d:d3:83:b5:b6:fa:ef:7a:91:
e3:2c:1f:f8:e7:77:ef:cc:81:ed:13:7a:e0:76:9a:
7b:dd:9a:99:ad:21:7b:54:b4:39:66:1d:3f:75:b7:
fd:0c:18:27:43:a5:97:ba:14:56:60:9f:99:c1:a6:
c5:3d:5e:38:e1:4b:11:c9:93:64:24:21:4e:64:80:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:1C:CD:04:C1:EC:25:C8:09:3D:BA:62:F0:74:C8:25:6B:6D:7A
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c4:03:ce:cc:62:c5:9a:02:41:5e:0b:a6:3d:ad:35:af:f6:
ef:0f:ea:6a:09:a7:54:d6:28:25:d3:a2:16:31:4c:c6:09:74:
5c:3f:87:68:96:8c:ab:87:9f:05:f6:ef:70:19:c6:bf:a6:6c:
7b:09:79:fe:38:58:6f:68:34:8a:59:f9:dc:da:d2:a4:ea:08:
cd:aa:77:77:a4:9f:65:58:f0:b1:05:87:67:2a:9c:b7:65:98:
49:f2:af:34:f4:56:ed:7f:73:59:6a:ae:6a:c2:39:0b:de:db:
34:fd:3f:e1:59:59:b2:4d:14:cc:33:27:e8:05:7a:5c:a9:d3:
cd:5c:24:92:df:72:7c:2c:c0:4e:95:82:fe:b5:b8:e5:12:51:
0e:1d:c4:bd:0c:4e:19:cf:e8:65:2a:14:b9:f9:4e:a1:3a:6e:
1e:f8:6b:78:cb:fa:3a:16:7c:60:6e:d8:62:b9:a9:72:23:fa:
51:ce:d0:9f:62:02:3d:b8:80:d4:56:af:74:fa:3d:d5:82:57:
e0:92:e1:e5:08:ec:61:30:dc:cd:5a:a0:f8:03:ba:6d:4b:1b:
eb:6a:1c:a6:cb:62:ae:5e:a6:ba:f0:5f:28:46:c2:08:82:b1:
fe:12:60:af:93:4a:c7:82:6c:a8:fc:3d:0a:ba:f4:69:5b:2f:
76:e0:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:16 2026 by rpki-client