Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: xMKPgU6Y5Say7jVoE+Srudw+IqHAmNUs300Q8C7MQ5Y=
Subject key identifier: F5:A4:1C:C0:2A:3E:72:68:97:0E:C3:4D:63:A2:5B:8E:3D:04:C0:78
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01A17DE10B1A7F09CE9A98C64190B3E2466D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 06E8
Signing time: Tue 27 Oct 2026 15:01:02 +0000
Manifest this update: Tue 27 Oct 2026 15:01:02 +0000
Manifest next update: Wed 28 Oct 2026 15:01:02 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: TS4JZLqEAydJkZNajw14bhU842WVLZKR7opmYl7v3f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:0b:1a:7f:09:ce:9a:98:c6:41:90:b3:e2:46:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Oct 27 15:01:02 2026 GMT
Not After : Oct 28 15:01:02 2026 GMT
Subject: CN=f5a41cc02a3e7268970ec34d63a25b8e3d04c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:4a:10:62:c0:d5:c1:12:12:cc:4c:ff:50:
94:0d:fe:ca:14:aa:f9:14:8c:03:5f:4c:a1:90:15:
7d:6b:e9:c2:30:b6:8a:c6:88:6b:51:bd:f5:6a:37:
38:a3:a7:8f:d9:23:a4:96:8b:23:d1:56:f1:3f:2c:
1d:9d:a3:72:f3:bf:3a:28:44:e7:b0:e0:2c:87:e2:
1a:2e:d6:20:e0:55:94:20:ee:35:5f:00:8f:97:dd:
0e:0a:16:28:99:1f:ea:cc:d9:47:d4:ba:e4:3b:61:
35:df:92:01:2f:cf:da:d4:47:a2:63:c9:9c:96:44:
cf:29:e9:2b:0f:73:13:db:f9:21:f5:e9:4f:30:23:
9c:cc:8b:73:ec:d1:17:62:46:3e:12:1a:6f:28:c6:
8b:f0:16:db:09:87:f2:8a:a1:92:b5:21:91:5d:ee:
45:63:13:83:84:a3:00:f5:9f:cf:4a:a7:fc:24:67:
45:ca:22:e9:90:30:0c:25:31:ea:a8:44:4e:c8:e4:
19:58:74:af:18:94:9d:b6:23:41:d4:fc:3b:95:76:
7d:fa:5c:cd:9f:5b:f1:7e:22:77:90:16:65:e4:b4:
f7:e1:74:8c:8b:e3:3c:b5:73:0a:0d:dc:ad:0a:20:
ee:3c:be:46:9d:49:56:ad:d4:79:bd:42:1a:39:db:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:1C:C0:2A:3E:72:68:97:0E:C3:4D:63:A2:5B:8E:3D:04:C0:78
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:7f:31:bf:58:20:85:7e:5d:d4:cb:1a:ef:8e:08:47:72:
1e:4b:82:11:ca:3a:b7:8a:24:fd:cc:59:ac:fc:4e:1c:9a:e9:
3e:79:c7:91:36:30:35:7a:0d:dc:98:12:1c:cc:da:92:17:53:
dd:33:98:19:79:eb:0f:49:0e:20:b5:01:74:ec:e3:62:a2:c9:
b5:8b:28:e7:b4:e9:0b:60:ce:13:28:51:f4:5b:68:e0:ea:bf:
bb:89:e8:95:36:93:41:a1:f9:54:8b:28:98:5c:d7:bd:1f:49:
4d:d3:3b:4c:e8:dd:a0:b0:25:b4:1a:cc:b1:6a:3c:c0:14:a1:
df:38:d7:cb:7c:66:de:6e:a2:ee:56:d4:1f:be:df:b7:af:d6:
b6:f8:78:a3:43:51:a0:f5:f9:e6:27:b1:77:5c:31:49:27:58:
29:d1:b8:b8:14:dc:b1:df:2e:30:60:17:41:18:cf:6b:07:52:
f7:b7:99:5a:85:17:98:56:b4:be:cc:45:d0:b6:e5:1e:63:b8:
83:42:17:4f:de:00:9e:f4:11:a2:2d:20:4e:79:2a:f5:0e:07:
3c:4f:a5:a4:1f:2d:8b:24:0d:80:3d:b8:44:fa:21:f5:83:dd:
f6:69:a0:e0:f4:b3:f2:0f:77:95:42:78:e1:5f:09:b5:b1:79:
fd:1c:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:47 2026 by rpki-client