Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: SAqZ8+mkFDe6zzWYQCthWICV2aQCqabzjXW6ubaAro8=
Subject key identifier: ED:06:9C:3B:C0:0D:F7:17:55:66:F1:94:6D:C4:64:35:F0:BC:FC:56
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 01A14CBE07480DA848BC22DD47E2EABDC74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 02:01:24 +0000
Manifest this update: Sun 18 Oct 2026 02:01:24 +0000
Manifest next update: Mon 19 Oct 2026 02:01:24 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: 3wKrPPODL7WRXxVmDD+LTV9H+gbkgJ7EhOb8HuNo3wo=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:be:07:48:0d:a8:48:bc:22:dd:47:e2:ea:bd:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Oct 18 02:01:24 2026 GMT
Not After : Oct 19 02:01:24 2026 GMT
Subject: CN=ed069c3bc00df7175566f1946dc46435f0bcfc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:ff:8e:fc:ec:f8:2e:28:fe:6c:d6:40:44:
1f:07:cc:b0:03:9a:6c:f7:8b:fd:3c:b0:48:05:c8:
83:19:de:da:4c:2f:6b:50:dc:fe:c9:39:6a:47:c8:
12:84:92:e4:8d:12:22:49:1d:75:05:16:74:b3:29:
bf:ae:0f:11:fa:a8:2d:17:34:eb:a9:1e:09:68:2a:
b3:f3:26:82:9d:0d:59:ed:db:7a:26:51:cf:d8:05:
d5:d7:bd:15:47:de:fb:e2:4d:b4:a5:e2:89:f8:a4:
3d:27:aa:14:8b:71:de:53:cf:74:49:a4:b5:ff:14:
f6:0d:50:d2:b7:7d:72:85:17:d2:76:33:5f:51:10:
50:88:d3:46:e3:d6:47:d5:c0:5c:e5:2e:4e:ad:fc:
35:c4:1c:03:19:38:b5:9b:ee:5a:47:79:ef:13:25:
67:94:7c:94:07:15:67:e8:d6:fc:03:6c:7b:ad:ba:
9b:7d:ae:c6:26:8f:c5:02:80:a9:0a:32:b7:fc:4c:
ef:a9:cc:77:42:66:36:66:1c:ad:83:97:ba:67:5d:
e3:c3:61:1f:ff:3a:56:13:3a:a4:c1:38:98:4c:f0:
88:19:79:b4:7d:01:35:72:f5:96:91:08:1e:06:da:
77:15:f3:0f:36:99:bd:dc:cd:2d:26:da:ea:82:82:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:9C:3B:C0:0D:F7:17:55:66:F1:94:6D:C4:64:35:F0:BC:FC:56
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:da:39:07:46:d6:ed:8e:fb:a5:51:b0:e6:f2:2d:e8:93:7c:
7d:e1:4c:a0:30:85:92:51:03:5a:d1:68:5a:d1:9e:81:59:46:
26:8f:8a:0f:01:32:ca:a5:fb:b5:3d:c0:b5:52:2a:47:55:49:
79:2f:df:40:1e:49:3a:38:71:bc:2c:94:3d:94:66:12:9e:0f:
95:1d:47:8e:c5:33:ec:f9:2e:36:77:30:90:d9:2d:43:fb:d4:
0d:89:12:e7:c4:55:43:2b:59:dc:67:13:79:df:f1:64:d4:87:
f9:d1:28:02:ce:89:e1:7e:45:13:cf:89:1f:14:81:31:10:9a:
5e:a0:44:a1:10:69:cb:10:50:20:b4:98:60:a0:3f:0f:33:30:
8e:6f:a8:8c:48:31:37:b4:76:f3:59:02:dd:31:f2:98:92:fc:
6b:7b:ff:94:70:e9:e5:58:f2:58:b2:e9:1c:3b:db:2a:ff:e3:
15:e1:63:92:8e:6a:3c:c0:29:be:86:c4:71:19:9a:7d:5f:b3:
73:8a:d3:d8:2a:74:8f:8f:eb:7e:6c:30:f6:d1:41:de:f9:49:
17:50:9a:28:bf:c4:ce:fc:d4:02:79:59:f4:7f:73:27:23:fd:
2b:72:d5:8c:0c:79:92:6b:f6:25:e7:4d:57:65:9b:a6:8d:5e:
cf:7b:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:09 2026 by rpki-client