Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: eTgobtdXV7J6upNihviDKuI4vj/B17twVx81kzAsNhE=
Subject key identifier: D1:D3:C7:90:DB:7A:79:9E:4F:F5:07:82:89:39:6B:73:3E:4E:39:C9
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 01A002821B0788816D250D4767565725F4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 23:01:15 +0000
Manifest this update: Fri 14 Aug 2026 23:01:15 +0000
Manifest next update: Sat 15 Aug 2026 23:01:15 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: PPZt05GKNsdHCzwceJxWIq+p34UqbhRbjCVSB45Lr3A=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:1b:07:88:81:6d:25:0d:47:67:56:57:25:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Aug 14 23:01:15 2026 GMT
Not After : Aug 15 23:01:15 2026 GMT
Subject: CN=d1d3c790db7a799e4ff5078289396b733e4e39c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:24:40:1a:83:15:3f:7f:7b:c4:9e:e2:aa:
ad:25:7d:c7:9a:54:54:6b:6e:f8:22:bd:11:c6:7d:
18:c8:0c:d7:12:93:a4:4c:ef:04:a0:1c:c5:ca:11:
70:d9:98:47:4f:45:19:b9:55:0d:aa:67:dd:29:9b:
f6:c4:5e:a2:a8:38:e2:22:ae:5a:d7:7a:8a:45:70:
65:21:ed:ef:06:8f:43:d4:0b:c3:d3:1b:b9:15:97:
fe:3a:4b:0b:f5:af:93:58:3e:d8:85:81:a8:f2:c8:
63:f7:0b:2b:1a:0f:70:3f:02:8d:1a:35:ca:f1:1c:
c9:0f:5f:14:4a:66:7b:ac:f8:d6:15:76:e1:12:64:
22:e7:68:09:be:66:d0:87:77:c7:c4:ce:03:ea:06:
46:f6:8d:cf:5f:6c:f1:00:8f:a0:60:d4:a8:13:96:
17:68:e5:1f:6f:c6:4e:8d:7b:6c:e3:7e:28:9f:f9:
61:c0:c8:f0:80:6e:d2:9d:1f:4a:1f:5b:0b:37:05:
bc:fc:81:46:01:e9:de:68:fe:52:57:f4:80:db:5f:
c1:4c:cc:2e:09:5d:59:19:a3:ff:d5:7c:14:27:5f:
f5:8a:80:28:5a:38:7f:d7:ae:7c:d7:21:ef:3d:c7:
d0:2a:08:4a:be:f6:25:19:9b:a6:a2:59:78:44:ae:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:C7:90:DB:7A:79:9E:4F:F5:07:82:89:39:6B:73:3E:4E:39:C9
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ac:2b:bf:bd:6a:51:6c:18:ec:d7:f7:14:ff:e2:1b:94:e6:
e6:3a:9f:6b:5e:37:61:a0:2e:53:1b:0b:42:31:57:a7:d0:b9:
e6:81:8d:83:6a:77:93:fc:d5:0a:a5:89:38:e7:64:5a:d8:a7:
5c:55:0e:69:16:9e:04:bf:d1:03:23:ab:a4:d9:1f:3a:3f:b9:
84:6f:f3:f4:7b:19:e9:1a:56:8c:ac:db:f6:c2:04:9e:41:22:
db:37:22:c3:43:4f:d9:19:ff:04:7a:61:99:e0:f6:31:9d:09:
d9:20:71:3c:a7:cd:1d:2e:eb:fa:8b:dc:6c:f7:90:03:b2:b5:
9b:4e:1a:d0:ff:b3:1a:0c:01:d6:db:31:5e:fd:a9:54:dd:90:
23:c6:e3:31:9d:02:f8:63:16:fb:8a:8b:52:30:85:05:0f:ef:
07:23:76:f5:71:15:67:31:70:d1:93:a6:8c:23:c0:e7:1a:1a:
91:39:51:55:01:38:05:fb:06:d5:b7:3b:21:16:a3:30:1c:af:
e4:c2:26:36:db:4e:e2:54:c3:cd:60:fe:9e:f5:41:7f:1f:7a:
d8:f3:5d:a6:7b:ab:12:75:0f:3d:11:89:4d:df:bb:99:65:19:
c2:06:1d:cb:10:92:93:04:aa:9b:67:bd:c8:09:b7:78:13:b7:
4d:af:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:22 2026 by rpki-client