Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: 4xoHE++ZenhtJdmTFUZAfOAgj6hf5ozbiHALQH68iRE=
Subject key identifier: C8:EF:11:50:55:EC:B6:AF:4D:C5:5E:FF:25:5C:12:D0:E4:20:9D:D3
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019D39E5CE0EFF19FD1AEFA355AB645497B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:54 +0000
Manifest this update: Sun 29 Mar 2026 14:00:54 +0000
Manifest next update: Mon 30 Mar 2026 14:00:54 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: YPdl6BNT9WFycM4O9kotTQeMD/L1mZXr1ZBbPpencpI=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ce:0e:ff:19:fd:1a:ef:a3:55:ab:64:54:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Mar 29 14:00:54 2026 GMT
Not After : Mar 30 14:00:54 2026 GMT
Subject: CN=c8ef115055ecb6af4dc55eff255c12d0e4209dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:1f:2e:21:fc:22:45:96:ba:f9:51:18:f9:
c1:e4:06:1a:93:97:bc:56:ba:20:3a:9f:1f:73:0a:
62:2d:56:30:4b:32:d8:8b:7f:5f:70:23:c1:47:58:
97:22:8a:82:83:f7:fb:80:d0:02:40:c9:97:d4:b3:
5a:cc:4c:c4:63:84:0b:51:6b:ff:29:d9:4c:d3:84:
9a:c8:43:0e:10:aa:f1:e8:7f:e5:84:2f:d8:8a:6f:
3b:af:52:f9:11:f6:d6:0d:d3:c3:42:db:ea:83:45:
d5:be:1a:6d:dd:dd:b4:4c:32:12:e2:1b:e5:fb:29:
02:00:67:8a:f9:f3:ac:6d:96:50:52:eb:40:de:d1:
e6:85:ec:f9:db:eb:fc:63:fa:a9:fd:cc:d1:6f:54:
89:49:74:88:52:03:3f:e7:2f:47:cc:54:37:6a:92:
c1:2a:1c:b6:ee:7b:42:b2:93:f8:52:f3:e3:36:ac:
96:7c:a7:81:bc:b9:d4:bb:7b:be:f4:db:85:47:da:
1d:c4:2a:c2:5e:9c:f8:8a:49:a9:01:5e:68:66:bd:
49:ae:a8:eb:65:e0:5a:95:7d:53:8e:df:19:af:b6:
5b:17:a7:09:a4:1f:da:bd:02:bf:21:8e:ef:61:a2:
3d:fd:3d:99:ee:69:1e:b3:78:9f:4f:9d:a2:f3:d9:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:11:50:55:EC:B6:AF:4D:C5:5E:FF:25:5C:12:D0:E4:20:9D:D3
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:43:9f:38:da:42:ff:7f:75:6c:19:3e:28:ad:99:af:4b:
d8:fe:84:3e:54:11:2f:77:c1:01:0d:a0:fb:cb:be:58:22:39:
1d:8a:54:56:47:f2:43:64:a5:69:2d:89:16:93:42:a6:4b:bc:
fd:e1:0a:d2:f2:ef:2c:f4:21:af:93:c8:f0:8e:1e:c2:4b:f0:
cf:11:be:ad:04:dd:3f:e6:95:95:4e:d6:1e:e1:fa:72:36:16:
aa:7a:88:d1:05:aa:0c:d8:d4:1a:13:fa:0a:c8:35:e7:8e:e8:
10:78:d2:0e:9e:9a:41:3f:a4:28:3c:fb:05:a5:c4:8d:cf:42:
d2:de:cc:af:c1:c8:57:94:a5:92:31:20:86:27:54:7f:77:88:
c9:a1:67:b1:34:b2:9b:43:21:d7:fc:41:86:3e:57:70:b4:95:
fb:9f:2a:28:23:6d:59:71:1c:64:53:5c:5c:fb:b9:4b:23:ba:
0d:aa:c1:0d:92:93:8a:d2:2f:9b:3d:ae:2a:29:0c:bd:60:b7:
6d:92:dd:b3:84:a4:bf:85:c2:45:94:9c:a8:50:9a:45:76:ce:
8c:98:da:0d:f3:af:d2:17:a0:af:a8:37:08:0f:62:24:6b:69:
88:27:9a:2b:1b:92:ea:1d:c1:c5:9a:2d:f8:ff:a0:1c:5a:31:
04:09:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:26 2026 by rpki-client