Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: ZTszPMbggWK9BET5vlnnbKoErN8AqaQY5wn9b6U0D3k=
Subject key identifier: B0:8B:16:1D:C6:8C:FE:3E:03:47:66:73:36:F5:66:34:49:3F:1A:49
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01A0016F5F8D4DF14BE74372F22D77AD8A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 18FE
Signing time: Fri 14 Aug 2026 18:01:11 +0000
Manifest this update: Fri 14 Aug 2026 18:01:11 +0000
Manifest next update: Sat 15 Aug 2026 18:01:11 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: PWpxEYXXCCiz9T1+MmDAZlj4j0+oZXMrJqagAz9wwLM=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:5f:8d:4d:f1:4b:e7:43:72:f2:2d:77:ad:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Aug 14 18:01:11 2026 GMT
Not After : Aug 15 18:01:11 2026 GMT
Subject: CN=b08b161dc68cfe3e0347667336f56634493f1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:ba:21:dc:a8:b6:be:f0:a6:65:ae:91:ca:
3a:0e:ee:af:d6:8b:17:0a:b8:03:33:bd:7f:52:f2:
f1:c3:79:76:44:1f:46:12:e4:3b:a7:4f:00:f0:34:
45:9d:e3:43:b5:eb:d1:05:f3:60:61:8a:58:70:64:
16:37:6a:c7:fe:6c:f8:9c:86:34:3d:00:9c:12:1e:
5e:2b:fc:a6:6b:0d:27:46:fc:2c:47:17:48:fc:da:
f7:89:76:51:5e:7c:02:fd:7a:3e:d1:84:67:95:d9:
a7:cd:a4:e6:92:d7:90:24:0b:cc:a5:1a:2b:b4:78:
4f:2c:56:03:13:2a:91:53:76:03:db:23:a7:27:b0:
ee:be:0d:04:af:d9:d3:38:a6:54:93:23:ad:7b:7b:
4a:2b:1c:d5:cf:ce:56:93:b5:36:91:94:10:60:15:
87:39:b8:5e:82:b3:d4:61:af:23:bd:e0:cb:1d:9a:
2d:e8:c6:fe:f8:da:ce:75:cf:74:c2:dd:1a:4d:6d:
a3:90:3a:16:53:79:f3:41:76:b7:dd:e1:7f:45:7d:
4f:6c:da:0f:91:f7:4b:0a:e4:57:d5:3b:b6:67:1c:
9f:9b:49:83:c1:28:3e:8a:63:94:8e:8d:c1:f0:3e:
99:b7:17:9c:10:b0:7d:49:39:9f:da:5a:ac:eb:3a:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:16:1D:C6:8C:FE:3E:03:47:66:73:36:F5:66:34:49:3F:1A:49
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:21:d9:10:4a:31:70:a6:73:94:34:2e:9f:16:f5:ac:12:c1:
e6:36:f5:e5:82:89:25:72:37:05:f6:ab:fe:5f:47:f0:8b:98:
a5:09:ad:f1:b1:6b:cd:3c:04:f7:0f:a5:0d:c5:8b:8f:ca:c5:
1a:c7:60:9f:b4:5c:e2:df:12:14:af:fd:c2:75:79:c7:d1:87:
94:c8:c5:0f:02:bf:ea:0c:e5:9a:ad:a4:bc:d0:c7:cf:97:f9:
59:92:f7:c1:a6:d8:0b:c7:b2:cb:09:86:2b:56:58:30:2e:fd:
37:dd:00:1d:19:55:fc:16:b2:0e:52:81:db:18:95:80:d6:66:
df:75:13:3e:20:52:84:78:58:a1:9e:cf:b8:70:24:b8:93:5a:
6a:37:47:83:2e:c2:23:cc:d9:da:67:95:3c:e6:80:5a:89:fc:
18:a2:ce:14:ee:10:40:a5:d7:53:9f:32:19:31:33:9e:cd:9d:
cd:02:aa:33:c9:08:10:3c:35:d1:7c:28:3d:2d:f1:a6:44:ba:
c6:4e:cd:3b:48:7c:dd:bd:ab:e1:b1:0a:d4:bf:b3:eb:95:ac:
0b:1d:e2:c8:e3:bb:71:81:9b:94:cf:9f:3a:29:08:99:49:36:
98:f2:5c:21:75:43:b7:bd:55:46:61:30:6e:83:2d:3d:c5:ac:
c5:9b:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:02 2026 by rpki-client