Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: 3u7PEm5zNp7rtMvzSzgjcn2f63kCNLtdt3/JBEDH3fY=
Subject key identifier: 3B:3B:FB:51:9E:9F:B0:1F:12:CB:16:80:25:12:1F:D0:DB:E6:C9:05
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01A0035DCE8C7C44A32B9FB61B5B5AC6B71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 18FF
Signing time: Sat 15 Aug 2026 03:01:14 +0000
Manifest this update: Sat 15 Aug 2026 03:01:14 +0000
Manifest next update: Sun 16 Aug 2026 03:01:14 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: tY1I96Dr5V2RDexovw/3p8j7MWIyun13SJWXq/v7Cuk=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:ce:8c:7c:44:a3:2b:9f:b6:1b:5b:5a:c6:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Aug 15 03:01:14 2026 GMT
Not After : Aug 16 03:01:14 2026 GMT
Subject: CN=3b3bfb519e9fb01f12cb168025121fd0dbe6c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:2f:27:da:3e:9a:f8:67:f0:36:ca:4e:13:
3f:f1:0c:90:bb:6b:2d:2c:a0:e9:e4:fb:91:d3:e7:
98:a6:86:db:61:d8:4f:20:53:32:29:6d:38:b0:0b:
73:e1:cb:c9:30:25:ae:b9:21:d7:da:8c:b4:d4:77:
5d:b3:e8:af:96:ae:c7:95:3a:c4:b5:98:81:d6:9c:
d1:01:c4:36:df:f5:17:27:45:61:ae:ce:e1:0e:07:
d6:92:01:d6:e2:9b:fe:df:e4:2e:cf:4d:29:a4:5c:
9f:ff:a4:95:28:c3:60:03:cc:18:13:2a:c9:4e:91:
97:99:1b:16:3e:13:5a:a1:0b:e5:63:29:21:2b:47:
6a:ce:bf:21:eb:42:6b:63:5c:27:d2:22:15:9e:30:
96:57:5e:8a:33:98:27:3c:22:0d:91:1d:23:1a:4f:
55:ba:7e:e4:a4:56:0e:78:7e:cd:08:1f:c5:31:89:
4f:7b:a9:83:a0:27:2f:ae:f6:f7:2e:15:14:9d:f2:
b0:eb:d2:b6:69:58:d6:b3:39:67:97:8f:a1:c5:e1:
ab:f1:b2:aa:e8:3f:b4:85:0a:21:99:0e:8e:91:9b:
0e:c5:bc:f3:a2:f2:0b:1e:1b:22:a0:56:c8:9c:c3:
e3:08:9c:88:85:2c:14:b3:c1:1f:c8:80:c1:92:6d:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:FB:51:9E:9F:B0:1F:12:CB:16:80:25:12:1F:D0:DB:E6:C9:05
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:4b:51:03:2a:ef:ff:e6:3c:6b:ec:86:bc:d8:98:20:52:
2e:0e:01:1e:5e:f2:ca:8b:f8:ed:ab:47:73:16:e2:fe:d8:4d:
81:ce:fa:3e:5a:ed:cc:78:33:7f:20:9a:44:29:70:fe:62:a4:
a1:e9:63:6d:e4:1e:b6:ba:81:ac:b3:a2:d8:e8:49:9e:04:74:
3e:25:bd:f0:f9:b9:b5:25:99:71:0f:d9:55:46:0b:e5:31:54:
f3:5c:2a:e6:91:fe:30:1e:a6:1a:68:0c:3d:48:07:cc:34:8c:
8d:dc:f6:62:58:89:ff:b4:e7:de:f1:6b:5b:ce:51:c9:c9:e6:
12:92:29:a4:70:c2:1c:93:68:ac:12:52:eb:e6:6e:3e:8c:d9:
e0:71:e9:a0:c1:28:ae:9f:84:2b:76:8d:7d:e6:95:f0:71:17:
71:a9:04:db:0b:13:99:c4:97:af:9e:d2:14:45:60:25:8f:44:
a8:4b:22:3b:9e:e1:2b:55:45:b0:9a:fe:45:3e:d2:b4:ec:ec:
e1:4c:b3:77:ee:7d:9b:1e:fb:38:d1:0e:33:8b:a0:7a:ae:07:
18:9f:90:64:c3:98:00:b8:ae:8b:8f:19:7c:f9:3d:27:92:f7:
fb:c6:9e:7f:f5:4a:b2:5e:30:b1:5d:5c:53:90:5b:03:e4:61:
2c:da:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:36 2026 by rpki-client