Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: I8BnWhU2sNzBKlHUJwiWrY6ZRtmYye09OOZVxnwACZ8=
Subject key identifier: 07:7E:A8:80:64:74:94:28:98:09:03:7A:0E:E1:EC:F3:A6:46:CB:62
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019D38D310CEA02D9133182A758C2AD04E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 178D
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: qxfqgySFiczISLV+4d1vpPbKmoj8Pjw4Z02NwVI1Opw=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:10:ce:a0:2d:91:33:18:2a:75:8c:2a:d0:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=077ea880647494289809037a0ee1ecf3a646cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:1a:5a:35:34:a9:b5:25:ca:27:3a:ec:46:
e9:e3:3a:68:a0:e6:2e:46:5a:ab:8b:dd:2e:25:65:
ea:12:17:8f:8f:b1:06:78:18:99:dd:1c:1c:0f:f5:
e5:8d:32:a8:28:b2:38:1e:f1:46:76:9f:a0:09:60:
64:0d:dd:2b:fb:c2:8f:3d:b3:25:03:a4:25:4a:48:
71:5f:12:84:8e:cd:26:c2:2e:19:6b:6c:40:70:c3:
34:21:74:39:a7:4d:60:26:32:49:0f:11:0e:81:24:
1f:15:bc:8c:08:c3:ef:22:87:3d:23:70:e1:17:f3:
ef:01:ac:d8:85:f9:04:93:f6:81:19:87:4b:b0:0e:
21:66:32:a6:47:d5:da:81:8d:53:9e:42:9a:71:8f:
df:38:9f:48:e0:24:65:5b:54:50:f5:11:2c:29:da:
6f:67:6a:00:ae:20:ce:a5:7c:70:06:e3:ca:8d:b7:
4f:f0:1c:85:01:13:8a:5a:3b:2a:f6:c1:9a:d8:75:
7b:b9:e8:4d:ef:cf:25:72:26:a3:76:f7:c2:18:88:
68:9c:10:a8:b9:9b:5e:01:25:cb:b1:8b:0b:08:c1:
b1:47:2a:05:c3:c5:ec:01:7a:10:47:d0:f2:fd:54:
b6:ce:03:3f:b4:5f:d6:9a:7c:51:da:01:dc:80:14:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:A8:80:64:74:94:28:98:09:03:7A:0E:E1:EC:F3:A6:46:CB:62
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c3:22:24:82:92:04:b4:5d:d4:53:50:fc:3b:2a:5b:ee:52:
a0:5f:c7:16:44:68:62:a1:1a:bc:a2:69:07:c5:a2:01:58:cf:
2b:4c:f2:d2:2b:e5:ed:c6:e0:24:8e:ee:4a:b7:44:ef:60:21:
f1:f6:56:6a:96:8f:99:9a:97:ec:a5:83:f1:8c:74:68:29:84:
0b:07:5d:1d:73:03:7e:a4:52:35:23:ac:ab:9c:46:ab:a3:54:
2b:5d:56:c0:b4:f7:b2:52:51:78:94:08:f1:7f:cd:b3:7e:ff:
7c:ee:5f:bf:c6:da:33:1b:dd:7d:be:90:f1:70:df:d2:cc:d3:
e3:92:2a:7d:f1:c0:23:9f:ca:ea:69:c0:f4:19:fe:7b:28:ee:
ec:7a:47:09:1c:e5:a5:32:e0:5a:62:09:3b:40:29:41:ed:95:
99:0d:6d:37:d0:ed:84:df:b9:f1:73:a1:92:a1:cf:87:28:56:
b6:1a:d3:3a:37:7c:86:b9:ca:96:56:74:48:68:fd:5e:21:a6:
74:a3:af:1b:ff:08:37:04:d0:cd:9a:98:2c:5f:04:66:49:3c:
f5:7a:bd:44:eb:c5:6c:48:ba:95:ac:ee:61:71:6e:72:85:b1:
b1:4b:30:37:85:7a:12:97:50:d7:33:7f:38:89:6c:ea:3e:aa:
f3:c6:7a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xDOoC2RMxgqdYwq0E6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjYwMzI5MDkwMDQ5WhcNMjYwMzMwMDkwMDQ5WjAzMTEwLwYDVQQD
EygwNzdlYTg4MDY0NzQ5NDI4OTgwOTAzN2EwZWUxZWNmM2E2NDZjYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqMaWjU0qbUlyic67Ebp4zpooOYu
Rlqri90uJWXqEhePj7EGeBiZ3RwcD/XljTKoKLI4HvFGdp+gCWBkDd0r+8KPPbMl
A6QlSkhxXxKEjs0mwi4Za2xAcMM0IXQ5p01gJjJJDxEOgSQfFbyMCMPvIoc9I3Dh
F/PvAazYhfkEk/aBGYdLsA4hZjKmR9XagY1TnkKacY/fOJ9I4CRlW1RQ9REsKdpv
Z2oAriDOpXxwBuPKjbdP8ByFAROKWjsq9sGa2HV7uehN788lciajdvfCGIhonBCo
uZteASXLsYsLCMGxRyoFw8XsAXoQR9Dy/VS2zgM/tF/WmnxR2gHcgBTMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAd+qIBkdJQomAkDeg7h7POmRstiMB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsMiJIKS
BLRd1FNQ/DsqW+5SoF/HFkRoYqEavKJpB8WiAVjPK0zy0ivl7cbgJI7uSrdE72Ah
8fZWapaPmZqX7KWD8Yx0aCmECwddHXMDfqRSNSOsq5xGq6NUK11WwLT3slJReJQI
8X/Ns37/fO5fv8baMxvdfb6Q8XDf0szT45IqffHAI5/K6mnA9Bn+eyju7HpHCRzl
pTLgWmIJO0ApQe2VmQ1tN9DthN+58XOhkqHPhyhWthrTOjd8hrnKllZ0SGj9XiGm
dKOvG/8INwTQzZqYLF8EZkk89Xq9ROvFbEi6lazuYXFucoWxsUswN4V6EpdQ1zN/
OIls6j6q88Z6mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:24 2026 by rpki-client