Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: woH/KaxqTnWUgQmhj9y5shxRMuStKLEVamjTq497/lk=
Subject key identifier: 77:22:4F:89:A5:AF:09:93:B6:15:56:1F:FD:7C:46:1F:C0:BB:57:DC
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019E31F32B38C0C49EF5ADB74F1CFEDCBF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 180E
Signing time: Sat 16 May 2026 18:01:20 +0000
Manifest this update: Sat 16 May 2026 18:01:20 +0000
Manifest next update: Sun 17 May 2026 18:01:20 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: UlYoaPN/mxyDmQkdvZKkJpFrZNpsGR2tslPFXrtn6Ow=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:2b:38:c0:c4:9e:f5:ad:b7:4f:1c:fe:dc:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: May 16 18:01:20 2026 GMT
Not After : May 17 18:01:20 2026 GMT
Subject: CN=77224f89a5af0993b615561ffd7c461fc0bb57dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:36:20:08:08:39:b3:04:94:98:d5:86:72:
4c:4a:4b:19:93:6a:df:55:9c:0c:36:05:1a:96:87:
4c:7b:c3:3a:3d:1b:24:66:7d:88:40:2f:be:d9:d7:
d1:ce:1f:55:23:cf:a7:87:70:02:59:eb:5d:63:04:
9a:9c:23:a8:6b:f2:11:70:11:b0:b6:79:f8:06:59:
e5:61:4e:0b:08:9c:e3:0b:a7:57:f1:05:5c:3c:f0:
c8:d6:1f:b4:36:b6:b3:f6:82:42:b9:da:55:b3:bf:
d1:2c:4f:a7:13:3f:4c:e6:70:2a:3f:f5:51:29:36:
87:4d:2a:b2:c2:85:de:1a:a1:d9:db:9b:20:00:17:
9f:67:0c:da:e5:d5:2f:4c:1d:a1:a1:8c:87:68:e1:
01:dd:0c:91:14:1e:0f:2e:8a:05:a0:22:6f:9a:c1:
7a:fd:65:01:56:ce:2e:6a:8c:80:2f:c5:d6:5b:1f:
04:32:66:f6:94:58:3f:78:6b:a4:0b:8c:da:ac:84:
e0:ee:e3:8d:b8:ac:61:b7:3d:8a:36:fc:6c:d8:14:
58:37:15:ec:f4:e9:24:cd:b3:fa:f2:b2:64:4b:fe:
2b:91:34:4e:02:8b:b2:ee:9b:f1:87:80:d1:94:43:
da:63:b8:47:a1:d1:d1:1e:ff:6c:96:46:41:6e:e4:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:4F:89:A5:AF:09:93:B6:15:56:1F:FD:7C:46:1F:C0:BB:57:DC
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8f:10:6e:08:e6:e9:23:39:01:ed:09:53:49:17:07:46:bc:
7c:10:ba:c7:cc:ff:1b:93:c5:fc:8b:0f:d0:01:26:3d:2d:5c:
95:99:1f:77:a4:dc:9e:9f:ce:d9:a4:a9:f8:f9:61:3d:d8:34:
69:7e:30:ac:09:c4:0f:b9:53:9c:c2:40:7e:8d:b8:fc:f9:d1:
c5:d5:a1:8c:1a:44:89:48:78:4a:fd:bb:e1:0b:a1:ac:34:68:
4f:c5:88:7f:00:c7:50:e3:7f:3c:a1:bd:1a:7b:84:16:4d:1c:
b8:d9:80:ae:2a:df:45:d4:7e:1d:54:74:c0:f6:3e:a0:38:f8:
50:a1:ba:44:b7:4b:94:91:02:85:b6:25:7c:5e:84:6f:de:17:
95:af:20:7d:3b:80:5d:11:0e:f6:99:c5:57:21:e2:f8:56:47:
25:51:ac:b0:8c:fd:42:f4:fe:19:5c:b8:d5:24:6f:8d:71:7c:
cd:f5:51:d8:af:90:55:85:de:f9:76:fb:c4:21:1a:b8:36:fa:
28:f6:6f:b8:aa:89:91:39:df:e9:46:83:69:04:5f:ad:fc:54:
67:c7:15:e7:64:a6:90:b5:72:58:29:a8:ba:17:a1:d7:f9:7b:
54:60:10:a6:60:18:2f:ab:2d:22:13:f5:93:27:3f:63:6d:70:
1c:33:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:16 2026 by rpki-client