Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: 47kbaplD0AvaJwZnxSjxqB841knh5hM7FmdqEz3bWbI=
Subject key identifier: FF:BD:80:75:69:15:B3:36:6E:91:A5:4F:FF:94:2C:3B:78:9D:8E:DA
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01A10DDF0BCBF33405811074F40C32B76D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1989
Signing time: Mon 05 Oct 2026 21:01:23 +0000
Manifest this update: Mon 05 Oct 2026 21:01:23 +0000
Manifest next update: Tue 06 Oct 2026 21:01:23 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: quNmdx+iDaSSf5KfrL4UYvc9V2htPST8vS0dzl/QHGU=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:df:0b:cb:f3:34:05:81:10:74:f4:0c:32:b7:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Oct 5 21:01:23 2026 GMT
Not After : Oct 6 21:01:23 2026 GMT
Subject: CN=ffbd80756915b3366e91a54fff942c3b789d8eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:a1:aa:18:dd:64:33:29:60:75:c5:dc:39:
24:a3:22:19:2d:3e:5d:5f:e2:9e:0b:f8:c9:ff:d9:
9c:71:df:13:81:1c:a9:6b:50:8c:9f:f6:bb:ce:82:
69:a3:0f:e2:c0:59:38:b3:0f:70:c9:50:9b:59:c9:
35:8d:4a:d0:aa:70:ec:f7:4b:e0:75:57:26:2b:71:
5b:da:36:40:f3:ae:24:9a:bd:9b:5e:2a:60:f8:07:
91:88:c0:0f:b1:d5:32:91:b2:90:2e:37:35:86:a3:
6e:40:0c:e9:6f:b2:5a:91:24:ed:69:aa:2f:a0:82:
6d:3b:0b:f5:7d:d5:a6:fe:1e:c3:30:5b:a5:46:8d:
40:17:b0:24:70:77:69:39:a4:f2:97:b4:6a:50:b6:
dd:22:f4:ca:e4:9b:9e:4c:b4:ac:c7:94:28:03:4d:
46:0f:a5:7f:43:ee:c1:2d:a7:49:22:c5:0b:29:65:
50:c5:91:72:0d:ec:6a:82:20:9c:29:eb:72:35:5d:
5b:d7:19:b5:27:cd:b5:45:25:74:4c:d5:1e:a9:c9:
97:2d:50:c1:28:2b:2a:44:f5:35:06:9d:a6:5f:72:
c0:8d:8e:be:d9:e2:93:47:ee:4e:62:b1:40:92:10:
6b:57:98:10:b6:53:97:9f:9b:e7:4a:da:a1:f4:76:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:80:75:69:15:B3:36:6E:91:A5:4F:FF:94:2C:3B:78:9D:8E:DA
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8e:32:11:34:ce:d6:80:f7:a8:5e:6d:f1:4f:9e:a2:4a:fa:
5c:89:56:fc:21:8d:ab:c9:a0:82:bf:cb:17:4f:21:b5:f7:10:
92:f6:4f:f2:0f:0c:c8:c7:c2:95:66:a4:48:c2:cb:82:3f:8b:
f1:0f:a0:2c:50:81:f1:c6:62:bc:2e:f2:75:02:d3:81:0f:be:
41:d2:be:6d:fb:33:ff:eb:2b:fb:fd:18:60:96:15:78:15:5b:
f2:d6:45:73:9a:ce:13:2b:86:d5:54:f4:9d:20:f1:6f:d2:9f:
21:85:d3:30:c8:70:81:9d:15:58:2c:5b:77:04:9b:d2:fc:01:
40:29:4e:0f:01:cb:3a:f8:1c:9d:78:a8:05:02:28:c8:99:c0:
e6:70:d7:f0:72:e0:99:bd:21:e9:65:4e:c3:fd:ec:02:8f:6a:
51:77:e7:ed:d4:33:c9:f0:76:9a:b9:e7:10:6d:3f:68:11:5a:
b8:9d:df:3b:61:bc:ef:5e:bf:cd:9b:2b:1a:1f:d0:89:cd:0b:
ad:c9:d4:cd:14:d9:7e:76:01:d8:88:65:ee:f8:fe:01:4e:ee:
6f:77:ac:5d:31:d3:5c:03:5b:98:12:1d:4b:31:c0:b7:cc:7f:
41:ec:a5:fa:b1:b0:7b:be:a2:7b:21:f7:58:1b:ba:da:c6:a8:
2f:db:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:58 2026 by rpki-client