Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: IrpRi9sZx5mNTvmXCYFw0sTSbT14Ap9JI5nO2Pmyao8=
Subject key identifier: 05:5F:45:36:F1:63:69:7C:A4:E9:C1:BF:D0:7A:E8:A8:31:D0:60:A0
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01A1803D3E22296BE67F023849B8E3E1200F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 08E5
Signing time: Wed 28 Oct 2026 02:00:59 +0000
Manifest this update: Wed 28 Oct 2026 02:00:59 +0000
Manifest next update: Thu 29 Oct 2026 02:00:59 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: mVp0vH4IqwqfZ3iZmDEpd7XX6/8mUcs1lj7MqrnCKj8=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:3e:22:29:6b:e6:7f:02:38:49:b8:e3:e1:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Oct 28 02:00:59 2026 GMT
Not After : Oct 29 02:00:59 2026 GMT
Subject: CN=055f4536f163697ca4e9c1bfd07ae8a831d060a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:73:37:3f:cd:54:b9:ea:a2:58:ec:ab:41:
10:45:6b:3a:f4:5d:12:f0:b9:dc:2a:de:10:71:f3:
f6:94:01:a9:4f:7a:a3:8f:a6:67:08:06:fb:13:f4:
8c:3b:c1:cb:1d:1e:fb:e9:c0:d8:4e:b7:3e:c5:42:
bb:16:88:64:5e:26:e0:09:6a:6c:29:ba:00:64:60:
1e:18:1e:a7:c3:40:c3:a1:39:22:fe:a5:20:07:29:
b3:df:fa:f8:18:64:ce:24:20:69:24:4b:0a:88:dc:
b4:c8:f3:4d:ce:d8:6f:24:5c:17:d1:01:a3:fa:b4:
08:18:e1:79:10:1a:a4:d4:24:2f:e2:94:00:1a:59:
61:47:31:ba:77:8f:2e:c1:1e:5a:7c:06:5f:c6:59:
66:12:94:ad:8f:d7:e1:97:90:06:d2:bf:18:58:6f:
78:69:0d:2c:3c:fd:bb:e2:b6:81:c3:4b:82:18:84:
19:b3:e8:c5:eb:7d:02:42:b3:b5:ee:30:93:0c:be:
dc:5d:e2:de:2b:86:8b:90:2e:31:62:a6:ef:66:63:
ea:56:90:8d:76:b7:4a:77:eb:0a:c1:b6:bd:40:64:
c2:d4:49:06:f4:43:ef:2b:61:1c:86:c4:be:61:ab:
b0:12:50:f1:f7:a6:9c:dd:0d:4b:32:ec:7e:82:cf:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:45:36:F1:63:69:7C:A4:E9:C1:BF:D0:7A:E8:A8:31:D0:60:A0
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:6b:67:5a:e6:26:3e:81:00:04:bd:7c:9d:60:96:05:6f:
2f:7d:f3:5a:6e:45:94:61:0d:5d:99:c1:db:65:ac:8d:e1:f9:
c1:95:be:6e:df:a0:95:f4:dd:e5:3e:e4:a8:34:0d:d0:e1:2a:
9d:f2:1a:53:71:2a:31:1a:ce:61:a2:78:bd:a8:6b:2f:85:51:
1e:1f:e4:9e:08:c1:c9:89:71:40:7a:bc:34:b5:98:8e:01:12:
78:c6:61:0b:0d:c7:9b:66:e4:54:71:d0:16:91:76:2f:46:83:
b3:14:28:d7:58:d1:f8:4c:42:99:b1:68:c2:d8:dd:e5:7b:34:
6b:70:e0:23:70:24:27:94:da:8f:76:54:78:f6:6b:88:4d:28:
45:16:c8:9b:46:81:1b:2a:2f:d5:d0:1d:6d:2d:5d:3e:cc:b9:
a4:00:63:15:f0:18:03:46:8f:51:8f:01:5f:08:c2:48:86:d2:
73:bc:81:ef:11:40:cf:a8:45:f8:22:25:74:6c:07:a8:2a:ea:
bb:96:1b:8d:86:c9:69:31:ea:8c:65:cb:1d:6b:d0:ba:95:0e:
c9:31:db:d6:a0:94:d2:e6:7b:63:fb:2f:7c:27:e5:d9:9b:be:
3d:a8:2c:77:6d:d9:e4:76:2d:9b:19:df:5c:84:21:bc:cb:48:
39:98:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:54 2026 by rpki-client