Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: NVkaQfJCHnUVv4LuBL/mYrWqubNxQG0St5b1IdEuyo8=
Subject key identifier: 14:28:DD:8C:22:19:D5:A4:25:5F:5D:85:54:F9:77:C7:AF:7E:FE:6B
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019D3752C31E1702E2FCE945AA5758D34AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 06AD
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: WXNzSOBGI8f73EDuo+xREW68F9l1dSHElevdKb2bu7E=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c3:1e:17:02:e2:fc:e9:45:aa:57:58:d3:4a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=1428dd8c2219d5a4255f5d8554f977c7af7efe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:d7:98:9b:59:16:cf:2c:53:0c:7d:64:6e:
4a:71:39:14:25:ee:4f:26:bf:3c:32:b7:39:b0:90:
1c:6d:2e:93:68:cb:20:6b:a0:1d:47:fb:9e:6e:03:
bf:27:6d:c2:29:d5:af:16:e6:92:b9:15:5f:ba:73:
ec:47:52:23:f5:24:1b:b9:a3:30:4b:94:9e:21:50:
69:88:d1:ec:fe:cd:ea:cd:0f:61:01:bf:24:50:6c:
97:d8:e7:d7:89:4b:9d:01:6c:c5:de:89:28:29:9d:
aa:bd:fc:12:15:3d:41:00:80:2a:78:7e:35:2c:6d:
03:85:f7:5e:0b:e6:5a:bc:c5:3e:87:64:76:19:95:
fb:39:f1:0c:dc:e0:87:1c:e0:cc:0f:10:3a:dc:d6:
c9:17:ab:bd:44:a8:42:5a:6e:b2:8c:4d:84:9b:5b:
9c:b2:1f:b9:27:46:2a:82:88:23:df:3b:a7:23:41:
07:eb:81:bb:4f:df:86:c6:ce:66:1a:c7:30:80:30:
c6:5b:3b:2a:f0:5c:6f:6f:e2:16:7d:0d:0c:99:83:
88:e0:f8:ef:c6:9f:5e:28:84:14:45:38:4b:f6:28:
00:f9:f5:5c:ad:96:f1:cd:fd:2a:bd:e7:12:99:91:
7c:2d:78:ee:6b:44:1e:1c:f6:0c:57:cd:bc:5e:30:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:DD:8C:22:19:D5:A4:25:5F:5D:85:54:F9:77:C7:AF:7E:FE:6B
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f7:df:5b:96:4b:3f:cc:6f:ca:6e:6c:ce:67:62:0a:50:15:
5f:2b:a3:ce:81:13:fa:02:69:df:cd:a5:20:7b:83:14:8c:be:
58:fe:c0:29:86:44:5d:ed:c3:d4:59:cf:09:3b:b6:59:3d:46:
76:09:93:e2:92:20:45:04:80:2f:6e:d6:36:c2:e2:55:f9:72:
9c:2f:22:0e:7d:08:bf:28:5e:c7:9e:9f:85:6e:2c:fc:50:f7:
03:cb:0b:65:17:3c:c7:1d:b8:09:40:ba:24:42:51:60:0d:7f:
c5:23:7f:25:b6:f1:ae:fa:42:40:e5:6b:fe:47:44:69:90:cb:
48:a5:bb:0d:df:ea:b3:08:e9:12:e2:52:99:2e:06:9c:a9:a1:
78:e4:13:ec:ed:05:d1:41:73:1e:7a:b8:1e:b0:3a:9f:85:86:
3e:6e:4c:94:69:ff:7e:f1:83:44:6c:27:7f:29:30:06:aa:5a:
61:08:ce:cd:d2:28:6c:c0:0d:42:c5:91:bd:07:66:1a:f3:d1:
7d:34:b6:ab:d5:65:89:6d:2c:f2:fc:b2:19:0c:49:68:1c:a2:
3c:2b:67:be:25:8c:14:f0:fc:ca:08:d0:4d:f4:b0:b0:4f:fd:
d0:9b:aa:7a:90:48:d9:1c:44:07:c3:f3:93:42:4d:70:28:ba:
d4:84:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client