Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
File: hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json)
Hash identifier: mBeezj+phhZNr+GFVPF11qTvCF8Yud8s2HWYbl84xmQ=
Subject key identifier: 1F:E5:A3:5A:65:2D:C8:C8:5E:60:F1:D2:08:D2:1F:12:31:D9:B2:72
Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Certificate issuer: /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Certificate serial: 019D3977F6DD692A650E48CB4BC904AFA518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
Manifest number: 09BE
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: dUhrocNBs9P0OFsFvWm0Ljt1KvreP88ZmXmmMSWj5jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f6:dd:69:2a:65:0e:48:cb:4b:c9:04:af:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=1fe5a35a652dc8c85e60f1d208d21f1231d9b272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:3a:c6:e0:4f:dc:9c:d6:19:cd:2d:6a:57:
ec:ff:2e:02:eb:47:0c:cf:2d:63:3e:10:7c:f7:db:
44:61:b5:dc:88:fb:42:ee:91:a6:eb:b1:87:ac:28:
86:9c:64:47:9f:b6:25:e6:40:5c:1f:d6:47:4f:3b:
43:b4:bd:6e:72:5e:bf:07:c4:4a:57:31:b7:48:ba:
5c:4f:9b:97:0b:cf:00:4f:a4:66:d0:47:49:18:96:
3c:82:15:8c:3f:be:b1:04:de:ec:05:21:06:4a:62:
08:41:e6:14:b8:b4:d8:35:a1:3e:72:74:94:ef:72:
80:d7:ff:15:29:0d:6f:a7:43:cb:ed:c9:fc:8c:db:
87:eb:13:64:be:e6:d9:a4:db:21:41:5c:85:86:95:
83:96:ea:90:5c:52:57:a8:30:d8:a8:51:55:5c:c8:
d7:41:b1:8d:27:fc:5e:d5:ce:34:75:9f:ff:ee:bc:
83:17:6f:50:ec:53:f2:4e:7c:bd:22:90:27:86:7f:
66:d5:7b:93:f6:a5:87:7d:f6:26:e3:3c:a4:1e:65:
77:d4:bd:a7:0e:63:36:10:a4:6b:70:28:4a:96:5c:
d4:14:88:20:2f:29:14:f7:a9:c8:74:07:62:f0:08:
9a:1d:b7:76:c4:1b:ca:b0:54:99:34:e2:71:82:da:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:A3:5A:65:2D:C8:C8:5E:60:F1:D2:08:D2:1F:12:31:D9:B2:72
X509v3 Authority Key Identifier:
keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b4:f1:f3:63:a8:a6:31:22:1b:65:55:c2:ba:44:21:67:1a:
e0:17:ee:cd:f6:53:33:85:22:53:4b:ff:c7:fb:62:ab:1c:c7:
86:98:46:3c:e5:7f:0b:05:1f:72:bc:28:a4:a5:f1:45:69:d1:
ca:5c:9d:4e:9f:e9:f9:dd:3d:91:11:6b:b4:39:32:d1:c1:9b:
4c:21:af:d4:51:5b:a1:af:8b:6b:40:4c:62:02:2e:de:db:c2:
ff:c4:8b:a3:e0:17:67:d7:f7:65:40:5a:50:1a:9f:68:d2:b6:
c3:3e:93:51:b1:cc:7e:9a:9f:ed:4a:22:ee:8f:87:23:96:77:
04:89:ef:bf:17:2c:42:18:61:91:70:44:91:9f:56:6f:31:ba:
27:50:66:3f:cf:57:1c:62:bb:50:83:1a:63:96:47:95:c7:22:
64:e7:70:cd:75:0a:7b:15:70:bb:6b:91:2c:13:93:d8:c9:64:
4e:80:86:1d:50:65:c7:c2:89:37:e1:ec:38:11:dc:24:88:01:
b9:4e:59:cd:02:df:b4:63:fb:c2:53:70:2d:31:6c:8d:d4:d9:
c7:fc:ca:dd:22:d1:69:08:f2:35:27:c4:68:f0:04:2b:d0:7d:
ad:3a:76:09:b8:a5:5f:c1:7d:08:29:1d:d5:60:09:54:4b:ea:
ee:43:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:37 2026 by rpki-client