Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: 5IxGh+gPOHdPqqVNKnoo6c5ofkCSJI0aVjNpxBFbArY=
Subject key identifier: 5A:92:50:1E:65:4A:88:03:60:94:0F:AC:4A:86:BA:4C:5B:0F:D2:DC
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019D39AEB4F5E4C5094F96DFDCC1A9C9E3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: 1WyaT6ZSZ0v1PNFeOe2bNqf/L0CLf8g0plXsaRlG5uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b4:f5:e4:c5:09:4f:96:df:dc:c1:a9:c9:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=5a92501e654a880360940fac4a86ba4c5b0fd2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:80:96:9c:a5:85:cd:06:af:12:99:34:af:
aa:12:f7:4b:77:4c:81:05:51:a1:be:43:f9:61:f8:
b1:a8:2e:a5:0e:9b:fe:5b:39:1c:db:79:eb:a2:a2:
62:d2:07:8e:b6:e1:a3:23:9d:99:7d:09:19:a2:07:
93:96:4d:2f:f9:a1:28:9d:2a:f3:4f:cc:e5:ad:d9:
53:61:ca:e4:81:97:70:fe:28:5c:a9:62:d4:28:2d:
fd:08:e3:aa:a0:4b:10:00:ca:61:cc:03:9e:55:cb:
c6:1c:b3:49:5a:3f:3e:59:f9:92:68:69:b5:d2:ba:
01:ff:c4:08:fd:e0:f3:60:7e:c2:66:f3:71:06:64:
bd:a1:7d:9e:ff:35:2f:22:18:a9:7a:c3:d6:3a:d0:
b2:f8:db:c6:9f:c0:8b:f6:3f:f3:6d:82:07:a1:7a:
b5:ff:c2:b1:95:75:d2:ca:73:15:aa:77:67:ef:e9:
99:d9:24:3e:c9:5f:6e:30:0f:91:8b:77:bf:1c:a1:
c2:7c:89:23:25:ae:cc:ac:d9:fd:6d:c0:af:fb:9f:
9a:11:6d:d1:d1:20:fe:45:8f:b3:6b:7d:e2:2a:30:
8f:bc:59:c8:1e:a4:84:2f:c0:ad:85:2c:a8:2f:5e:
e1:d1:e2:9a:4b:93:d5:23:67:02:5c:2e:26:de:5b:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:50:1E:65:4A:88:03:60:94:0F:AC:4A:86:BA:4C:5B:0F:D2:DC
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:6c:d8:1e:f6:84:21:9f:cf:48:b0:cc:d5:17:1d:9f:10:
e8:b0:a7:d5:09:ec:c6:85:97:aa:00:49:68:4e:cd:10:fc:40:
6a:58:ae:3e:dd:90:d4:4e:c8:9e:8b:3b:81:dd:4c:2a:44:b9:
8a:ed:3d:ce:7e:bf:1b:52:a5:db:47:70:ff:aa:5d:49:1c:88:
79:c7:c6:82:d2:32:98:07:ae:2f:b1:dc:d4:f6:47:d8:b3:bd:
cb:04:ce:40:76:53:51:37:90:ce:dd:68:08:47:00:57:46:2b:
ce:ae:92:56:e8:ce:65:5e:c0:38:85:48:fd:15:5b:b9:56:a9:
ef:09:93:2f:a6:f0:b3:d5:cb:2d:85:c8:7f:95:b0:ca:d9:43:
6f:1d:d6:14:f1:ff:47:59:ae:19:79:c9:43:2e:8c:4d:44:db:
a1:10:b4:68:ef:46:9b:9d:6b:26:00:f8:6a:49:b7:fc:78:e1:
51:26:ea:b0:bf:ef:a8:29:b5:32:68:74:da:02:6d:c6:60:60:
51:e6:d0:2b:24:94:fe:3a:65:a0:e6:92:32:fd:16:bb:f7:c5:
dd:3e:63:a6:52:f4:78:b9:50:46:cd:ae:de:4b:89:8c:cc:28:
29:98:b5:4c:78:f8:47:c9:e3:ea:f2:ad:00:44:17:f5:a4:aa:
cd:dd:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:15 2026 by rpki-client