Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: bm00r1h1LsaPxiiUB/oT5n3KGGADHkhQYWTCPejwg2k=
Subject key identifier: 24:28:13:D2:B6:DA:7E:6C:93:BF:4D:1B:47:DE:A7:89:B6:73:84:98
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 01A17C2931C366480F1110B2A18BCBF8B557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 07:00:36 +0000
Manifest this update: Tue 27 Oct 2026 07:00:36 +0000
Manifest next update: Wed 28 Oct 2026 07:00:36 +0000
Files and hashes: 1: eZ1vnil2R_lRaxzm1u2K8oueOEA.roa (hash: iEQw8uo18WbpEVqcP2/fu5Vr2CBuKtNokc7vp22mHpA=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: iHvbazLMJ5UgiGpfKELVYsgCziZa5Ex6B4qzrRYgVTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:31:c3:66:48:0f:11:10:b2:a1:8b:cb:f8:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Oct 27 07:00:36 2026 GMT
Not After : Oct 28 07:00:36 2026 GMT
Subject: CN=242813d2b6da7e6c93bf4d1b47dea789b6738498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:be:75:b5:32:6d:69:24:4e:a8:d6:08:a3:
47:53:c5:21:5a:a3:e9:8d:ed:fd:dd:45:62:c9:cf:
a5:ed:c5:bc:0e:ae:2e:27:22:1d:f6:09:33:5b:8c:
bb:a3:2a:8a:93:75:7b:e4:87:d5:94:0e:a7:12:2f:
12:7d:5b:78:fb:ae:34:0c:71:c2:e4:6a:29:91:0b:
8f:4c:e1:47:76:d7:bb:56:bd:3f:f6:66:8b:89:a4:
fc:e7:69:6c:72:4a:cc:73:1c:bb:69:a8:bb:a0:b5:
ca:44:97:ad:7f:f8:f3:83:f0:39:b7:66:8f:b9:5b:
cc:2e:6a:4b:24:83:6c:cb:fc:4c:ac:ce:c4:d2:e3:
f6:fd:87:3e:c3:3c:29:3f:a3:62:1d:b3:e3:57:d2:
a2:b7:54:55:f4:07:bc:02:64:5f:63:e6:29:82:f6:
57:bc:f1:08:f9:5d:7c:27:c0:fa:16:1f:a6:8b:9d:
ff:2f:98:b5:79:c1:f9:63:4b:19:0d:59:6e:f3:cd:
97:10:de:bd:82:71:5c:c2:f9:8e:d1:d6:f6:dd:02:
6e:ef:6d:a8:07:b5:6a:05:d0:f3:66:54:b8:55:22:
96:51:98:a1:82:f3:de:77:66:b0:51:b2:cf:ce:30:
bb:b4:fa:93:fc:52:ec:0f:99:39:2e:24:a2:86:db:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:13:D2:B6:DA:7E:6C:93:BF:4D:1B:47:DE:A7:89:B6:73:84:98
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e0:22:9a:8c:56:18:d3:c2:3e:fa:19:8e:16:eb:e2:3d:ac:
87:c9:0a:0a:2c:5e:d5:15:bd:86:21:f5:bf:9d:08:73:b4:2d:
f1:1d:f2:a6:33:ce:6a:56:24:3d:9e:af:a7:6d:4d:be:5d:34:
5f:cf:d0:e2:ac:dc:86:01:1e:44:a5:8e:d7:1f:cc:16:8f:61:
60:3b:80:db:9e:6b:b1:c9:74:9d:f8:93:46:40:b2:6b:5f:f9:
24:af:7e:e5:97:6a:5e:68:8f:dc:0c:4a:cf:94:e4:49:3a:6f:
08:fd:38:5d:23:ac:a2:e8:8c:0e:e8:4a:50:a5:0f:aa:f9:34:
ca:9c:e8:a2:ea:78:e4:f6:c4:75:ee:81:ea:07:7d:ca:80:7a:
8a:53:f1:1d:e0:17:8e:47:24:98:4a:69:9b:60:96:6e:77:9b:
ad:53:7e:b6:73:d9:ad:ba:bc:c2:70:e1:36:f0:2c:cd:3a:40:
92:ad:99:77:4e:d1:df:55:1f:e9:18:41:fd:aa:21:9e:97:86:
4b:c7:c9:38:87:bd:71:ca:5b:b3:a0:eb:90:81:04:da:3e:7e:
73:35:4a:60:15:a9:f1:dd:a1:fd:9b:00:e3:93:8b:17:dc:02:
e7:54:ab:e5:6a:f6:a8:f9:ee:46:3b:e4:dd:17:53:20:b2:5a:
f0:12:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:44:06 2026 by rpki-client