Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: krGH0I86CJFkrIr+HkZOE0aP5ofZIMCe/txR9CGUbGE=
Subject key identifier: B1:79:B6:D4:7A:40:AC:31:71:11:57:94:C1:69:F4:CD:63:5B:51:F8
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 019D39099C7200151705D4A8825990BF7CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: eZ1vnil2R_lRaxzm1u2K8oueOEA.roa (hash: iEQw8uo18WbpEVqcP2/fu5Vr2CBuKtNokc7vp22mHpA=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: ZTd/Egzc73sh+2ghhBsCk6Qj6yVa6zGMLhM1u82iBMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9c:72:00:15:17:05:d4:a8:82:59:90:bf:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=b179b6d47a40ac3171115794c169f4cd635b51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:c7:98:9e:d4:0d:3a:33:af:8a:24:24:ee:
27:b3:98:a2:e4:5b:71:86:c3:64:e8:e0:bf:5f:f1:
97:94:a8:a5:d2:7c:12:be:84:4d:db:4c:e8:1d:9f:
f9:92:6a:c7:e9:9b:e1:ae:f1:68:6b:45:c9:9e:83:
7b:44:31:34:e8:c0:82:be:13:ca:48:3a:e7:f6:00:
1a:f7:ae:fd:f1:42:80:8d:ff:18:80:03:d4:1b:92:
70:d5:ee:a8:84:16:86:2d:94:12:87:b4:46:10:df:
bc:77:57:d2:fd:ee:01:dc:3a:be:66:b5:2c:b1:92:
da:dd:58:62:e2:f3:4a:d5:1f:78:bc:13:cf:72:77:
b7:c8:57:ff:ea:3a:5d:a4:ab:af:71:fb:af:e7:6b:
a4:5b:dc:91:1a:e7:8f:16:57:76:cb:cd:67:00:27:
f5:a0:e3:9f:87:3c:9c:83:5c:a9:41:f9:c6:8c:ab:
11:85:dc:a6:f9:e0:2e:ae:f7:a6:ca:c6:9a:29:5e:
28:08:35:66:39:86:e6:64:32:98:8a:3c:d2:ed:d1:
3f:8f:5e:99:09:84:a8:a2:b1:f0:ba:b7:d4:c4:62:
a5:8a:8f:ba:1e:66:a4:37:21:d3:e1:bc:ed:36:8c:
64:b0:6b:0b:b1:47:f2:b1:f7:4a:02:68:2d:43:3d:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:B6:D4:7A:40:AC:31:71:11:57:94:C1:69:F4:CD:63:5B:51:F8
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:7c:06:69:15:40:d0:11:6d:63:b3:9f:fc:46:e3:5e:8a:
7e:87:fd:8b:fc:d1:d8:56:62:a1:be:71:1a:89:10:32:eb:9f:
23:88:fa:17:df:15:0c:e0:5a:2d:04:c7:2e:7a:ea:f1:9d:7e:
91:45:56:bc:79:ef:fd:10:86:bc:4e:47:87:4b:4a:ea:80:a4:
bc:18:b8:a0:1f:b7:d5:3d:cc:32:49:f8:5f:00:90:81:22:59:
66:30:20:95:a2:bb:d6:12:c8:a5:7c:24:ce:15:1f:a2:a6:ef:
a7:c3:4f:42:b1:1f:ce:80:80:89:8d:a8:89:22:85:5a:a0:e2:
f9:51:d1:84:d7:8b:f2:80:fc:59:a0:de:58:0c:7d:09:ce:26:
30:59:3b:ce:a1:46:84:c6:9d:b9:cc:e2:4d:6e:db:c4:cc:a8:
9f:4f:e0:69:7e:6f:02:aa:e7:9a:44:48:56:66:77:b3:86:28:
c8:d2:13:92:63:13:b0:89:d1:1b:c9:83:af:b7:0c:a7:f8:87:
a3:bb:f2:d4:15:77:00:50:68:44:d2:ef:72:b7:63:3f:d9:cc:
eb:71:09:e9:1e:6e:c2:29:af:39:6e:a5:fe:9a:dd:99:8d:9f:
9d:12:f3:2c:4a:e5:6f:83:90:8a:8d:0b:e4:c6:9b:7f:84:18:
e9:63:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:39 2026 by rpki-client