Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: KAGJv3fEeLmn6nIkDhKs2wa3tQONd9Pyk2rJ4uRqLdQ=
Subject key identifier: 23:C0:45:32:46:69:82:B8:2C:10:5E:29:B7:46:9D:37:83:EB:62:27
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01A12B0DCF4817645E39D39B272EFE3D879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 064F
Signing time: Sun 11 Oct 2026 13:01:27 +0000
Manifest this update: Sun 11 Oct 2026 13:01:27 +0000
Manifest next update: Mon 12 Oct 2026 13:01:27 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: MHJIxA4JQ2yW2wmlCn1M2W9ghkh3mq2jByxVaxQNtSI=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:cf:48:17:64:5e:39:d3:9b:27:2e:fe:3d:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Oct 11 13:01:27 2026 GMT
Not After : Oct 12 13:01:27 2026 GMT
Subject: CN=23c04532466982b82c105e29b7469d3783eb6227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:12:6c:20:84:4a:3c:c0:f8:c0:6b:7d:e3:
48:0d:c0:69:da:3b:d4:25:c1:d9:3d:42:14:07:f9:
7d:0f:56:52:b7:19:bf:28:7d:03:15:ff:a7:c4:03:
19:d9:7f:ae:33:da:7f:b2:a8:18:22:ce:67:2f:16:
76:90:52:ea:42:fc:8d:2e:41:ba:42:65:86:dd:a8:
45:50:de:b5:f4:20:e4:f1:8d:fd:c3:bd:79:c3:b4:
c6:c4:fa:53:b2:0a:0b:04:ec:d0:4a:10:36:0f:58:
ad:81:bd:84:ea:2f:10:5c:35:7c:b1:26:06:12:f0:
03:c6:70:74:95:d9:17:ca:3a:5a:4e:f2:80:75:11:
2d:65:5c:f7:0f:f5:a6:8b:17:ec:1f:82:97:51:78:
b3:ce:e3:eb:d1:e8:fd:09:5e:40:93:67:1c:fc:f4:
d2:48:44:e8:09:6c:e0:b7:4d:10:52:ee:de:5a:d0:
c8:e5:89:a8:aa:97:86:45:d4:12:c5:3c:5b:49:dd:
f0:80:68:19:66:92:ad:8c:1b:a4:3c:5e:66:b5:40:
b9:3b:b6:3a:6b:c6:2e:a3:3c:b9:d3:b2:38:c0:f6:
44:91:c4:71:1e:3c:e4:dd:da:f7:f3:40:53:dd:8e:
4c:c4:41:43:da:a5:2a:fc:c3:9f:13:73:5b:09:9b:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:45:32:46:69:82:B8:2C:10:5E:29:B7:46:9D:37:83:EB:62:27
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f2:4a:34:7b:a1:91:6a:0a:9e:ea:c8:24:cd:d1:96:45:65:
cf:2d:68:2e:df:d6:bc:5b:5c:ff:ea:05:e0:a3:7b:38:42:5f:
86:63:c3:1b:7a:d8:c4:8f:8e:05:ec:57:76:fe:73:c5:b3:64:
49:40:4a:5c:68:b5:87:c6:68:7d:13:a6:89:ef:82:ca:81:94:
36:18:40:b5:3d:2c:70:00:87:24:23:82:80:28:f8:4e:e0:e6:
02:2f:43:0c:89:8e:95:9e:b5:fd:39:78:d3:02:d4:4a:0f:4e:
02:94:75:7e:85:2f:64:5b:c6:71:e1:87:b1:18:e7:b4:31:b0:
1d:67:83:fd:42:c9:8a:c4:97:f6:61:f9:04:4d:03:37:73:38:
50:4c:36:b1:17:55:f0:aa:1b:23:b8:eb:ab:74:3f:c1:40:3b:
0c:38:5f:1b:7f:47:b4:fd:40:56:a3:1e:e7:6b:ee:c8:7a:16:
cc:6b:3c:28:1b:62:1f:dc:39:c6:65:4a:52:a5:b2:4f:4e:70:
8e:33:6b:91:1c:9b:67:c6:32:a0:af:6a:07:c0:f5:d9:4d:f6:
43:55:53:40:7d:bb:59:e4:db:a6:7f:bd:6f:99:10:0a:b4:ad:
22:17:c4:92:5e:d1:73:9f:45:25:89:5c:25:88:a8:b9:6d:89:
23:43:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:53:48 2026 by rpki-client