Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: S9aQKeDZdfX0/eIDEN/RKkEwC79bKFZBRFgvkLExbHs=
Subject key identifier: 82:18:35:EC:45:61:E4:59:FC:A3:81:40:F7:84:C9:C4:83:0E:24:79
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 019D3909F414E7A5EB8B8CF9D82D25AFD383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 0444
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: ISZuVMMfLwI+F8RJ3pPjMNId9BlJfnjoRvYe6s0p640=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f4:14:e7:a5:eb:8b:8c:f9:d8:2d:25:af:d3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=821835ec4561e459fca38140f784c9c4830e2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:8c:9a:ed:07:db:94:48:f8:d2:37:f9:e1:
3e:55:7e:8e:eb:a6:d5:ae:ef:24:e5:9c:74:08:7e:
24:92:80:e5:cb:40:b4:5a:e7:61:e7:bd:bc:30:c7:
d8:9c:0e:75:41:19:21:ef:ac:4f:fe:1a:f5:d0:ff:
81:3a:57:a4:0d:52:16:2e:96:36:bf:c3:f2:2e:34:
22:de:42:50:b9:2a:dd:84:11:b4:d6:40:b0:9e:e2:
b0:90:43:99:a0:df:1d:01:e8:0d:91:d9:10:27:c8:
4b:f2:cc:c6:2f:69:29:56:6e:aa:71:2a:19:bc:23:
55:bc:65:11:91:63:f2:d8:36:98:4a:0b:21:2d:07:
be:75:38:3b:45:18:a8:ed:cf:1e:76:69:ed:a4:a4:
4e:b7:15:5c:34:b2:47:02:15:af:98:6d:e0:fb:6b:
cd:17:d5:23:67:e8:b6:df:6a:0b:b1:52:f9:cc:a9:
03:d7:2c:8d:72:dd:97:d3:2b:99:81:d5:a7:52:57:
76:27:ff:9c:b1:8e:87:58:a3:77:a0:03:07:ce:de:
9c:7f:c7:d3:77:06:97:99:8b:75:26:82:53:c5:26:
4d:4f:a6:f6:34:0b:25:d9:ca:aa:71:19:b6:68:3e:
b0:b0:fa:c7:ae:f6:5b:73:63:ba:f4:19:01:0a:27:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:18:35:EC:45:61:E4:59:FC:A3:81:40:F7:84:C9:C4:83:0E:24:79
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:f7:0e:55:7c:96:17:a3:d0:1f:48:ef:0c:5d:55:21:04:
9d:99:d9:51:be:a4:f4:0c:66:02:bb:1d:57:5c:64:86:95:4b:
08:a2:84:ad:5d:8d:ec:17:9f:8a:a4:85:5e:4d:06:80:79:18:
f7:8e:98:2f:7d:54:9d:32:b0:47:ee:64:40:85:46:a5:27:65:
f7:02:0d:18:0a:fc:4f:c4:fc:47:a2:0f:fb:27:a4:63:3b:e3:
e3:39:1d:f3:fd:33:f0:d8:9c:0b:c9:af:8f:94:ce:78:0e:2c:
bc:1a:52:05:91:05:3e:5d:1e:09:b1:42:45:0f:72:2c:a4:28:
93:52:72:f4:55:0d:f3:2b:ac:2c:8f:e5:04:f6:59:4f:51:7b:
fd:87:30:ef:79:fe:8b:3e:f0:c9:55:75:b6:13:3a:1c:ed:68:
a5:96:84:23:31:36:ab:59:79:7c:75:30:ae:d6:09:c5:b7:3f:
5b:38:72:61:15:fa:f0:42:d2:cf:c5:64:b2:79:3e:be:94:ce:
64:88:9a:a5:eb:fd:a2:cd:92:5e:b6:37:34:a5:ef:06:0a:de:
b4:3e:65:e9:6f:7e:0e:15:8c:15:a9:3e:92:2a:85:4b:33:df:
8e:2d:89:d4:5c:3e:e7:92:77:62:69:65:06:04:14:17:b4:9b:
99:f9:e1:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CfQU56Xri4z52C0lr9ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGI5MzIzY2Q0YzkyYzc1ZDgzZDM0NmYwZDI2OWU1YzJk
NWE4MDgwHhcNMjYwMzI5MTAwMDQ2WhcNMjYwMzMwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg4MjE4MzVlYzQ1NjFlNDU5ZmNhMzgxNDBmNzg0YzljNDgzMGUyNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsGMmu0H25RI+NI3+eE+VX6O66bV
ru8k5Zx0CH4kkoDly0C0Wudh5728MMfYnA51QRkh76xP/hr10P+BOlekDVIWLpY2
v8PyLjQi3kJQuSrdhBG01kCwnuKwkEOZoN8dAegNkdkQJ8hL8szGL2kpVm6qcSoZ
vCNVvGURkWPy2DaYSgshLQe+dTg7RRio7c8edmntpKROtxVcNLJHAhWvmG3g+2vN
F9UjZ+i232oLsVL5zKkD1yyNct2X0yuZgdWnUld2J/+csY6HWKN3oAMHzt6cf8fT
dwaXmYt1JoJTxSZNT6b2NAsl2cqqcRm2aD6wsPrHrvZbc2O69BkBCidZ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIYNexFYeRZ/KOBQPeEycSDDiR5MB8GA1UdIwQY
MBaAFB2LkyPNTJLHXYPTRvDSaeXC1agIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQt
MDRkZDgwZDViNzJkLzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQtMDRkZDgwZDViNzJk
LzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8v3DlV8
lhej0B9I7wxdVSEEnZnZUb6k9AxmArsdV1xkhpVLCKKErV2N7BefiqSFXk0GgHkY
946YL31UnTKwR+5kQIVGpSdl9wINGAr8T8T8R6IP+yekYzvj4zkd8/0z8NicC8mv
j5TOeA4svBpSBZEFPl0eCbFCRQ9yLKQok1Jy9FUN8yusLI/lBPZZT1F7/Ycw73n+
iz7wyVV1thM6HO1opZaEIzE2q1l5fHUwrtYJxbc/WzhyYRX68ELSz8Vksnk+vpTO
ZIiapev9os2SXrY3NKXvBgretD5l6W9+DhWMFak+kiqFSzPfji2J1Fw+55J3Ymll
BgQUF7SbmfnhSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:19 2026 by rpki-client