Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: R6dMZA+iSetsN2qQpVhCV63TrC6uKhVe4EP81iTNS9U=
Subject key identifier: 1C:DD:FD:D0:91:9B:D4:C6:0D:AC:60:E0:71:AD:DE:C8:56:B4:2C:20
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 019FA0DF88209F23573AFA1F6F3EBB1C6AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 05E5
Signing time: Mon 27 Jul 2026 00:00:31 +0000
Manifest this update: Mon 27 Jul 2026 00:00:31 +0000
Manifest next update: Tue 28 Jul 2026 00:00:31 +0000
Files and hashes: 1: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (hash: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=)
2: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: AIxoASjw9UAnoO9UCz12d5vROTghrFYyePmgqoEZdkY=)
3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:88:20:9f:23:57:3a:fa:1f:6f:3e:bb:1c:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Jul 27 00:00:31 2026 GMT
Not After : Jul 28 00:00:31 2026 GMT
Subject: CN=1cddfdd0919bd4c60dac60e071addec856b42c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:92:7e:83:80:4a:c4:98:31:d7:6a:c9:2f:
7a:b3:f3:cd:7d:86:dd:fb:57:b8:74:9a:60:86:32:
5b:84:dc:2d:c1:c5:31:bc:80:52:00:ec:8a:1b:c0:
e2:cc:f9:47:24:88:18:3b:ef:2a:8d:9f:b0:e9:67:
5d:ad:c4:ee:de:e0:4c:c1:95:df:85:9c:36:40:5d:
19:2f:93:56:e1:6b:3a:dd:74:f5:92:a3:1f:56:b5:
20:3d:cb:93:07:11:0d:f2:4b:56:c8:82:ce:90:d0:
02:a4:d0:fb:5d:39:fd:78:31:b7:09:ae:e1:5b:72:
e7:7f:b6:85:53:8b:0c:04:cf:1b:4b:91:a9:1d:33:
21:96:16:3a:5d:42:6b:ad:97:ac:19:c2:5a:f2:a2:
b9:b7:f5:1e:eb:89:ac:04:97:ee:04:81:53:aa:c2:
1d:07:d9:88:ed:25:78:23:bc:6b:e3:e3:34:a3:bd:
b7:51:8e:65:d8:70:fc:06:75:64:21:e7:f8:9d:fb:
80:19:3c:2a:16:3c:fb:6f:da:5d:1a:a9:61:f4:dd:
16:69:df:54:0d:f7:26:39:6b:99:94:6e:b8:c8:17:
a3:6f:95:17:d1:13:07:bc:2c:af:cd:11:9a:e0:74:
97:d3:66:ca:25:20:e5:05:23:cb:64:dc:a8:bb:99:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:FD:D0:91:9B:D4:C6:0D:AC:60:E0:71:AD:DE:C8:56:B4:2C:20
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f2:1b:21:2f:29:06:fb:38:ec:41:76:dd:ed:8a:97:d7:69:
d7:1e:31:ef:ea:de:82:f8:55:8c:71:2e:fc:b9:4c:e4:af:a8:
7c:08:d7:db:4b:2f:31:75:f3:94:3f:c6:1e:63:bf:05:94:2c:
c2:17:f7:72:04:8a:45:d3:ea:55:df:38:f6:45:30:9e:ed:51:
4e:7f:c9:6e:39:f4:71:d1:d9:a8:8b:39:be:c5:d4:3f:93:36:
cf:24:57:60:f5:f3:4b:75:88:8c:e4:94:a3:3d:7d:2c:61:63:
e3:d1:d5:cc:c5:14:e9:0c:e4:dc:55:b9:ef:4b:b4:29:2e:c0:
7e:6c:55:36:97:33:8b:e0:67:34:00:d2:80:2e:53:38:c3:86:
ca:7d:e2:1b:5b:da:1f:d4:2f:cf:b1:12:93:33:0f:93:af:76:
67:a7:a9:17:81:0f:52:a6:fb:39:d3:de:39:99:99:18:32:b9:
20:97:0f:f9:61:ae:8d:34:f3:87:36:16:9f:d5:c0:62:dc:b2:
1f:5a:b0:63:34:1c:ea:80:3f:da:45:e1:84:36:35:ae:1d:35:
cb:d2:a7:64:ee:84:7b:35:09:f1:1a:f9:c3:48:a9:2d:f0:52:
72:cb:ed:2b:5f:35:d0:ab:87:19:01:55:00:60:0d:45:2a:05:
e5:3f:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:48 2026 by rpki-client