Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: LXbUXWBIcs8jO5RYDWLpCQT0h8sz2B7be0AUuVquT+s=
Subject key identifier: 3E:C3:0F:DD:7F:07:91:A2:17:40:03:7C:D0:06:55:25:46:BF:8B:F7
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 01A18977480D1B16AB31FD3E69DE14DCD3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 06E2
Signing time: Thu 29 Oct 2026 21:00:58 +0000
Manifest this update: Thu 29 Oct 2026 21:00:58 +0000
Manifest next update: Fri 30 Oct 2026 21:00:58 +0000
Files and hashes: 1: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (hash: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=)
2: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: nxWLJKC2wJSEVl4YbNvE1shxnyoFuEED84/FmuxMzK8=)
3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:48:0d:1b:16:ab:31:fd:3e:69:de:14:dc:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Oct 29 21:00:58 2026 GMT
Not After : Oct 30 21:00:58 2026 GMT
Subject: CN=3ec30fdd7f0791a21740037cd006552546bf8bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:7f:8b:3a:e3:73:34:8d:18:05:d1:93:bf:
b8:4c:32:18:39:d0:a3:bd:c6:90:82:bd:b2:d3:6f:
19:9f:cf:8d:f2:c0:c7:52:5c:73:af:c3:d9:28:2e:
7a:f2:3b:00:c8:37:f1:bd:5e:aa:71:e1:2b:38:d6:
46:e0:ba:9c:37:51:20:98:ef:64:2e:1e:c3:50:8d:
2f:c1:f3:cf:64:3c:1b:a3:81:6e:e0:d7:db:f7:38:
1f:2e:16:6f:04:dd:e6:93:2e:4b:09:a5:a5:c7:23:
88:c8:35:4d:c5:0d:5c:77:61:98:b2:ce:7b:95:36:
8c:b3:99:5d:ca:72:3c:fc:c3:fe:6e:6e:f4:2d:40:
3e:29:fb:68:57:d2:39:77:cc:cc:73:09:f2:99:2f:
33:3e:5f:b3:ab:3c:25:94:52:91:d6:39:ab:16:1f:
2b:37:73:02:f8:d2:47:a1:cd:79:d1:b8:95:af:1d:
d7:0c:61:1e:3e:db:d8:5f:5a:94:5b:ec:29:b0:e5:
72:e0:ed:ce:de:0e:fb:57:e6:b5:6f:3f:ab:3c:45:
99:0f:42:cc:35:e8:20:88:6b:c6:3e:e9:3c:ed:2d:
61:b2:35:7f:7e:e1:71:e7:ed:e8:10:0a:e0:25:4f:
dd:18:75:e7:32:80:7f:d8:2d:1f:25:44:9a:0e:29:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:0F:DD:7F:07:91:A2:17:40:03:7C:D0:06:55:25:46:BF:8B:F7
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:84:d2:d2:8c:20:60:d6:63:8e:fe:d5:b1:cc:c4:7e:69:7a:
c1:22:d9:81:f4:d2:a3:b1:c9:d6:71:e5:a7:cf:9b:d1:2a:7d:
95:58:eb:8f:dc:2f:3e:73:e2:8b:3a:89:d3:04:5b:2b:d2:c4:
fd:3b:94:63:52:80:66:1d:7a:42:f9:63:e2:21:cd:48:51:4d:
b5:31:e8:15:26:32:43:9a:26:77:19:f5:ab:a6:b1:e0:0a:a8:
e4:2f:65:50:b4:05:73:11:3e:8a:45:dc:5d:5c:26:cb:58:87:
68:be:2f:70:6d:53:c8:92:7d:5d:aa:08:7c:2d:b5:b7:30:a9:
66:47:4e:02:8b:31:ac:41:06:cb:01:0d:23:83:c5:84:c8:d4:
53:92:1d:cb:38:4d:a5:d8:fb:f9:fe:70:db:cb:12:84:6a:83:
7b:4d:5f:3d:a5:7c:dd:ba:b5:b4:15:d1:f7:8c:ab:a8:02:bb:
67:c9:61:9a:3f:a7:1c:dd:34:05:ba:22:1a:dd:5a:03:5e:1e:
ad:58:7a:11:90:f9:28:f7:6a:0d:23:30:cf:cb:b6:f9:6b:a7:
da:ec:22:c1:fb:2e:c6:ef:95:f6:82:29:9b:4b:35:20:7e:e2:
1f:72:55:b2:07:67:7c:ff:60:c0:2e:3d:36:85:49:5c:b1:cf:
5a:ec:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:20 2026 by rpki-client