Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: fqwkjR9DybUwRwbKz2AMR6mTE0LnqtJAUdNXc9pNQi4=
Subject key identifier: 53:74:D6:C6:49:B6:D5:58:87:65:70:57:F3:B0:A5:9A:3F:7F:52:BB
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01A18262881A586F880423D3FF66EBC0689F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 10F7
Signing time: Wed 28 Oct 2026 12:00:57 +0000
Manifest this update: Wed 28 Oct 2026 12:00:57 +0000
Manifest next update: Thu 29 Oct 2026 12:00:57 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: +vShNqs6gusIVj/j7/x9z9G3BvPAO5TwkXo81gCM3os=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:88:1a:58:6f:88:04:23:d3:ff:66:eb:c0:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Oct 28 12:00:57 2026 GMT
Not After : Oct 29 12:00:57 2026 GMT
Subject: CN=5374d6c649b6d55887657057f3b0a59a3f7f52bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:b4:ee:01:ae:8c:79:a7:cb:5f:67:01:e2:
40:b6:63:a0:87:b7:38:8e:be:8f:37:32:ac:11:c2:
fd:62:34:fe:37:6b:3d:55:63:37:92:5f:af:b6:13:
6d:47:40:06:53:e5:a4:48:dd:a1:ad:80:69:ca:d3:
39:39:07:a9:c5:c2:60:48:37:1f:73:7b:c7:44:96:
0e:c8:b1:d4:22:62:3d:f5:48:b7:79:4e:e9:4b:65:
56:f8:1e:33:9e:c1:9c:5f:57:23:fe:60:20:de:96:
f1:32:f9:5a:6e:e6:1f:72:24:b3:91:77:32:1f:d9:
d1:d9:15:91:3d:1f:23:65:c0:86:41:84:1b:61:7d:
f8:b4:e7:e1:23:cf:cb:05:e4:79:84:df:40:f2:e0:
93:6e:a5:e5:35:b0:b3:c8:f5:5f:72:f7:df:35:dd:
2b:cd:e0:1b:ca:bf:4d:ac:47:37:47:09:f2:01:51:
02:f9:fe:a9:38:de:85:3a:cf:dd:ff:38:fd:fb:37:
6f:69:18:a2:2b:08:0a:e3:2b:86:cd:70:d0:88:83:
61:81:36:99:d9:d2:ab:96:5b:f5:38:9f:6f:70:f5:
34:10:52:b5:a2:2f:98:30:3e:a2:3d:e5:38:ff:63:
85:a7:e0:06:e7:a5:39:2d:19:82:d1:f2:a0:46:eb:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:D6:C6:49:B6:D5:58:87:65:70:57:F3:B0:A5:9A:3F:7F:52:BB
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:e8:d6:1e:23:e7:bf:00:01:05:79:46:ff:47:f2:bb:df:
1f:74:fb:fe:d9:fc:14:f0:87:1f:fb:f2:00:5a:de:34:d5:1b:
d8:59:fc:3e:67:6f:24:25:7d:b4:56:fe:6f:d2:b5:76:c1:95:
ec:10:13:de:6b:65:66:7b:61:99:72:b3:35:92:66:c1:e1:f5:
19:97:d4:09:da:57:e1:3c:74:15:cf:41:60:38:da:75:98:38:
9e:6e:4a:ac:d0:ed:b9:cc:cc:9c:80:2e:5f:a7:43:16:52:bd:
50:5f:ae:88:65:f5:32:c8:bd:5c:a5:f0:13:11:c4:c2:ed:da:
d9:fd:51:f4:bb:02:78:d0:02:94:0d:8e:3c:44:60:6b:2e:8d:
1b:23:c5:6a:4a:74:18:d3:31:11:7d:59:38:1d:e0:9b:bc:1c:
ac:54:59:40:1a:db:79:cf:07:a3:80:5b:73:14:50:66:53:d8:
eb:80:0f:9b:27:72:10:34:57:91:4d:39:05:4e:0a:75:e5:1e:
3a:da:9a:fc:ca:20:70:01:d6:11:57:f2:5d:a1:4a:2d:ea:7f:
86:d1:cf:96:93:b4:b3:c8:0a:e7:99:e0:ee:a5:bc:6b:8e:ee:
b2:bb:ff:3a:55:63:2c:fc:29:c7:b4:23:fb:15:48:2e:f0:51:
63:4e:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:43 2026 by rpki-client