Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: tn82F+7jwokN0Tegmis+aAto99AvbPt7DKtzH5eX0nM=
Subject key identifier: 23:AA:BE:C6:E3:13:FC:06:58:12:F7:66:02:DE:36:3C:6A:C7:61:BE
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019D37897AB7CA961F66D347B083E1128ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0EBE
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: o6x71G5jUjMVOuq56WkF0YmTXeLKxH0lIf7oqVboj0U=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7a:b7:ca:96:1f:66:d3:47:b0:83:e1:12:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=23aabec6e313fc065812f76602de363c6ac761be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:b9:04:cd:12:9e:c8:7e:a9:27:cf:19:d9:
c2:83:b4:6f:37:aa:96:44:dd:84:42:e8:a2:7f:84:
08:b8:c3:0f:73:c4:5b:8b:f7:f6:cb:9a:99:28:f0:
db:d9:ae:f0:67:6f:d1:96:b2:ca:f8:d7:a8:9b:0d:
6f:ef:32:fb:a0:1c:83:8d:3f:bc:53:43:26:4f:7d:
91:3b:81:06:70:af:4c:58:5f:67:f5:60:1d:fb:33:
ec:e6:9a:9a:9b:00:3c:9f:e4:34:87:f8:63:8a:79:
7d:5b:e1:8c:79:d4:49:ba:62:71:ba:82:34:af:f7:
e0:56:4c:0d:45:a0:d2:c7:f4:e1:13:79:42:4e:b0:
d9:77:aa:16:a6:ce:f5:c8:51:56:94:70:f6:4a:ab:
a7:a2:e0:f3:fe:b8:cc:ab:f0:9c:df:a1:2c:44:9b:
73:20:c6:de:cc:f1:26:dc:1a:2b:cf:aa:f6:84:e9:
0f:09:ad:d0:56:70:c4:97:b7:71:51:0a:fa:cd:21:
37:d3:e8:b8:0a:38:11:e0:fb:a9:72:f2:21:7b:c0:
c7:6c:18:6a:9b:4e:03:b0:6e:8e:00:f7:79:ce:fc:
85:f3:ef:31:1b:46:37:0f:04:84:d0:21:71:a9:8a:
52:8e:44:43:da:27:95:88:55:ce:36:cf:ca:52:4e:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:BE:C6:E3:13:FC:06:58:12:F7:66:02:DE:36:3C:6A:C7:61:BE
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f0:18:0d:ed:b4:e9:1d:4d:f0:82:2b:9f:e8:77:c3:a7:83:
68:7e:f0:d4:3a:21:bf:b9:6a:31:22:5a:b0:dc:e4:5a:72:c7:
dd:65:06:d8:de:8b:d8:1b:09:d7:df:21:1b:2a:31:3a:d6:44:
2e:14:5c:3d:5a:23:21:5b:ae:a3:e6:c2:1e:25:91:a4:6b:d8:
0b:1c:69:9f:0d:63:62:08:37:7e:6d:c0:b7:7f:ec:bc:85:bc:
bb:2a:6c:28:99:99:e6:24:91:1b:6a:a6:5d:60:c8:4f:7e:f1:
23:c8:c4:7d:a7:51:8b:25:63:ab:36:76:fb:f2:fc:1b:9b:f7:
2b:09:bb:20:1b:9f:82:03:59:11:4b:39:35:fb:75:36:1a:e7:
73:fb:a1:da:84:04:89:3b:23:2c:e5:75:d0:dc:77:05:47:db:
42:4d:a3:16:d5:d2:0d:29:68:22:96:2b:4c:e3:c7:a3:3c:ba:
2f:12:4f:e4:77:c1:ad:c5:83:5d:95:c2:4c:7f:b8:08:c8:b5:
ff:c4:75:72:73:54:63:64:6e:5c:ce:d6:e1:df:08:91:5c:02:
58:e7:14:ae:0a:d5:11:c4:d6:7b:9d:a4:d5:c5:fc:e0:83:e6:
55:48:52:49:12:b2:be:ee:98:ff:10:ed:a3:31:e8:a2:d9:20:
23:b6:e6:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXq3ypYfZtNHsIPhEorPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjYwMzI5MDMwMDQ5WhcNMjYwMzMwMDMwMDQ5WjAzMTEwLwYDVQQD
EygyM2FhYmVjNmUzMTNmYzA2NTgxMmY3NjYwMmRlMzYzYzZhYzc2MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYK5BM0Snsh+qSfPGdnCg7RvN6qW
RN2EQuiif4QIuMMPc8Rbi/f2y5qZKPDb2a7wZ2/RlrLK+Neomw1v7zL7oByDjT+8
U0MmT32RO4EGcK9MWF9n9WAd+zPs5pqamwA8n+Q0h/hjinl9W+GMedRJumJxuoI0
r/fgVkwNRaDSx/ThE3lCTrDZd6oWps71yFFWlHD2SqunouDz/rjMq/Cc36EsRJtz
IMbezPEm3Borz6r2hOkPCa3QVnDEl7dxUQr6zSE30+i4CjgR4PupcvIhe8DHbBhq
m04DsG6OAPd5zvyF8+8xG0Y3DwSE0CFxqYpSjkRD2ieViFXONs/KUk4dkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOqvsbjE/wGWBL3ZgLeNjxqx2G+MB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfAYDe20
6R1N8IIrn+h3w6eDaH7w1Dohv7lqMSJasNzkWnLH3WUG2N6L2BsJ198hGyoxOtZE
LhRcPVojIVuuo+bCHiWRpGvYCxxpnw1jYgg3fm3At3/svIW8uypsKJmZ5iSRG2qm
XWDIT37xI8jEfadRiyVjqzZ2+/L8G5v3Kwm7IBufggNZEUs5Nft1Nhrnc/uh2oQE
iTsjLOV10Nx3BUfbQk2jFtXSDSloIpYrTOPHozy6LxJP5HfBrcWDXZXCTH+4CMi1
/8R1cnNUY2RuXM7W4d8IkVwCWOcUrgrVEcTWe52k1cX84IPmVUhSSRKyvu6Y/xDt
ozHootkgI7bmWw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:58 2026 by rpki-client