Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: NPo9LPEaCAw2l59Efw1Pb6l+13CvjQXtcOSuwDbqJ9g=
Subject key identifier: 9C:F8:D7:A8:1E:77:DB:AE:D1:CC:AA:D1:56:BD:6B:3B:2A:8F:A7:BA
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019F99CB4C5E5DBDA379760464B5DB1C7C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0FFA
Signing time: Sat 25 Jul 2026 15:01:05 +0000
Manifest this update: Sat 25 Jul 2026 15:01:05 +0000
Manifest next update: Sun 26 Jul 2026 15:01:05 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: PoCBwdGVwzUW4uImf58F56iezTRTil01PvbQGZ1BZY4=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:cb:4c:5e:5d:bd:a3:79:76:04:64:b5:db:1c:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jul 25 15:01:05 2026 GMT
Not After : Jul 26 15:01:05 2026 GMT
Subject: CN=9cf8d7a81e77dbaed1ccaad156bd6b3b2a8fa7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:df:c8:7f:91:dd:2f:4e:f0:d0:3e:5d:59:
b1:82:9e:41:04:4e:cc:3e:34:27:b1:96:69:03:05:
15:d6:f9:bf:29:10:68:73:f6:1e:c7:bc:fd:ad:be:
b1:40:b2:2d:74:39:71:db:91:d6:77:60:03:03:70:
33:71:b4:a4:19:60:a0:e1:c0:f5:77:df:5c:35:32:
37:60:a5:28:6a:46:bd:56:1f:2b:97:30:f7:38:4f:
e8:d6:30:83:fb:a1:a1:b2:b5:94:46:8f:5d:13:2d:
26:95:e1:0a:84:e9:54:73:0c:21:1d:75:3e:2c:f4:
08:73:33:ed:a4:da:81:93:31:90:b2:7b:2b:59:4c:
e4:f5:ad:e1:cd:ee:0a:03:c5:44:b1:d4:c4:1c:1b:
b2:b5:30:18:11:9e:c7:d5:01:1b:ba:ff:05:0c:5e:
40:3d:a8:c7:70:5f:c3:a2:22:ff:92:25:17:9c:1b:
60:80:3c:a0:c1:58:aa:4f:08:ef:58:7a:fc:b9:fa:
24:02:66:98:f3:b6:7b:65:63:f0:ef:04:1b:d6:5d:
d3:64:0f:aa:89:d2:9c:84:ce:19:70:94:15:7d:fb:
06:34:cd:ab:07:1a:3a:a5:6e:b0:85:32:f3:6e:76:
ee:b7:06:81:56:5f:88:d0:ee:c9:ab:5c:6a:ac:ad:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:D7:A8:1E:77:DB:AE:D1:CC:AA:D1:56:BD:6B:3B:2A:8F:A7:BA
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f4:e0:c2:51:af:17:49:22:f0:2c:5e:9c:74:6b:bd:f2:ca:
1c:ab:a5:7e:d1:1d:6b:5b:e1:00:c1:9d:d1:7a:3c:85:54:c5:
8a:6f:41:eb:06:9f:1c:eb:63:b3:67:1b:b3:34:77:8d:ea:80:
c8:21:b4:1a:2e:e8:c3:cd:1b:a0:d2:73:f2:9d:f5:b6:54:da:
19:d5:7b:59:de:9e:80:74:97:dd:3e:1a:71:36:31:11:06:3f:
d0:64:66:10:0a:5b:a6:db:54:da:24:8a:5c:b3:01:04:3f:57:
bd:1d:91:3c:8b:3d:b5:43:a0:23:fc:86:d4:72:f0:9b:f5:a7:
ac:45:79:37:e1:b0:81:92:d0:f0:87:fd:f1:7e:12:18:ea:ee:
bb:aa:ef:cb:bc:55:97:d7:12:75:9e:aa:b3:9a:54:a3:a7:d0:
98:2b:8f:41:52:b9:50:24:68:3e:04:33:4e:48:74:ef:8e:76:
a4:05:fe:1e:40:a4:da:c5:a2:45:b5:6b:dc:4c:f9:7c:f5:16:
5e:90:86:6a:85:0b:c7:84:32:52:9f:5d:8f:db:18:07:f3:06:
5e:14:15:e5:f4:ea:a7:97:5c:19:bf:86:eb:01:53:1f:5b:ba:
d2:7f:31:87:a1:04:58:ca:ed:73:95:ed:38:d8:c0:fd:68:89:
4e:9a:56:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 18:59:40 2026 by rpki-client