Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: xu8yoL1lPuwoAA5x6w7+PjixH6wI9CCviThOJ+2gKP0=
Subject key identifier: 30:70:5D:37:D6:DB:38:56:8B:ED:68:57:FA:EF:6B:BA:50:F4:82:B1
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019E62DF05A9BA53009612AD31E1F5BF491E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0F59
Signing time: Tue 26 May 2026 06:00:43 +0000
Manifest this update: Tue 26 May 2026 06:00:43 +0000
Manifest next update: Wed 27 May 2026 06:00:43 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: 2lAwukZggIdX6Y7W8cFqWhicWTZZxiQ8HVGNI3pTydA=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:62:df:05:a9:ba:53:00:96:12:ad:31:e1:f5:bf:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: May 26 06:00:43 2026 GMT
Not After : May 27 06:00:43 2026 GMT
Subject: CN=30705d37d6db38568bed6857faef6bba50f482b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:5e:be:18:dd:e5:0b:22:10:43:c9:3c:fe:
62:e9:e5:19:2b:e8:d1:26:af:7d:4c:74:71:9f:19:
3c:3e:11:72:bb:ff:38:7c:3e:6a:43:26:59:cf:5a:
14:de:c9:0d:97:f8:36:40:a7:9f:6d:f2:92:ae:ab:
f7:20:da:25:d2:75:6b:94:44:b6:0b:00:e8:7a:c1:
21:0e:f4:6b:be:33:df:24:e8:d8:4d:9e:7c:97:b4:
d6:30:f3:a4:69:8b:65:9c:3f:f9:04:fc:8a:65:34:
1d:ea:e6:7d:46:09:5d:55:0b:9b:6b:0c:49:5a:17:
be:fd:d2:f8:2b:7d:bb:e7:98:03:e0:4b:a1:89:b2:
44:5c:a6:1b:0b:b8:0f:9e:11:73:ff:db:62:7a:92:
20:78:c7:b9:b0:bf:ca:df:48:d2:f8:c3:5d:ca:03:
6b:b5:25:42:29:64:fe:3c:cf:d5:25:ad:f0:11:9b:
85:28:f9:45:31:31:5c:e6:74:c1:b1:b3:29:c0:af:
65:5f:20:2f:1a:0a:f1:78:26:92:50:e6:72:6a:8d:
87:de:67:7b:8d:fa:1c:6d:80:7a:bc:15:e4:e5:2b:
be:c6:17:33:e7:30:02:bf:ad:36:2c:b1:62:b3:c9:
eb:40:6a:72:1a:93:58:fc:d9:90:dd:c9:d0:f8:cb:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:5D:37:D6:DB:38:56:8B:ED:68:57:FA:EF:6B:BA:50:F4:82:B1
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:00:6b:db:a6:77:79:22:43:68:a0:6e:d0:66:a3:8d:ce:
1a:06:30:d6:2a:d3:ae:05:5d:87:95:10:14:dc:60:d7:e2:88:
7d:a2:08:3c:ae:f8:91:8c:21:be:be:52:59:74:56:3f:df:08:
2a:56:ef:c7:46:0e:95:11:41:66:e1:c6:a8:59:70:48:c8:1a:
71:c8:2a:8b:1b:57:17:8e:6c:5f:cb:88:77:df:d5:c1:73:db:
76:73:ca:9e:29:a1:af:d1:45:d2:b4:61:6e:54:b8:85:3f:29:
90:ea:4f:75:69:7f:dc:7c:fa:7e:6f:a3:c4:bb:90:e5:a6:41:
10:97:6d:65:03:07:2f:0e:e3:04:a2:3a:be:d1:65:dd:16:68:
e1:fa:0f:55:b4:18:82:07:66:ac:0b:a6:0f:cb:ba:84:5e:cc:
a0:0b:03:1c:96:eb:7a:84:8a:97:34:90:d4:b0:aa:5a:08:bb:
5e:9d:7a:ba:4d:c4:0a:b1:cc:e9:19:26:5b:fb:c5:ea:1b:12:
74:d2:af:0a:ab:37:96:f0:9d:0d:ac:79:3e:45:ca:1a:43:f8:
c6:ee:26:6e:54:57:63:c3:7d:63:4f:dd:0f:d5:33:03:17:85:
83:5e:4e:cd:dc:30:d0:16:26:8e:a3:eb:05:87:c1:d5:6f:76:
1d:2a:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 15:00:30 2026 by rpki-client