Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: qHV6fp+QBg89DFRmMBAKtv4/fJvXse1zTFD35smKUcM=
Subject key identifier: 48:AD:15:94:C1:E5:73:5E:40:63:08:44:94:E0:08:F1:55:70:89:B7
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01A08B319FAFF6AEF9CD8EDE31892EBCB6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 1077
Signing time: Thu 10 Sep 2026 12:01:20 +0000
Manifest this update: Thu 10 Sep 2026 12:01:20 +0000
Manifest next update: Fri 11 Sep 2026 12:01:20 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: qMkiBsaPVAOaa/gwF5PVb1JTiW70zbrPjMr1QR/XOUg=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:9f:af:f6:ae:f9:cd:8e:de:31:89:2e:bc:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Sep 10 12:01:20 2026 GMT
Not After : Sep 11 12:01:20 2026 GMT
Subject: CN=48ad1594c1e5735e4063084494e008f1557089b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:3d:37:83:f5:57:dc:46:e7:6d:49:37:37:
9e:cb:2a:c8:7b:e7:8d:e2:79:a2:c9:3e:7e:87:c6:
d6:9b:48:07:04:e6:4e:39:6f:7a:af:c1:56:99:a0:
4f:b5:42:73:30:15:36:2a:1a:c2:2c:5b:c6:79:e4:
81:c8:49:7f:bf:8e:48:17:f9:d5:75:e5:5d:a7:2f:
f9:0c:ec:01:3c:1f:54:e6:c1:45:ed:39:d1:f1:a4:
bb:1c:d9:a0:2c:20:8a:73:1c:16:fe:78:4a:ff:2d:
3c:9f:2e:32:8e:ee:51:c7:d8:91:3a:fc:ae:aa:f3:
84:ea:eb:e2:8d:87:ff:d2:79:ab:1c:98:73:14:85:
b4:d3:d6:6b:0a:dc:18:22:57:cd:95:bc:e6:e0:dd:
19:80:e1:e4:f7:60:fc:10:e1:5d:79:94:f8:63:1b:
ad:6a:8e:5b:c3:c5:60:b6:21:3f:cf:4c:2c:0d:a6:
c6:f3:c1:e1:41:c5:c5:d2:20:11:c8:a1:17:66:62:
35:f4:73:48:4f:4c:d5:42:04:55:0b:ed:db:8d:58:
13:8e:a4:11:42:3e:ef:be:23:2b:89:9d:b7:cb:92:
d7:29:fc:46:c2:f5:f3:5e:0d:87:fa:6e:1a:8c:bc:
22:70:54:36:29:24:82:54:0f:51:4b:b8:f8:9b:1a:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AD:15:94:C1:E5:73:5E:40:63:08:44:94:E0:08:F1:55:70:89:B7
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:61:e1:dc:ac:68:d2:75:c5:48:6a:27:3e:d0:6d:fe:f2:
20:a9:ba:84:e1:ad:ef:c4:b4:fd:31:f8:01:d1:e6:cf:9f:9a:
28:df:59:5c:e3:95:80:d6:c3:ae:4e:28:e6:fb:bd:b2:75:84:
91:ca:66:69:c1:bd:d5:be:05:35:19:de:c9:08:86:99:9c:50:
30:1b:9f:eb:45:ed:41:39:3a:8d:72:17:25:25:f6:14:43:57:
e1:31:16:68:9f:61:57:75:d9:a2:28:6f:87:4b:65:ee:e3:52:
27:af:3f:dd:54:ce:6f:b1:8c:ca:7e:6c:1a:25:c5:34:8c:4b:
74:2d:62:54:43:77:dd:8d:11:a4:a7:65:b4:09:49:bd:72:7c:
4c:cd:84:12:ec:9c:41:ce:5c:cf:d0:4d:63:d3:cb:44:60:3c:
ef:62:14:e9:74:b6:8a:80:44:42:ec:de:81:13:a1:0b:8a:41:
ab:b2:9a:fd:9e:1a:e2:00:20:dc:65:1c:3b:c7:31:5e:89:23:
7c:3a:6e:8e:a2:89:45:bd:93:a8:fa:ca:ac:a9:c4:5b:52:d9:
19:51:5e:d1:f4:88:89:f8:cb:57:39:ec:69:3a:9e:19:a8:75:
d0:44:55:7e:d2:86:44:58:73:86:81:90:d5:02:25:2b:97:cf:
3a:ac:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:54 2026 by rpki-client