Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: BiE09R0yz5mg+BTCSb62pGP0ELQoaV2B+xkvwQhg1xo=
Subject key identifier: 42:12:54:96:C3:77:7B:38:1B:D2:8A:CA:B3:EF:AB:FE:8B:2B:B1:5F
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 01A0E4E328A127D70F1616F820C0B42245D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 0118
Signing time: Sun 27 Sep 2026 22:01:27 +0000
Manifest this update: Sun 27 Sep 2026 22:01:27 +0000
Manifest next update: Mon 28 Sep 2026 22:01:27 +0000
Files and hashes: 1: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: +76l5NtYlNtbjreARXtxjClZT1mpzFoR+m78De/kNkY=)
2: iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa (hash: UgNnrp4T2gV/9ZM+lt6scNgekuq4L4SWsoVKSp2uNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:28:a1:27:d7:0f:16:16:f8:20:c0:b4:22:45:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Sep 27 22:01:27 2026 GMT
Not After : Sep 28 22:01:27 2026 GMT
Subject: CN=42125496c3777b381bd28acab3efabfe8b2bb15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:fc:b0:d4:04:1d:dd:f9:af:86:9b:8f:34:
c1:18:9c:7b:ba:4e:78:d8:f3:c7:85:6f:15:0a:2d:
1f:e5:7b:fc:c8:e2:70:a4:5c:18:d9:1b:94:e8:30:
09:2e:a2:8c:10:a2:4d:72:59:20:e1:6f:b2:06:26:
2b:be:80:16:8c:35:42:26:f5:5d:e0:4f:ff:91:42:
b6:0a:69:5c:c6:7a:ba:c9:01:cd:db:7a:74:c4:64:
2d:31:30:54:f1:33:d9:c6:d7:42:4f:32:b6:cd:ab:
82:83:1e:db:9e:f3:03:55:20:5c:bf:c9:9b:56:ea:
be:67:48:87:cb:b2:3f:15:94:e2:95:04:2a:95:7b:
82:98:58:1a:d7:0f:0f:61:6a:69:80:2a:31:53:7e:
65:20:ea:83:0d:57:63:c4:4c:a5:38:1e:c7:b7:51:
5e:74:44:6d:88:c5:51:31:31:b0:cf:f2:ae:2e:21:
65:df:da:67:64:ef:d3:0e:76:58:a9:1e:51:d2:8e:
9a:37:08:7e:58:21:16:0b:ac:c1:b4:c3:52:2e:7b:
80:d9:aa:b6:c5:c8:2a:8c:5d:d8:0f:e0:38:33:1b:
23:94:d4:27:bd:92:80:6d:e0:07:19:0a:99:98:ea:
e3:4f:05:15:18:b9:e1:ab:30:d2:fb:04:24:3b:a3:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:54:96:C3:77:7B:38:1B:D2:8A:CA:B3:EF:AB:FE:8B:2B:B1:5F
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:96:ad:b1:d8:1b:5d:bc:71:d6:6a:3e:b2:6c:16:9f:02:
72:e1:b0:1f:ce:24:05:29:93:01:77:2d:75:77:9f:ef:4e:9d:
23:62:3b:b3:24:8e:3b:7a:39:6b:ed:e6:a1:f5:b7:eb:d4:e6:
9c:da:a8:f1:8b:4f:a0:b2:1f:f4:5b:d4:85:6c:1d:c0:d5:23:
94:db:30:4c:95:6c:b9:20:ad:b1:b4:5b:a3:7f:d6:4c:8a:f8:
76:48:bc:33:7c:67:9f:37:24:0d:56:41:2a:93:96:fc:db:a2:
8d:c6:53:e4:84:af:bf:3e:f9:3c:4a:9f:79:6e:e5:73:a4:50:
b2:6c:bd:63:dd:fb:bd:3d:42:45:3e:4b:38:09:9f:29:10:5f:
c3:02:a0:22:f2:22:28:dd:81:1c:38:84:91:c3:6f:41:a5:2e:
42:52:4a:a7:4d:0f:24:2a:21:dc:b3:10:39:49:c6:43:c8:43:
60:99:fb:bc:06:79:25:db:6c:8c:fe:a4:d4:9f:cd:1c:da:ea:
41:d6:bf:62:d7:4a:6d:ec:96:c3:5f:22:29:c3:c9:d5:26:58:
de:fa:72:ac:c7:c9:d2:d0:65:a1:12:d0:65:a0:1a:a4:ce:f2:
77:10:84:17:0b:08:56:ed:74:ec:b5:5e:95:29:9a:af:92:98:
05:94:c9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDk4yihJ9cPFhb4IMC0IkXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OGMzZTkyMTA2OGEyMGVjNjJiMDNhMmQ5YTE5NzFhNTU5
OTA1ZGEwHhcNMjYwOTI3MjIwMTI3WhcNMjYwOTI4MjIwMTI3WjAzMTEwLwYDVQQD
Eyg0MjEyNTQ5NmMzNzc3YjM4MWJkMjhhY2FiM2VmYWJmZThiMmJiMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+L8sNQEHd35r4abjzTBGJx7uk54
2PPHhW8VCi0f5Xv8yOJwpFwY2RuU6DAJLqKMEKJNclkg4W+yBiYrvoAWjDVCJvVd
4E//kUK2Cmlcxnq6yQHN23p0xGQtMTBU8TPZxtdCTzK2zauCgx7bnvMDVSBcv8mb
Vuq+Z0iHy7I/FZTilQQqlXuCmFga1w8PYWppgCoxU35lIOqDDVdjxEylOB7Ht1Fe
dERtiMVRMTGwz/KuLiFl39pnZO/TDnZYqR5R0o6aNwh+WCEWC6zBtMNSLnuA2aq2
xcgqjF3YD+A4MxsjlNQnvZKAbeAHGQqZmOrjTwUVGLnhqzDS+wQkO6Pr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEISVJbDd3s4G9KKyrPvq/6LK7FfMB8GA1UdIwQY
MBaAFIWMPpIQaKIOxisDotmhlxpVmQXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFl3LWtoQm9vZzdHS3dPaTJhR1hHbFdaQmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjBhMWUtZjg4MS00MWY3LTg1YTUt
ZjBjMDM1MGQ2MzIwLzEvaFl3LWtoQm9vZzdHS3dPaTJhR1hHbFdaQmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lZjBhMWUtZjg4MS00MWY3LTg1YTUtZjBjMDM1MGQ2MzIw
LzEvaFl3LWtoQm9vZzdHS3dPaTJhR1hHbFdaQmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFyWrbHY
G128cdZqPrJsFp8CcuGwH84kBSmTAXctdXef706dI2I7sySOO3o5a+3mofW369Tm
nNqo8YtPoLIf9FvUhWwdwNUjlNswTJVsuSCtsbRbo3/WTIr4dki8M3xnnzckDVZB
KpOW/NuijcZT5ISvvz75PEqfeW7lc6RQsmy9Y937vT1CRT5LOAmfKRBfwwKgIvIi
KN2BHDiEkcNvQaUuQlJKp00PJCoh3LMQOUnGQ8hDYJn7vAZ5JdtsjP6k1J/NHNrq
Qda/YtdKbeyWw18iKcPJ1SZY3vpyrMfJ0tBloRLQZaAapM7ydxCEFwsIVu107LVe
lSmar5KYBZTJ/A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:22:53 2026 by rpki-client