Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: +4nz7xjARV0M8i2gNcU1FratNWEdJVuID8gfLZM2Xk8=
Subject key identifier: 4D:AB:D0:CB:87:A0:18:D1:FF:42:C9:15:48:B9:0A:F6:4F:B5:44:E9
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 019FEC314AC734901173D726DC9E57A20ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 97
Signing time: Mon 10 Aug 2026 15:01:21 +0000
Manifest this update: Mon 10 Aug 2026 15:01:21 +0000
Manifest next update: Tue 11 Aug 2026 15:01:21 +0000
Files and hashes: 1: 8OTUnfIsOo0HOvnAnxDiliLhxVk.asa (hash: yWmYRKzlchVAVmIXrfu5eKc71tco2zin1I9txnwVrGw=)
2: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: VnrWDXZEfk7aaXJ+j5yXH7KhW1dUhpm3NOiLrauG5nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 14:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:31:4a:c7:34:90:11:73:d7:26:dc:9e:57:a2:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Aug 10 15:01:21 2026 GMT
Not After : Aug 11 15:01:21 2026 GMT
Subject: CN=4dabd0cb87a018d1ff42c91548b90af64fb544e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:b8:76:fb:72:51:c9:15:dd:5f:be:39:77:
91:cd:25:74:1f:aa:3b:6a:ac:a0:e4:a2:81:4a:cc:
8e:9f:e1:df:f6:0a:a0:39:e5:19:03:82:86:4a:1b:
f8:56:0b:94:47:80:f1:28:a3:e6:b2:9d:1b:48:ba:
89:fe:28:ba:0e:32:a4:4f:4b:4d:f1:be:71:82:cd:
30:9d:73:d7:39:b0:a6:93:06:77:e0:75:0a:ca:8d:
a4:9c:6c:58:ef:b0:f1:80:41:0e:83:2c:fd:02:32:
ed:76:c9:e3:f9:2e:0b:f0:fe:c5:a0:33:e0:5f:3f:
bd:d5:a8:c2:0f:94:03:7d:b0:d1:30:44:d0:e0:aa:
77:61:f4:e5:7e:ae:54:e9:eb:56:00:71:27:6c:9b:
b9:f7:92:3b:01:33:b9:3f:c7:42:a5:9d:9d:72:46:
97:27:95:83:c2:b4:bd:14:8c:6f:37:d6:16:ef:26:
93:0c:ec:46:9b:cd:cb:7c:62:05:73:69:12:42:45:
4d:46:bc:64:e8:0c:9c:4a:8a:d5:62:79:d6:61:97:
7f:01:fb:da:19:c6:55:18:36:84:0e:a6:91:9a:56:
c8:10:22:f4:16:f9:cf:5c:46:6c:30:97:b9:bd:53:
d7:c2:70:8d:79:48:bc:29:e0:81:e5:f1:dc:bc:0a:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:D0:CB:87:A0:18:D1:FF:42:C9:15:48:B9:0A:F6:4F:B5:44:E9
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:50:26:27:e5:48:0f:28:75:86:7e:f0:58:4f:cb:d2:f7:
20:e7:42:5b:17:e2:c0:58:99:28:54:4d:72:f9:c7:e9:83:9c:
19:74:87:78:89:b4:30:09:7e:5c:17:bc:19:ed:f8:1c:90:90:
75:dd:d3:2f:e1:09:e2:c5:76:3c:29:e2:77:e8:53:39:70:c8:
5a:75:c5:62:86:49:00:2d:6a:e1:80:58:04:47:f9:c6:19:3e:
7a:f0:fc:48:e8:22:4e:cf:b0:16:13:30:52:4f:c8:41:17:74:
e2:c7:50:69:4e:d1:a1:3e:44:07:7d:18:8f:70:0b:c9:6e:82:
e4:33:b4:ed:60:9f:6b:dd:44:d7:81:54:8e:67:4e:2b:9e:53:
ae:13:40:ec:54:ff:38:24:57:3f:6b:ba:3f:e1:25:92:f8:05:
00:d2:01:bc:4e:04:f4:c4:e9:3f:0a:8d:94:ed:1a:86:73:8c:
ad:1f:43:ec:4e:09:44:fb:71:f4:16:3e:9a:a9:87:7b:92:88:
08:ab:82:b4:a8:30:e7:58:35:52:21:2b:7f:51:95:8d:bb:7a:
79:ed:a1:3d:c2:86:00:21:b0:b8:ae:ab:89:e9:e0:5c:d3:6b:
a6:13:d4:75:7e:0f:ca:1c:60:26:34:41:77:b7:f8:d5:a3:49:
11:50:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 22:43:38 2026 by rpki-client