Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: +dKwQqDjfCW0wOWg0OFRGME0La/nun47rxuf1EY23tE=
Subject key identifier: 2F:4D:13:AA:99:EF:E4:75:55:72:43:3A:37:3A:45:32:38:8E:B0:33
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019FFAC83026D4333E8FA3370EE9667AD2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 01BC
Signing time: Thu 13 Aug 2026 11:00:51 +0000
Manifest this update: Thu 13 Aug 2026 11:00:51 +0000
Manifest next update: Fri 14 Aug 2026 11:00:51 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: AiG30IOzWvkN4TfizrUi6nBoUC9PPCCL0hU4uEu0gEc=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c8:30:26:d4:33:3e:8f:a3:37:0e:e9:66:7a:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Aug 13 11:00:51 2026 GMT
Not After : Aug 14 11:00:51 2026 GMT
Subject: CN=2f4d13aa99efe4755572433a373a4532388eb033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:ca:c6:a5:db:d5:a0:ac:4d:68:1b:ce:71:
e3:3c:be:81:6f:1b:d6:9b:55:c3:85:87:8d:d8:57:
93:50:85:f6:5f:29:04:77:64:13:a0:25:de:9f:76:
7c:d9:b7:96:a8:49:17:a1:8f:d9:70:10:d4:38:29:
13:0a:d0:ba:55:eb:b9:3c:fd:2d:99:0b:01:26:3e:
a7:ed:d0:07:02:1c:a0:46:c1:b6:60:ef:3f:2b:7c:
fa:ce:69:59:ea:ba:26:25:dd:63:a1:bc:93:7b:40:
46:28:34:e1:7c:33:05:c1:d4:24:06:39:da:6f:5f:
56:b7:1b:d1:4f:c5:b2:29:d9:de:df:70:0e:01:5d:
b7:73:16:e9:b1:55:0f:eb:fd:fe:f7:d2:ae:d2:70:
af:f4:96:1c:f3:ac:04:a0:d6:48:b9:87:56:4f:c8:
88:07:c4:d6:d3:dc:84:03:6b:02:64:f7:8c:e5:58:
50:b3:bd:a6:a0:a8:09:56:40:49:7a:3d:29:ee:27:
98:42:55:9a:17:46:12:68:98:ae:de:43:b5:8e:69:
6a:e6:db:78:9d:75:22:4e:92:89:fe:4a:65:31:ec:
48:10:af:89:11:1c:d5:55:70:1e:4b:11:83:4c:e3:
80:61:e0:e1:99:e4:e6:46:fe:95:30:61:30:a7:7e:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:13:AA:99:EF:E4:75:55:72:43:3A:37:3A:45:32:38:8E:B0:33
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ed:74:cc:3c:8a:e3:61:7b:4f:c3:5f:36:dd:dd:5f:c6:ed:
2c:89:96:26:90:f1:ba:7d:1c:94:44:7b:a8:1f:6c:76:48:a5:
b4:21:e9:92:0d:36:12:24:76:8d:a2:24:51:61:56:66:e6:21:
d7:8b:3b:58:77:03:71:66:f6:d9:8e:04:ce:ec:01:ac:ee:7d:
28:47:3d:17:82:61:99:e0:de:13:be:80:b5:02:e3:74:cd:92:
0b:ea:e8:5f:75:4a:20:f5:10:7f:e7:90:fb:a4:6a:e4:eb:f0:
f3:75:f8:63:c5:36:f6:76:42:60:71:92:ec:2d:45:f6:35:22:
0a:d5:85:eb:ee:b7:96:5a:bf:15:22:8c:b6:73:61:df:51:f2:
f5:19:ea:b9:ec:0b:8f:23:8c:37:43:a4:f7:17:2c:65:60:7d:
13:b0:ae:62:08:e6:a4:0d:a6:f9:2a:89:ee:ab:aa:51:25:b8:
22:56:54:b5:2b:41:5a:bd:fc:e4:04:af:0f:d1:5e:69:8b:bb:
4c:bc:ae:2d:ee:81:c8:8c:c8:d9:09:04:6f:02:80:5c:d2:07:
aa:be:a4:6d:ef:e5:e8:5a:30:fd:55:fc:d0:4b:f7:cd:57:de:
05:2d:0f:fb:65:78:22:c2:af:a2:3b:f0:7b:d5:8b:79:06:50:
8c:ee:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:13:46 2026 by rpki-client