Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: 4msrgks2OHaLWZNU2RON51f4ALEyTG1h3/NtR/tctcY=
Subject key identifier: E9:AE:FB:75:24:6D:0F:2F:36:41:4D:DE:E6:58:1A:D7:41:52:08:9C
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019EE4B1469A42A8E3E3814FCE415C636C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 012C
Signing time: Sat 20 Jun 2026 11:01:23 +0000
Manifest this update: Sat 20 Jun 2026 11:01:23 +0000
Manifest next update: Sun 21 Jun 2026 11:01:23 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: 2Keccwop49ZtmerDrkcGGinjBGSV556UqQQNweFDjRg=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:b1:46:9a:42:a8:e3:e3:81:4f:ce:41:5c:63:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Jun 20 11:01:23 2026 GMT
Not After : Jun 21 11:01:23 2026 GMT
Subject: CN=e9aefb75246d0f2f36414ddee6581ad74152089c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:36:a4:e0:0e:49:75:b8:96:c1:8c:85:51:40:
f3:a0:1f:74:ba:14:ef:e5:da:1c:11:93:7b:38:d8:
65:bf:04:01:91:6e:69:75:c9:73:5d:70:71:e6:98:
f0:1d:92:e7:e9:33:e0:05:13:ae:84:53:b1:c8:09:
2e:6d:02:ac:25:18:44:50:a6:a9:95:91:cb:c4:8c:
15:fe:eb:33:a4:98:bf:48:27:58:7b:2a:81:e8:a5:
90:3a:c4:a0:a6:f3:7b:72:04:1b:db:8e:72:5d:9d:
44:92:4b:02:e4:60:36:4c:13:a1:e5:43:45:3b:b9:
c1:68:c4:78:7c:99:d8:a5:cd:28:85:2a:af:d4:27:
12:28:ce:93:d9:90:10:cf:55:12:52:36:f9:98:ec:
1d:56:3b:da:56:2f:a6:b8:84:a8:83:f4:e0:4e:34:
41:14:30:85:e7:dc:5e:3f:38:b0:21:a7:c4:d7:d0:
84:d5:e4:88:80:fc:b3:58:aa:33:3b:41:38:91:cc:
69:83:6e:b6:e6:5d:80:54:8c:1d:6b:0b:bd:d0:41:
57:60:bb:71:04:9f:a2:a7:48:ac:4d:ab:bb:ba:c8:
7a:9b:33:29:14:d8:04:b5:94:68:66:1c:85:79:92:
4a:0d:4e:37:63:aa:ca:44:e8:8d:ec:29:73:e5:48:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:FB:75:24:6D:0F:2F:36:41:4D:DE:E6:58:1A:D7:41:52:08:9C
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0f:5f:3c:de:27:2c:27:f6:a8:ab:3c:31:f3:a4:21:b9:e0:
4a:47:dd:16:e4:9b:a9:38:c7:a4:98:b6:b4:c9:34:e6:9f:b8:
f0:8e:16:8e:23:fc:66:3d:7c:39:2a:7d:87:b6:d0:a3:8c:17:
20:a5:48:2e:94:ba:f8:f4:c1:21:c9:3f:19:e5:74:99:53:92:
25:28:f8:6d:1d:f4:e9:b0:f1:8f:5d:24:66:18:e2:ab:49:2e:
1f:f1:f3:2b:67:fe:ca:82:68:49:15:7f:2e:9f:ca:5f:cf:1d:
3d:2f:b3:fa:95:c0:1b:9e:8f:0d:7a:ac:5e:1f:0f:9d:69:4f:
a6:ae:67:ff:25:6a:bd:dc:10:7b:56:91:29:a5:83:b1:5f:7a:
ce:d0:56:a8:61:3e:4b:64:47:67:67:9d:b1:00:9a:68:bf:f9:
ce:6f:71:62:03:f7:e2:4b:e3:3a:8d:8a:f5:97:83:f5:a2:f9:
52:e8:b2:5a:8a:2c:72:3a:65:f1:5b:19:9f:32:94:c3:1f:62:
47:e9:56:6d:f2:8c:29:46:16:a9:29:d1:75:e5:80:30:f3:e0:
c0:fc:51:d5:fd:ac:18:9f:83:4d:3a:40:94:a5:25:6a:9c:cd:
94:7c:9b:4e:a6:78:ed:c6:92:48:91:21:6a:bc:73:4c:07:40:
d3:e5:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:55:41 2026 by rpki-client