Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: KsHUfybfyVrjjxvAhAjvlbPZb6jGHPAoQpnlilmMQ6s=
Subject key identifier: 24:C2:02:36:FA:AC:64:D0:18:74:01:DA:33:FF:00:D0:6E:A5:8D:D1
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019D39E55190CBEA2212FF19C7B2C4CE5936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 4F
Signing time: Sun 29 Mar 2026 14:00:22 +0000
Manifest this update: Sun 29 Mar 2026 14:00:22 +0000
Manifest next update: Mon 30 Mar 2026 14:00:22 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: JAXTTPv5vQ0hxDH3M+3jLK9K71S09GBd3JbwEAKMNe8=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:51:90:cb:ea:22:12:ff:19:c7:b2:c4:ce:59:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Mar 29 14:00:22 2026 GMT
Not After : Mar 30 14:00:22 2026 GMT
Subject: CN=24c20236faac64d0187401da33ff00d06ea58dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:44:08:fd:94:d5:f5:a0:bc:e6:09:17:c1:
c0:f9:f7:3d:54:11:5d:f9:5e:10:33:56:94:af:48:
51:e7:18:30:8c:83:0d:e5:92:6d:48:3d:6b:43:a9:
09:8f:9f:53:b9:bf:cb:59:87:36:ae:8d:21:6b:1f:
fc:5c:72:f7:3d:1e:4b:15:5a:c2:16:c4:d9:de:14:
90:eb:a1:2f:84:3a:bc:7c:37:e1:bb:50:1d:76:10:
20:6e:d2:32:81:db:e3:3d:a1:2c:ab:bd:80:0e:d7:
f0:45:c1:bf:22:58:e4:50:a9:e2:cc:83:b8:9b:50:
5f:d9:08:92:e3:2b:d1:74:7f:c1:0e:09:6d:59:88:
1b:d7:38:92:c5:bb:78:31:e5:b2:73:f1:4e:bd:07:
ae:91:75:36:e2:36:dc:f9:57:bf:dd:05:32:78:e5:
b3:03:79:44:2f:28:bf:e3:af:4f:74:c5:6b:44:50:
3a:c7:ef:ac:47:99:db:2e:d9:09:c3:54:97:b6:c0:
03:23:06:c3:e7:13:49:c8:7a:3c:f3:eb:fa:64:34:
bd:80:eb:49:14:ee:f5:da:7d:7d:d5:b4:82:3d:77:
10:55:f5:5a:f4:a1:da:53:98:b6:22:5b:e1:28:5b:
df:cb:fd:f5:a1:49:77:27:90:5a:35:aa:50:45:4d:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:02:36:FA:AC:64:D0:18:74:01:DA:33:FF:00:D0:6E:A5:8D:D1
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:32:d9:8f:a4:a6:b2:c1:c5:52:51:7c:6e:6d:b2:18:0c:
8c:b8:1f:a8:8f:8c:69:84:e9:d5:24:e8:4c:a9:89:62:c4:9f:
f6:b5:28:86:4b:d2:29:28:77:be:42:cf:c0:6c:bf:7e:c0:8a:
73:cd:32:bd:af:1a:e2:b9:b9:7b:54:5c:86:4d:c4:88:f0:e2:
54:e2:3d:eb:74:bb:c0:b5:1c:91:8d:ea:dd:a1:f9:fa:10:5a:
26:99:ef:6b:f7:14:b2:0d:0c:ee:73:ab:41:b9:31:59:8c:f3:
7a:0a:c7:89:71:9f:ec:ae:7f:d1:d0:71:bb:ec:eb:2c:20:26:
11:07:a7:bf:d8:d5:5d:ab:6c:ce:53:a2:1b:42:17:3d:a2:92:
fb:05:dd:c1:83:f3:b2:e4:81:b7:75:f3:21:49:9a:73:1c:7c:
a9:b8:d2:e4:20:40:1f:87:f5:8d:7f:68:2f:09:9a:43:a5:63:
47:f8:ca:2c:46:02:49:cd:87:b9:32:0a:a2:b0:9b:b1:26:d0:
ef:8d:09:f6:41:04:70:fe:2a:21:c6:dd:be:5b:28:e1:5d:8c:
d2:14:9d:c3:cb:55:03:be:db:7d:39:cf:21:25:04:dd:b4:1a:
14:70:30:74:67:80:a4:61:6d:aa:6c:d4:cb:97:b1:d3:d5:92:
f8:39:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:36 2026 by rpki-client