Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier: /lNh4vUKGBeJY5WTFPEUqH2LSdptRSX2Ewcq88uzT54=
Subject key identifier: CC:55:C7:E8:8A:24:4F:B6:C8:58:B3:C8:C5:FD:F0:4A:E3:FB:28:78
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial: 019D38D3B31DA7668B503890A4B2CD5813A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number: 0D76
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: BYz9uB7ToNCOeeYZ5Tx33yNJmX448hNRuEk87Tkf5Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:1d:a7:66:8b:50:38:90:a4:b2:cd:58:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=cc55c7e88a244fb6c858b3c8c5fdf04ae3fb2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:7f:e9:b1:cf:51:14:c5:13:4d:b0:b8:0f:
27:64:99:52:6a:61:fe:7e:b6:91:05:8b:0d:03:92:
dc:ae:7a:43:7d:6a:d7:1e:ba:0b:31:e7:b2:c0:dd:
33:8f:15:f9:31:d6:7e:50:3a:78:56:e0:03:ba:1d:
12:4f:c3:32:26:a1:6a:09:2c:55:53:67:d3:2d:a6:
c9:be:5f:97:43:68:29:ad:a2:3e:7e:92:91:78:91:
45:6c:20:66:18:f2:b4:af:e3:49:c5:e9:b9:e4:fe:
2e:30:51:00:61:28:8d:f5:83:d4:e6:e1:e9:99:49:
f3:fc:1c:16:af:0f:1b:f1:86:1a:63:e3:43:ca:bc:
0f:12:20:9a:94:2d:07:9e:7a:f3:17:d2:65:ea:50:
60:c2:e4:b0:43:43:cb:09:68:58:a6:eb:ea:04:29:
da:44:a4:d0:27:3c:b1:06:34:bc:6c:cc:0f:8f:e5:
a2:2d:08:d2:30:f7:03:d9:34:82:6f:85:eb:9b:f4:
16:59:e1:79:f1:e1:50:13:42:dd:4d:1f:5b:5a:27:
c7:00:d9:e1:44:65:6d:fc:e9:7c:bf:71:fe:b9:01:
be:42:f9:ee:bf:22:8c:91:51:a6:48:73:58:2c:6d:
54:44:81:63:7c:24:6b:21:f1:a3:6e:c4:a0:1f:f9:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:C7:E8:8A:24:4F:B6:C8:58:B3:C8:C5:FD:F0:4A:E3:FB:28:78
X509v3 Authority Key Identifier:
keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:18:bb:10:4c:29:d2:c6:8a:7d:2f:37:16:0a:97:b4:3f:94:
8e:23:06:57:89:4c:40:51:65:9b:06:d4:47:89:df:78:35:51:
ff:cd:9b:f9:df:76:0c:d1:67:63:2a:f7:22:ec:5f:97:14:87:
70:7a:b8:ce:b2:7a:5a:f9:35:93:5d:56:87:0f:65:1f:38:9e:
b2:f0:8f:28:58:90:8d:a6:53:f0:b4:df:d1:a4:3c:bf:e3:66:
5c:f5:61:07:01:1c:e8:4d:47:3d:01:05:6c:b8:28:2f:ef:ee:
dc:7a:f3:68:80:d7:f9:c2:09:48:92:41:92:a5:8d:19:59:a5:
f1:8f:6f:3f:f6:91:c3:72:11:c8:e7:38:da:c7:6d:3a:6c:da:
51:20:37:d6:4d:ca:98:d1:49:db:1c:a6:8d:cc:bf:2e:72:4a:
5e:2c:01:62:99:b3:76:53:70:a7:2b:cf:1c:54:1a:70:03:98:
87:57:78:89:84:f3:24:1f:f0:cf:8f:94:c9:c6:9c:6e:f8:5a:
b9:5c:5c:62:d9:19:6a:38:22:f3:00:df:43:38:b2:1f:0d:45:
e9:61:91:ac:31:42:b2:0d:00:66:52:b3:0e:75:1c:66:93:45:
73:60:54:57:2f:d3:fb:df:9e:07:d7:4d:b0:24:32:6b:1e:f9:
2a:fb:50:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:35 2026 by rpki-client