Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: B5dt3MMYvsYg6aWnk9P7nH2ZxrsF4va90qRcCxv9kfc=
Subject key identifier: 53:D9:14:E0:AA:56:E0:E5:6E:E7:A5:61:4C:83:11:12:20:97:D8:82
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019D37C0BEB67F823AFF6C8A82207867D72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: cVlURNqZQAh6Qe1KHamU9SvF4u8.roa (hash: GimlEEISLfZZspdQqTlAmRyOG3nJltXybDu3f42C8MQ=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: tf0TcSC5IUjDmwLelMmUnczKKG8H+FOeRw5dmDaXUjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:be:b6:7f:82:3a:ff:6c:8a:82:20:78:67:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=53d914e0aa56e0e56ee7a5614c8311122097d882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:bb:e4:e8:d9:d0:ce:41:72:43:a4:e3:cd:
a8:be:b6:e8:37:ad:22:60:c2:9f:9a:06:3f:be:4f:
02:ed:4d:e1:32:c2:0e:64:3e:7e:b6:1f:c2:05:8c:
de:3f:a2:90:9e:67:72:41:a9:90:66:a4:72:1a:52:
82:34:22:2a:3f:76:3e:3c:8d:5e:a0:e2:ec:bd:7b:
51:c8:06:90:17:97:20:79:b1:32:87:13:db:21:39:
30:28:a8:73:8e:83:6a:58:90:22:a0:e2:81:e7:17:
b1:7d:84:8a:f0:ec:49:b0:d2:9a:de:3b:ae:af:f1:
2e:7c:79:39:73:8f:80:d8:38:25:a7:7b:47:42:69:
51:58:c9:cc:25:f7:bf:87:0a:25:8e:03:a1:ce:ba:
17:80:08:61:d5:85:f3:5d:43:c2:0a:3e:e6:4a:cb:
ed:8d:2f:d2:be:79:71:d4:f6:b1:69:75:4b:5f:ae:
0f:f8:a5:33:56:03:c3:d6:2b:eb:1a:8f:75:2f:e0:
8d:36:0f:e0:1b:e8:df:7e:c7:c9:15:22:1c:7f:de:
88:78:8a:d0:c5:9a:53:c7:fe:fd:b8:b4:e0:22:d0:
fc:96:d4:72:67:f4:64:0a:70:4b:41:e8:08:b8:7d:
e8:e5:d2:4a:d9:33:1a:44:15:37:a8:a4:ef:49:90:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:14:E0:AA:56:E0:E5:6E:E7:A5:61:4C:83:11:12:20:97:D8:82
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:66:67:5f:9f:ae:4e:39:62:9e:83:d0:ae:d7:a7:bb:c5:
b6:d9:44:52:6c:ee:51:e1:08:bf:26:6f:11:50:b5:a8:6b:28:
e2:d9:c6:bb:45:bf:9b:f3:b9:f3:c7:c5:1e:ff:11:eb:6f:08:
d5:80:7b:fd:f3:a4:e4:41:e9:6c:ff:f2:9a:c2:27:43:b1:5f:
cb:8e:e3:f4:7f:50:72:55:33:f5:59:13:3e:8c:83:cf:bb:ab:
be:69:fe:41:69:19:5c:91:12:0a:6b:9a:62:84:5d:71:be:5c:
cc:14:77:e5:c2:27:13:40:d9:63:95:ea:4a:0a:f9:a6:75:41:
f3:7a:41:3a:3e:cf:57:bc:57:c0:05:76:6e:9d:04:c2:21:c6:
a8:f8:7f:75:df:63:ad:ba:37:a4:f5:ce:b9:4f:a8:5c:e9:0d:
2c:f1:1b:4c:2f:c7:0e:68:5e:8f:7d:76:1f:48:93:98:a3:f9:
44:1e:35:17:41:7f:8c:21:21:a1:8c:b1:17:51:26:2a:a5:32:
90:2e:65:9c:fb:e6:9f:4c:85:78:d3:3d:8a:31:75:87:ab:77:
d9:d3:03:14:a4:8b:88:bf:04:2d:56:ac:5c:dc:64:a4:2e:ec:
ab:d5:ee:64:de:4a:ec:a4:78:93:c7:97:1c:d7:cc:47:23:5a:
9c:20:18:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wL62f4I6/2yKgiB4Z9cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx
MThiMmMwHhcNMjYwMzI5MDQwMTExWhcNMjYwMzMwMDQwMTExWjAzMTEwLwYDVQQD
Eyg1M2Q5MTRlMGFhNTZlMGU1NmVlN2E1NjE0YzgzMTExMjIwOTdkODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ey75OjZ0M5BckOk482ovrboN60i
YMKfmgY/vk8C7U3hMsIOZD5+th/CBYzeP6KQnmdyQamQZqRyGlKCNCIqP3Y+PI1e
oOLsvXtRyAaQF5cgebEyhxPbITkwKKhzjoNqWJAioOKB5xexfYSK8OxJsNKa3juu
r/EufHk5c4+A2Dglp3tHQmlRWMnMJfe/hwoljgOhzroXgAhh1YXzXUPCCj7mSsvt
jS/Svnlx1PaxaXVLX64P+KUzVgPD1ivrGo91L+CNNg/gG+jffsfJFSIcf96IeIrQ
xZpTx/79uLTgItD8ltRyZ/RkCnBLQegIuH3o5dJK2TMaRBU3qKTvSZDO9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPZFOCqVuDlbuelYUyDERIgl9iCMB8GA1UdIwQY
MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt
NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk
LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX9mZ1+f
rk45Yp6D0K7Xp7vFttlEUmzuUeEIvyZvEVC1qGso4tnGu0W/m/O588fFHv8R628I
1YB7/fOk5EHpbP/ymsInQ7Ffy47j9H9QclUz9VkTPoyDz7urvmn+QWkZXJESCmua
YoRdcb5czBR35cInE0DZY5XqSgr5pnVB83pBOj7PV7xXwAV2bp0EwiHGqPh/dd9j
rbo3pPXOuU+oXOkNLPEbTC/HDmhej312H0iTmKP5RB41F0F/jCEhoYyxF1EmKqUy
kC5lnPvmn0yFeNM9ijF1h6t32dMDFKSLiL8ELVasXNxkpC7sq9XuZN5K7KR4k8eX
HNfMRyNanCAYEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:55 2026 by rpki-client