Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: tkaIDW8PbMb9s/MWEXlht3vukaQdi06Rzwcf1WUjV1M=
Subject key identifier: 87:A9:9B:88:F9:EB:FC:3E:81:52:33:9D:E0:84:36:31:91:08:86:6E
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 01A174DD77B9A36653500FD92C6B04C7A908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 1284
Signing time: Sun 25 Oct 2026 21:00:33 +0000
Manifest this update: Sun 25 Oct 2026 21:00:33 +0000
Manifest next update: Mon 26 Oct 2026 21:00:33 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: ovGgyM6M19hHKMPCMdU1QV8nT6QNRAAHZ2IgXuqZK6I=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:77:b9:a3:66:53:50:0f:d9:2c:6b:04:c7:a9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Oct 25 21:00:33 2026 GMT
Not After : Oct 26 21:00:33 2026 GMT
Subject: CN=87a99b88f9ebfc3e8152339de08436319108866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:ff:82:53:ac:84:cf:89:b8:2a:66:73:c0:
d5:4e:42:c9:5b:10:ce:13:1a:fa:14:69:62:c8:71:
fc:cf:07:47:01:62:a4:4f:b0:ca:a1:57:e2:6b:33:
6c:d7:ab:80:60:9e:c4:f1:5e:53:64:cf:fd:98:86:
33:20:95:7f:0a:4e:79:41:85:ab:ce:f6:55:1c:41:
c7:46:27:c6:e8:bf:0f:6a:c7:87:bd:2d:9f:ab:a1:
c6:82:ef:d1:fa:58:db:5d:bc:dd:18:66:6b:04:f9:
48:b6:5e:cc:b4:cc:af:da:2a:fa:f2:1a:b3:54:ce:
38:88:8b:f3:c2:21:0c:3e:e3:65:57:93:f1:44:4f:
cb:96:dc:c0:79:64:df:2f:f4:35:e3:7d:b8:b3:ed:
46:3d:19:e6:1b:52:60:19:94:90:f2:bc:a4:32:9e:
a3:4b:22:e1:29:ff:3e:24:e0:b0:02:d7:bf:f4:78:
04:43:ce:84:18:60:2a:f7:fd:01:39:56:f2:f4:9e:
b3:26:ed:c6:b1:16:b2:69:2c:94:f1:02:9b:ac:fa:
5d:9c:ca:d6:ed:a0:cd:6e:78:23:5d:39:15:c0:af:
ec:40:cc:45:16:97:7d:c4:c8:6b:f4:a7:d1:73:45:
1a:48:04:1f:25:8b:48:88:82:58:86:c4:3d:44:2c:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:9B:88:F9:EB:FC:3E:81:52:33:9D:E0:84:36:31:91:08:86:6E
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:15:4e:34:42:a7:4c:b6:82:f0:53:2c:d0:71:c5:34:a9:
7b:4d:92:8a:3b:21:d7:21:34:64:86:97:a7:1b:a2:b6:7b:19:
6e:22:63:8e:16:67:98:a1:7e:d5:fe:e9:7a:81:be:33:3e:6d:
d8:f8:b7:10:b2:39:5f:43:3e:49:51:07:90:b0:6f:a1:24:8e:
c5:3e:23:71:1c:81:7f:88:f9:62:a7:ef:f7:25:4f:81:45:2a:
c2:88:6c:2e:7d:ad:ba:ed:48:32:96:19:d6:4b:1c:b4:4c:96:
93:e2:1e:66:b2:ea:09:ad:eb:28:e1:84:9b:96:a2:5d:79:03:
8c:96:97:ac:03:4a:c2:3d:73:d3:bf:4c:e0:8f:da:16:31:a4:
e4:4b:be:d5:8f:a9:4e:89:07:7b:03:3c:66:b7:83:a0:39:d9:
03:82:5d:5d:c4:ad:3f:64:1c:1a:d7:ab:da:ed:a3:65:39:80:
0c:82:1f:aa:9a:aa:b6:e2:73:e3:52:92:9d:c7:b4:a7:f1:e4:
c3:5c:e7:6b:29:a6:c0:7b:a8:07:a0:33:2c:9c:80:f3:77:a2:
8e:96:2b:76:11:fb:e1:b3:68:4a:7d:8d:ee:4c:3a:44:ab:3d:
85:89:3d:e5:36:bc:ea:20:30:b0:fb:78:6f:41:c9:3d:18:57:
a7:84:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:35:20 2026 by rpki-client