Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: dsu5DTJTQXgOqn9uCoD2qtCa3dJFlkqkP5ClPPmnWwU=
Subject key identifier: 58:93:3F:17:52:1B:9B:90:7F:E2:BB:73:E8:DF:24:DC:5A:2A:EF:49
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019E322A337AA35A9B7FBF56376CC875AFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 09F7
Signing time: Sat 16 May 2026 19:01:26 +0000
Manifest this update: Sat 16 May 2026 19:01:26 +0000
Manifest next update: Sun 17 May 2026 19:01:26 +0000
Files and hashes: 1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: nLC8GQdeH5T6XXIIWBpe8q/RXeEGjT8tgGoWUHRjW0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:33:7a:a3:5a:9b:7f:bf:56:37:6c:c8:75:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: May 16 19:01:26 2026 GMT
Not After : May 17 19:01:26 2026 GMT
Subject: CN=58933f17521b9b907fe2bb73e8df24dc5a2aef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:54:f3:ee:3f:9c:ca:ec:99:45:9b:49:f4:
f3:32:6b:cc:49:99:4f:32:f5:7b:28:82:15:5e:97:
65:43:19:14:ab:d4:d1:3c:06:5b:c8:38:4b:ee:fe:
14:a6:13:a1:a2:23:9d:6a:d0:01:29:fb:4b:63:44:
91:45:bb:61:51:3b:62:c1:67:b3:32:39:75:3d:cb:
fc:8d:b7:ec:0b:ac:80:c3:65:0c:e7:fc:a7:71:25:
a4:7e:1f:37:3f:23:29:94:dd:b8:44:08:dc:65:f4:
f6:20:5a:67:b4:4f:65:55:27:ea:4d:50:af:e5:f8:
df:3e:08:d9:fe:11:1f:f0:75:3a:67:b2:46:34:49:
f1:a9:35:d3:ea:93:d2:a7:9d:b3:72:e0:1c:0a:e9:
49:6e:f6:40:a8:19:cf:21:13:ed:0f:79:eb:57:d6:
78:f6:51:46:94:35:a5:2c:89:df:d8:5c:b5:9e:92:
68:b2:67:30:6e:5f:05:f0:0d:7f:ed:d1:4a:89:c7:
2e:ad:e8:b3:fa:60:f0:04:83:e9:17:eb:a7:c2:06:
76:4c:0a:e9:70:0e:05:4a:89:9a:94:ce:b5:36:73:
ec:42:a8:aa:bf:04:97:9d:d7:c2:87:f2:a3:29:30:
5d:53:19:44:df:b5:04:b8:b7:8e:cd:7c:8a:0b:26:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:3F:17:52:1B:9B:90:7F:E2:BB:73:E8:DF:24:DC:5A:2A:EF:49
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:e2:80:f6:b8:f6:fa:60:09:67:bb:7e:26:c8:ea:60:ca:
96:88:b1:75:7e:67:d9:7a:f6:1d:4f:f7:14:c9:b3:33:7b:df:
7b:97:67:29:58:be:27:ea:c9:cc:84:de:cc:4a:9a:2c:f3:d6:
3f:0b:18:6b:28:84:0a:3b:94:b1:c9:9c:aa:e4:17:11:e7:b0:
fe:8a:23:21:b3:6a:4f:8c:49:26:50:a6:cc:c3:a7:a9:38:d4:
73:9d:55:74:ad:fd:12:52:d5:21:fb:13:2a:14:df:b3:1e:e2:
af:11:8c:8b:b0:24:df:09:7e:d7:f1:cb:ad:17:9e:21:e8:59:
e0:f6:58:92:48:0f:2f:a5:fa:a2:13:1f:b8:2e:b4:3c:24:e6:
f7:09:ef:c0:b1:b0:51:ff:4c:83:8a:5f:d5:70:60:fe:48:8b:
66:3a:48:80:d7:d7:7a:19:df:3c:fb:97:67:05:52:1f:26:5b:
f2:e0:21:ac:00:70:55:61:21:a0:84:0b:19:42:92:a7:71:9d:
70:fb:9a:7c:e5:43:17:c1:c2:06:a0:bd:6d:1b:26:71:39:d1:
5a:6d:19:32:8e:b5:a2:95:4c:a2:bd:1b:c4:c4:32:c0:5b:1f:
af:e2:19:5f:fd:64:ef:37:e5:7a:9c:71:b7:c3:f2:85:55:16:
d5:ce:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:15 2026 by rpki-client