Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
File: Hy75gBLIyDg-iFI6a5roKGn5r08.mft (raw, json)
Hash identifier: LqWKn8CVDqSJF2YaG/R+XGFf6mYbRXpuQx5J1uy+xTo=
Subject key identifier: 12:BB:AF:17:1B:04:79:57:8D:98:F3:8A:F9:89:D6:F5:A1:1C:04:AD
Authority key identifier: 1F:2E:F9:80:12:C8:C8:38:3E:88:52:3A:6B:9A:E8:28:69:F9:AF:4F
Certificate issuer: /CN=1f2ef98012c8c8383e88523a6b9ae82869f9af4f
Certificate serial: 01A0DFF37C1C0614F93A6247E88D69BDD1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
Manifest number: 1C
Signing time: Sat 26 Sep 2026 23:01:11 +0000
Manifest this update: Sat 26 Sep 2026 23:01:11 +0000
Manifest next update: Sun 27 Sep 2026 23:01:11 +0000
Files and hashes: 1: Hy75gBLIyDg-iFI6a5roKGn5r08.crl (hash: Fn0eOyT4po7ht/NVgU4+Wn/8tSSStdECzCdJ6kLLHSw=)
2: qmxeUdPOWKrxFdpOzEjX-ePZBWI.asa (hash: vivER6ZGAcLBIX9JiNDdJmoNKeYx7QZpKCmwQ6MUN+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:7c:1c:06:14:f9:3a:62:47:e8:8d:69:bd:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2ef98012c8c8383e88523a6b9ae82869f9af4f
Validity
Not Before: Sep 26 23:01:11 2026 GMT
Not After : Sep 27 23:01:11 2026 GMT
Subject: CN=12bbaf171b0479578d98f38af989d6f5a11c04ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:9c:d8:36:9a:c1:99:f8:89:61:7d:75:e8:
1a:52:f0:b3:ca:fc:45:07:d7:f8:e8:6b:62:6c:de:
c3:a7:fa:2a:ef:e7:42:6f:7e:f3:f7:be:8e:0b:72:
94:85:14:eb:83:da:66:05:52:83:5d:1a:1b:fb:00:
86:05:7a:46:f1:89:95:a6:04:15:45:0d:bc:b6:f3:
1d:2d:c4:50:0c:b3:0c:70:90:3e:d7:48:a1:e5:f4:
4d:6f:15:d8:53:f2:f1:94:0c:ee:74:e2:35:cb:23:
a1:16:08:87:74:e3:e7:6e:e0:ab:31:8a:25:a0:d3:
da:a3:d5:82:95:d4:40:e6:b2:ea:3a:c6:bc:ee:b6:
be:68:07:89:51:0d:b1:20:b4:92:bf:c5:c0:73:2d:
b2:a5:c3:42:5f:6a:9a:eb:cc:6f:a3:79:09:6b:7b:
11:d5:61:66:64:6e:99:45:fe:ee:7c:b2:f1:39:66:
fe:09:b9:81:a6:07:92:6d:27:09:01:71:4e:dd:2c:
5d:de:40:27:10:ae:b3:14:a9:ca:4d:8a:85:ec:ae:
19:57:4a:ca:e1:c7:35:5f:d4:b9:ea:79:21:a1:3d:
a9:66:e4:09:7a:19:b7:c0:61:9e:6b:a7:b8:ca:30:
f3:8c:b0:bb:ff:ab:a8:9c:33:43:81:6b:ea:20:86:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:AF:17:1B:04:79:57:8D:98:F3:8A:F9:89:D6:F5:A1:1C:04:AD
X509v3 Authority Key Identifier:
keyid:1F:2E:F9:80:12:C8:C8:38:3E:88:52:3A:6B:9A:E8:28:69:F9:AF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy75gBLIyDg-iFI6a5roKGn5r08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8ea51f-c56d-4279-94a5-9998817eabcf/1/Hy75gBLIyDg-iFI6a5roKGn5r08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ad:4e:21:83:6e:64:2a:a8:09:7f:fa:7f:e3:3e:a0:42:d4:
ef:97:a7:ba:1b:d2:04:35:55:b6:91:13:fa:f4:bd:4b:c1:d2:
0c:20:c2:96:5e:83:60:9c:a4:d3:5e:32:5f:7d:e8:58:5d:08:
b3:07:af:a0:77:9f:b1:db:30:fc:d7:85:46:88:01:61:55:17:
4a:ee:7b:f4:ec:d7:bf:d7:42:20:53:78:0b:0a:9f:b1:8d:d2:
1a:7f:af:fd:55:a7:19:10:61:98:41:ef:4b:f5:e6:4a:b3:5d:
0a:22:76:4d:ab:5c:a7:38:4d:03:69:ec:28:80:f2:e2:32:aa:
48:a7:06:cf:d1:bf:f8:a8:55:14:66:be:c7:e7:51:f6:d9:9a:
e4:ed:c6:32:b0:34:45:9c:6c:18:0a:dd:86:7e:95:d1:42:26:
f7:c2:b8:4b:ba:bc:d2:c5:a6:12:bc:cb:d7:31:59:3c:7b:82:
92:7a:25:44:65:28:c6:39:98:c3:c5:e2:e2:de:49:75:83:a8:
70:ec:6c:2d:86:7a:44:f4:e8:ba:14:93:7e:5a:2a:4e:52:04:
f1:b0:40:c5:73:34:96:e3:4e:52:0f:32:76:b0:47:90:35:d3:
e0:65:b6:22:51:6b:78:1f:9a:d6:13:57:b2:ff:d3:d8:d2:13:
ff:b7:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:01:59 2026 by rpki-client