Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: +jj9h6vT6pygZ65tzgfOe67AbuWad4ldiOS1OIUXVnU=
Subject key identifier: 19:82:15:B6:DF:7A:42:BB:65:3A:68:55:BC:00:73:B9:B8:58:01:2E
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019D2A052F96AD20BCA9061FCD77C88116F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:01:15 +0000
Manifest this update: Thu 26 Mar 2026 12:01:15 +0000
Manifest next update: Fri 27 Mar 2026 12:01:15 +0000
Files and hashes: 1: 4Wrio_4iNnpl1Y6QGrJWPm_-8xA.roa (hash: 6jBbtoStgIk6zifFLk4lujFoBwI6HFMnQNdG0panh3s=)
2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: NjLw/1lkttYGpLtQzjLX+0QcrFEHVLfGFKBviz0I2ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:2f:96:ad:20:bc:a9:06:1f:cd:77:c8:81:16:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Mar 26 12:01:15 2026 GMT
Not After : Mar 27 12:01:15 2026 GMT
Subject: CN=198215b6df7a42bb653a6855bc0073b9b858012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:ab:b1:2c:ef:4d:54:9d:9f:77:75:75:7b:
4f:d5:22:a4:ac:29:17:e3:a0:c9:91:d1:b6:ae:36:
1f:d8:26:2e:cc:06:68:47:b1:5b:50:95:8d:a2:f8:
84:28:d0:bd:f9:20:11:f0:86:de:e3:14:9a:60:70:
1a:6b:51:fb:6a:de:44:34:dd:00:30:47:c3:af:bc:
bf:ae:06:82:41:07:0d:06:ef:af:4c:73:88:0d:e7:
5d:da:35:b3:50:f5:a6:3e:19:a5:b9:01:f4:a2:27:
db:65:ef:e0:8e:f9:da:e7:3e:24:1e:32:92:b9:f8:
cb:18:bc:82:ba:08:8f:22:b0:ff:fc:09:e6:80:02:
87:5f:10:1c:ed:b4:0a:8c:34:d5:dd:6a:75:19:f7:
92:69:9d:5d:f7:9c:c0:fe:5e:b2:39:a1:3c:a0:15:
85:d6:32:4f:21:a2:79:71:cb:dc:88:f0:14:41:bc:
a7:bb:bd:20:3a:7e:86:5a:d7:b4:d8:8b:f3:89:99:
e5:bc:2b:2a:20:f3:c8:c2:be:08:66:ab:53:b7:f8:
f7:e7:56:c0:0f:d4:cb:fe:d5:5e:39:8a:8c:96:62:
86:56:65:09:81:40:c5:77:fc:b9:f9:bc:d3:40:1f:
37:25:f2:b9:11:e8:56:e8:96:5e:c9:7f:f5:b8:c2:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:15:B6:DF:7A:42:BB:65:3A:68:55:BC:00:73:B9:B8:58:01:2E
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ba:de:25:9a:6a:73:80:01:03:ee:4e:50:2f:cf:d8:c3:5c:
85:f7:ad:f6:f9:8a:10:af:a0:0f:02:85:64:3c:88:29:d0:e5:
63:2b:6d:62:f2:ca:62:23:fb:ba:9a:84:24:98:26:4c:57:98:
1f:c8:25:56:8b:e7:c6:7d:a6:0c:32:54:b2:d0:a1:70:b4:04:
e0:4b:a2:0a:85:a9:f6:ee:ba:cc:77:2a:21:76:12:48:ce:a0:
48:9a:75:a4:f3:6c:e7:1b:46:f9:2f:aa:04:3b:b7:bd:6d:f0:
19:0e:e7:43:5e:f8:80:ce:23:50:61:72:f6:dc:12:a4:b2:53:
77:e9:67:42:11:5e:83:45:07:56:63:62:c1:77:63:1a:d8:74:
54:25:ff:6f:95:f4:5a:67:4a:6a:cd:9d:82:95:1d:d9:a7:c3:
83:15:eb:b8:5b:16:9e:06:d0:f7:89:61:a9:70:bd:77:26:ac:
55:b4:f9:83:b1:96:e2:52:f5:7b:91:c9:78:1f:f2:b3:46:75:
2e:59:a5:7b:0f:70:c2:f2:e0:33:6d:64:9c:d6:00:6e:33:2b:
84:ee:69:5a:58:0f:4b:18:a7:b9:47:1f:4f:ec:70:38:ab:23:
38:51:87:37:d1:37:0c:06:99:48:a6:8f:85:d0:70:dc:3e:c0:
4f:ba:d9:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBS+WrSC8qQYfzXfIgRbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjYwMzI2MTIwMTE1WhcNMjYwMzI3MTIwMTE1WjAzMTEwLwYDVQQD
EygxOTgyMTViNmRmN2E0MmJiNjUzYTY4NTViYzAwNzNiOWI4NTgwMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFursSzvTVSdn3d1dXtP1SKkrCkX
46DJkdG2rjYf2CYuzAZoR7FbUJWNoviEKNC9+SAR8Ibe4xSaYHAaa1H7at5ENN0A
MEfDr7y/rgaCQQcNBu+vTHOIDedd2jWzUPWmPhmluQH0oifbZe/gjvna5z4kHjKS
ufjLGLyCugiPIrD//AnmgAKHXxAc7bQKjDTV3Wp1GfeSaZ1d95zA/l6yOaE8oBWF
1jJPIaJ5ccvciPAUQbynu70gOn6GWte02IvziZnlvCsqIPPIwr4IZqtTt/j351bA
D9TL/tVeOYqMlmKGVmUJgUDFd/y5+bzTQB83JfK5EehW6JZeyX/1uMIpCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmCFbbfekK7ZTpoVbwAc7m4WAEuMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobreJZpq
c4ABA+5OUC/P2MNchfet9vmKEK+gDwKFZDyIKdDlYyttYvLKYiP7upqEJJgmTFeY
H8glVovnxn2mDDJUstChcLQE4EuiCoWp9u66zHcqIXYSSM6gSJp1pPNs5xtG+S+q
BDu3vW3wGQ7nQ174gM4jUGFy9twSpLJTd+lnQhFeg0UHVmNiwXdjGth0VCX/b5X0
WmdKas2dgpUd2afDgxXruFsWngbQ94lhqXC9dyasVbT5g7GW4lL1e5HJeB/ys0Z1
Llmlew9wwvLgM21knNYAbjMrhO5pWlgPSxinuUcfT+xwOKsjOFGHN9E3DAaZSKaP
hdBw3D7AT7rZvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:43 2026 by rpki-client