Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: 6OHKXAWQHlMZwG09MrkprDDgJUVOYt8rnlhoXfdBT0k=
Subject key identifier: B6:88:27:A3:82:06:47:C4:A1:03:C1:60:C5:A2:86:45:F4:D2:4B:A0
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019F965C67B4872FEF9029801A1CFA4BF36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 16B5
Signing time: Fri 24 Jul 2026 23:01:05 +0000
Manifest this update: Fri 24 Jul 2026 23:01:05 +0000
Manifest next update: Sat 25 Jul 2026 23:01:05 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: UJSX0jXI1aldZNPsQVxhEyYeEvCXA1DbgEAE7/26n6Y=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:67:b4:87:2f:ef:90:29:80:1a:1c:fa:4b:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Jul 24 23:01:05 2026 GMT
Not After : Jul 25 23:01:05 2026 GMT
Subject: CN=b68827a3820647c4a103c160c5a28645f4d24ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:5c:88:b0:68:93:2b:90:b3:0d:97:cc:1a:
5a:cd:1f:6d:2a:09:41:ea:61:c0:6e:dc:ac:e9:89:
b4:65:dd:1a:d4:8a:4f:b5:a1:89:40:2f:57:0b:8d:
46:b5:5c:7f:f2:2b:c7:45:43:65:22:f3:40:04:9f:
f7:eb:22:51:1e:9b:2b:55:bf:8d:7d:95:04:fc:d9:
9d:37:e0:22:39:fd:cd:cd:24:c6:59:d7:b7:39:e8:
42:ac:df:b0:61:34:2d:62:48:97:af:20:d3:a2:18:
06:5d:db:cc:57:f9:40:a4:5e:ba:ff:9d:43:17:6b:
8f:b0:47:14:a1:91:6c:3a:f9:a8:80:73:5f:3e:4f:
c0:cb:ae:56:5f:5d:ee:69:bd:52:01:bb:e0:f2:f2:
c1:10:57:dc:1c:12:3f:12:09:45:84:2b:fd:29:7b:
3c:8d:de:0f:eb:38:07:ac:8e:be:4d:e0:ed:03:ab:
19:c3:3a:87:96:91:2f:d6:00:c0:19:fd:72:32:ad:
38:75:16:56:26:cf:b4:42:5c:eb:d0:94:c8:23:e9:
03:b1:2e:de:b8:f6:fd:5d:13:15:2c:55:c0:3d:4e:
28:f9:5e:38:c7:c3:87:25:2d:fb:42:67:2f:1f:44:
00:5f:ea:8d:f7:20:24:ab:86:cc:7c:3d:a9:10:5d:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:27:A3:82:06:47:C4:A1:03:C1:60:C5:A2:86:45:F4:D2:4B:A0
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:d2:43:41:14:fb:7b:e7:ff:d7:e0:47:21:ad:56:47:7e:
3c:70:bb:5c:74:81:e0:f2:e2:91:44:ab:2b:e2:31:97:79:87:
57:e7:bd:d9:05:00:b5:af:d4:e6:12:4d:d7:38:31:11:52:cb:
29:16:73:7c:72:e1:c2:42:b3:5d:67:5c:31:3a:79:95:68:1e:
fd:55:5b:a1:85:7b:23:4e:22:04:a5:fc:4a:73:0f:6d:7d:b8:
d8:89:45:4e:f8:93:e3:15:7e:d1:12:5b:78:72:c5:da:fd:08:
c5:21:ad:ee:b5:d3:94:4c:00:ad:fa:72:fb:6d:7a:60:45:42:
34:b8:07:db:56:b1:33:b2:e9:fa:44:70:31:09:25:0a:45:02:
b9:4b:84:97:84:60:da:17:e0:06:15:95:ea:73:81:08:0e:cc:
a4:03:8b:a3:86:58:8f:0c:cc:44:cc:51:c9:17:42:f3:4a:f1:
b3:83:2e:3d:f6:9b:6e:2d:45:a0:1d:7e:24:79:b9:c4:07:cf:
f1:a2:d8:d0:f3:49:38:34:be:4f:74:d2:be:70:9a:43:8e:db:
92:75:e9:c2:15:d5:d4:ab:e6:e9:58:bb:7c:01:8d:be:7a:77:
12:9f:d5:19:f7:d3:18:82:56:fe:7c:63:0b:3f:fa:7b:a3:1e:
36:12:ab:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WXGe0hy/vkCmAGhz6S/NtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjYwNzI0MjMwMTA1WhcNMjYwNzI1MjMwMTA1WjAzMTEwLwYDVQQD
EyhiNjg4MjdhMzgyMDY0N2M0YTEwM2MxNjBjNWEyODY0NWY0ZDI0YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OhciLBokyuQsw2XzBpazR9tKglB
6mHAbtys6Ym0Zd0a1IpPtaGJQC9XC41GtVx/8ivHRUNlIvNABJ/36yJRHpsrVb+N
fZUE/NmdN+AiOf3NzSTGWde3OehCrN+wYTQtYkiXryDTohgGXdvMV/lApF66/51D
F2uPsEcUoZFsOvmogHNfPk/Ay65WX13uab1SAbvg8vLBEFfcHBI/EglFhCv9KXs8
jd4P6zgHrI6+TeDtA6sZwzqHlpEv1gDAGf1yMq04dRZWJs+0Qlzr0JTII+kDsS7e
uPb9XRMVLFXAPU4o+V44x8OHJS37QmcvH0QAX+qN9yAkq4bMfD2pEF38FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaIJ6OCBkfEoQPBYMWihkX00kugMB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSzSQ0EU
+3vn/9fgRyGtVkd+PHC7XHSB4PLikUSrK+Ixl3mHV+e92QUAta/U5hJN1zgxEVLL
KRZzfHLhwkKzXWdcMTp5lWge/VVboYV7I04iBKX8SnMPbX242IlFTviT4xV+0RJb
eHLF2v0IxSGt7rXTlEwArfpy+216YEVCNLgH21axM7Lp+kRwMQklCkUCuUuEl4Rg
2hfgBhWV6nOBCA7MpAOLo4ZYjwzMRMxRyRdC80rxs4MuPfabbi1FoB1+JHm5xAfP
8aLY0PNJODS+T3TSvnCaQ47bknXpwhXV1Kvm6Vi7fAGNvnp3Ep/VGffTGIJW/nxj
Cz/6e6MeNhKrSA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:29 2026 by rpki-client