Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: pZySueOpACQwxOJ6JhcqbQDw9uouxqY7AkbKZUNt2CU=
Subject key identifier: 00:AD:12:14:C5:11:22:D2:E5:19:EF:28:34:A5:FA:2E:93:3E:BC:75
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019D2A72CE84E338EDDBC8CAB8D3F057158A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1574
Signing time: Thu 26 Mar 2026 14:01:00 +0000
Manifest this update: Thu 26 Mar 2026 14:01:00 +0000
Manifest next update: Fri 27 Mar 2026 14:01:00 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: ZeGZfVh9ql5tODFJCHBKObScTbTLCJ25TC2ctIByAxo=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ce:84:e3:38:ed:db:c8:ca:b8:d3:f0:57:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Mar 26 14:01:00 2026 GMT
Not After : Mar 27 14:01:00 2026 GMT
Subject: CN=00ad1214c51122d2e519ef2834a5fa2e933ebc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:5f:b3:80:74:3c:76:d9:18:7d:71:48:cf:
9f:e8:61:c0:f9:8d:e5:33:ed:87:5c:09:ee:7a:17:
4b:01:e2:f5:d9:0d:31:11:0c:ee:a5:ff:05:f8:ae:
da:d5:fe:9a:a5:60:5b:44:46:dc:a6:4a:7e:21:3d:
81:0b:dc:e9:05:c7:2f:f8:94:4f:e6:0a:33:03:34:
2c:f9:14:01:77:2b:9b:c4:4f:6e:b3:a7:fd:fc:e1:
ae:ed:62:f0:34:bd:9f:d9:bf:b7:b1:a8:7f:c1:25:
7e:67:ba:42:9c:1a:a5:2c:0d:b0:1d:14:d9:5d:c4:
20:43:5f:59:fb:0d:01:19:46:63:1e:77:68:a5:df:
da:23:5c:0a:10:35:5e:14:2a:0a:b2:97:50:24:b6:
c3:7a:5c:19:c0:51:07:1b:b7:74:94:72:2f:10:b6:
86:92:0d:94:b5:f3:ca:1e:24:bd:9d:a7:04:e7:d6:
fa:5b:d2:09:16:ac:ec:47:73:da:51:bf:94:5e:83:
57:14:5c:f4:62:67:42:2c:50:ae:fb:ec:59:bc:b3:
ae:75:29:e5:c0:ec:eb:1a:a4:17:09:70:3c:3b:91:
26:6c:9b:cb:a9:b5:cd:00:b8:31:b3:d0:32:09:78:
ed:40:ae:7c:9b:ef:d4:d3:a6:bc:d2:73:b8:5e:3e:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:12:14:C5:11:22:D2:E5:19:EF:28:34:A5:FA:2E:93:3E:BC:75
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:bb:26:e6:60:55:68:b4:dd:68:af:1f:13:5f:a4:ea:3b:
26:a8:6a:23:a4:23:07:38:8b:12:4a:5b:41:4b:a3:96:2b:50:
4c:71:12:74:76:1e:c2:0b:a6:2c:ca:ac:82:d1:88:b9:1f:a5:
ba:36:10:4d:d6:0c:56:75:29:fb:71:72:bd:7e:89:eb:d5:a1:
59:5e:ca:10:40:89:4c:e6:aa:8c:05:20:61:f9:4d:d3:1f:59:
83:21:be:ce:71:cf:51:36:86:84:fa:dd:31:08:40:e6:48:ec:
32:58:79:f8:03:7a:19:47:ec:a3:20:3b:96:60:7b:de:61:01:
12:e5:6b:18:c2:88:01:88:0c:85:4d:15:80:b4:0c:e4:15:71:
5f:fe:8d:89:65:ed:d6:3d:4d:2b:4e:49:19:00:19:4f:4b:16:
94:6b:27:bc:60:d2:fe:23:cd:01:6e:01:50:00:f4:32:f6:5f:
de:d6:28:ab:5f:ff:a9:ed:a3:dd:30:fe:2b:43:16:fd:f9:19:
32:f3:26:26:ef:f9:54:2f:9c:1f:ca:34:e3:4b:2f:7e:5d:8c:
5f:c3:8a:49:d1:8d:9c:53:5a:f5:1b:b2:27:6a:11:93:92:01:
92:b6:b4:4e:23:c4:c7:8c:69:1b:85:d8:26:0f:09:ca:7e:74:
59:50:7a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcs6E4zjt28jKuNPwVxWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjYwMzI2MTQwMTAwWhcNMjYwMzI3MTQwMTAwWjAzMTEwLwYDVQQD
EygwMGFkMTIxNGM1MTEyMmQyZTUxOWVmMjgzNGE1ZmEyZTkzM2ViYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyRfs4B0PHbZGH1xSM+f6GHA+Y3l
M+2HXAnuehdLAeL12Q0xEQzupf8F+K7a1f6apWBbREbcpkp+IT2BC9zpBccv+JRP
5gozAzQs+RQBdyubxE9us6f9/OGu7WLwNL2f2b+3sah/wSV+Z7pCnBqlLA2wHRTZ
XcQgQ19Z+w0BGUZjHndopd/aI1wKEDVeFCoKspdQJLbDelwZwFEHG7d0lHIvELaG
kg2UtfPKHiS9nacE59b6W9IJFqzsR3PaUb+UXoNXFFz0YmdCLFCu++xZvLOudSnl
wOzrGqQXCXA8O5EmbJvLqbXNALgxs9AyCXjtQK58m+/U06a80nO4Xj7zLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACtEhTFESLS5RnvKDSl+i6TPrx1MB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxe7JuZg
VWi03WivHxNfpOo7JqhqI6QjBziLEkpbQUujlitQTHESdHYewgumLMqsgtGIuR+l
ujYQTdYMVnUp+3FyvX6J69WhWV7KEECJTOaqjAUgYflN0x9ZgyG+znHPUTaGhPrd
MQhA5kjsMlh5+AN6GUfsoyA7lmB73mEBEuVrGMKIAYgMhU0VgLQM5BVxX/6NiWXt
1j1NK05JGQAZT0sWlGsnvGDS/iPNAW4BUAD0MvZf3tYoq1//qe2j3TD+K0MW/fkZ
MvMmJu/5VC+cH8o040svfl2MX8OKSdGNnFNa9RuyJ2oRk5IBkra0TiPEx4xpG4XY
Jg8Jyn50WVB6Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:27 2026 by rpki-client