Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: +0SvO/+SjU3ECQkiARxXNmP6BrR3gfCmq3JMqFJv9Po=
Subject key identifier: CC:F3:E9:3B:2A:A0:BD:DA:D2:E0:2E:6A:99:C0:23:A1:22:FC:74:E4
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019E21A414EA0F6717076729633985536B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 15F4
Signing time: Wed 13 May 2026 14:01:01 +0000
Manifest this update: Wed 13 May 2026 14:01:01 +0000
Manifest next update: Thu 14 May 2026 14:01:01 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: bFzk27QPlIQ2fQaNQnpXzPslLvfGugN1g/KTyBCathA=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:14:ea:0f:67:17:07:67:29:63:39:85:53:6b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: May 13 14:01:01 2026 GMT
Not After : May 14 14:01:01 2026 GMT
Subject: CN=ccf3e93b2aa0bddad2e02e6a99c023a122fc74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:aa:74:ec:fa:f9:89:39:1b:bc:18:1e:8d:
38:5e:c2:55:6a:54:61:ed:ec:db:e0:75:67:70:90:
8f:d3:52:e4:28:d1:a5:c8:ae:46:28:ee:fe:3a:d9:
57:0d:33:b1:a0:1c:47:23:32:ed:90:ea:a7:a8:a6:
94:5b:47:8c:7d:2c:f4:2d:45:a2:2c:f2:66:87:74:
12:28:68:42:e5:5b:55:1e:a8:07:a7:8a:cb:c9:fb:
46:b2:cb:bd:c0:6d:cc:01:cb:e8:64:de:ce:a9:0b:
b6:85:92:4f:a7:58:61:ff:ef:a6:c3:f7:67:16:a9:
ba:a9:94:70:5c:fc:88:15:23:e8:c2:e7:43:ed:a4:
4d:bb:15:e4:ea:2a:da:eb:45:42:19:a4:31:d8:57:
68:8c:8a:3f:d9:48:74:d8:53:a1:ec:e0:c6:7b:53:
32:be:fb:5b:e4:2b:bd:23:5b:62:ff:79:c2:e4:7a:
f4:18:6c:7c:fa:91:c0:0b:32:7e:44:7d:38:aa:ba:
a4:bc:94:d5:31:4e:5e:28:dd:39:95:be:cb:58:7d:
8e:70:cb:b0:8c:a3:be:25:9a:13:8d:f8:7e:73:db:
e8:06:20:fd:19:7c:56:1d:6d:b6:da:23:83:29:f2:
58:68:00:19:cf:97:83:9c:50:a4:8e:f4:0a:47:c0:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:E9:3B:2A:A0:BD:DA:D2:E0:2E:6A:99:C0:23:A1:22:FC:74:E4
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:10:b8:70:dd:02:a4:a2:f7:b7:12:1b:e4:0f:e7:06:ec:
85:13:db:bf:ef:0d:26:e5:82:14:48:5a:cf:42:c3:f0:6d:73:
4a:34:8a:9d:bd:6b:32:57:a6:11:69:35:01:0f:fe:db:c2:cc:
75:6d:e8:61:de:7b:58:0b:5b:04:da:e2:47:40:69:31:b5:d0:
d3:26:57:34:f4:99:e5:0f:8e:b5:a8:dc:a1:cd:42:95:18:c3:
8d:6e:18:f6:6c:3d:6c:ea:df:62:2c:01:52:b2:e7:8a:e5:0a:
5b:52:2a:94:81:56:cb:fc:bd:dd:ce:d0:3c:85:2a:02:f4:80:
4b:e0:61:5e:0b:e4:a5:d1:49:5b:ff:29:be:5a:79:e5:64:cd:
82:9f:8a:c1:c7:4e:33:8d:99:f5:12:78:e2:16:5b:40:28:6e:
29:94:c4:7f:e6:84:dd:07:59:9e:c9:06:0b:cb:a3:85:d1:0a:
b6:31:29:11:92:9c:a0:2b:e8:a4:d8:d6:1f:b0:2f:76:1b:34:
c9:4e:2c:5d:83:38:b2:1a:07:89:f0:38:fe:b0:5f:fc:f4:cf:
88:bb:60:c4:e2:ad:a7:18:bf:e0:4b:7b:a2:71:96:4f:5c:29:
ef:12:2b:3a:84:8b:f7:89:94:fa:2f:ca:9f:f0:c5:14:58:f8:
30:5d:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:53:17 2026 by rpki-client