Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: YUvAlrMQYNeDzqD6Oz9tzi4hyuTTiDV47lkFE1cUwsM=
Subject key identifier: C3:59:D6:8A:64:3F:43:30:C0:D5:29:95:A8:74:BA:6B:F3:92:01:A0
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019D28BB46ED25F719943580B77040DA0E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0AD6
Signing time: Thu 26 Mar 2026 06:00:55 +0000
Manifest this update: Thu 26 Mar 2026 06:00:55 +0000
Manifest next update: Fri 27 Mar 2026 06:00:55 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: VrVTI+Fm6V0y4F/A4o0HjqCBysV2w7t6fLphqrrfXQ8=)
2: nWV2WhqZ994NDP00nWeEB2vRwb0.roa (hash: Cup9ltThtrCZ1UgDAuujOsPqhg/Kcg7e9Ea+9DWDXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:46:ed:25:f7:19:94:35:80:b7:70:40:da:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Mar 26 06:00:55 2026 GMT
Not After : Mar 27 06:00:55 2026 GMT
Subject: CN=c359d68a643f4330c0d52995a874ba6bf39201a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:39:5f:59:4d:dd:6d:3e:e1:f1:30:a9:77:
05:86:0c:1b:56:e4:25:cb:a9:37:a0:92:e6:d4:3d:
42:cd:3f:12:5f:c2:7c:ff:4a:2c:4a:65:bb:72:7e:
d4:8f:fa:3c:cd:72:a9:57:17:11:9c:20:11:fb:47:
81:41:86:78:6f:32:5f:32:0b:43:b4:e4:8c:ce:89:
80:ce:85:40:83:df:31:ad:54:95:02:fb:db:e8:52:
2c:89:19:6a:01:2d:20:72:01:65:c0:53:0f:2d:2b:
44:d2:47:ed:01:b9:42:91:2f:ff:4d:3e:0e:5d:ce:
18:1c:0b:fb:36:17:f4:40:62:6c:5d:de:6b:4c:a5:
d7:f7:27:c7:ee:a4:82:27:ed:d2:b1:5f:92:1f:45:
52:65:e2:7f:76:b0:a3:0e:72:c1:88:57:b9:b4:37:
1f:ca:82:b2:51:74:ed:3c:00:03:a9:65:b1:74:e3:
5b:c6:45:7d:20:fb:c4:e7:2c:e7:ae:88:83:c9:ed:
7b:eb:c9:eb:47:e8:49:66:97:15:c8:80:41:f3:0f:
0b:db:fb:24:e1:8d:e0:ac:60:5d:82:90:cf:17:8f:
03:4e:5c:cf:8e:60:34:70:64:df:45:7e:56:fc:7c:
11:a9:11:de:54:fe:c0:c9:3a:ba:3b:aa:82:1b:4d:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:D6:8A:64:3F:43:30:C0:D5:29:95:A8:74:BA:6B:F3:92:01:A0
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:76:2b:fc:e7:89:4f:4d:15:5d:ee:36:7f:6d:67:cd:e6:
bd:9b:45:a6:22:b7:35:c3:08:fc:d5:9a:27:20:91:95:1f:35:
1f:e1:84:01:ed:3c:d3:f1:dd:9d:c3:76:ee:55:fc:1f:67:64:
61:ce:cc:ef:02:a6:a9:9b:69:7d:40:a9:02:56:21:db:32:33:
c8:c7:e3:cc:77:5f:74:61:b2:01:e2:f7:c2:a4:63:1d:fe:cc:
cd:bd:93:2a:31:dc:51:2b:cc:58:4a:b7:2d:f1:e2:6c:70:f6:
ad:93:f9:f5:84:39:6b:e8:1c:0c:09:a7:67:6b:2e:dc:02:cc:
1b:de:d5:3d:9f:90:a9:06:d9:52:d9:50:99:64:0e:46:dd:26:
f3:b3:f4:dd:a2:4b:64:97:33:2d:28:ca:22:a0:28:50:29:99:
cf:04:15:f7:54:63:4c:ed:24:f3:88:5c:9e:ff:b1:82:2b:9b:
ce:e4:a0:3e:dc:37:3e:93:79:4c:b0:25:12:69:fa:8f:39:82:
2e:4f:43:7f:42:70:76:43:1f:0b:6d:50:bd:01:15:c7:5a:f7:
a2:bf:f0:1a:f4:c6:70:9f:57:b0:66:1f:2a:4b:42:cf:53:af:
70:87:30:5e:b8:c5:9b:94:5d:02:6f:a6:5c:82:00:b9:59:9c:
30:c7:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:37 2026 by rpki-client