Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: FgneysedhBwrdjXeI59BvJFf5mXtChhyI1hm3qljxOQ=
Subject key identifier: 57:82:55:75:C9:EA:2A:1F:0E:5C:2D:2C:2E:47:50:D0:AD:D4:85:CD
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01A0D3EFFDD6363312DA80632D8E50800A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 0690
Signing time: Thu 24 Sep 2026 15:01:55 +0000
Manifest this update: Thu 24 Sep 2026 15:01:55 +0000
Manifest next update: Fri 25 Sep 2026 15:01:55 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: SbSoLdCs6VeyQae2RRYl/W4i+Nmp6h4z2yOBys1MBrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:fd:d6:36:33:12:da:80:63:2d:8e:50:80:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Sep 24 15:01:55 2026 GMT
Not After : Sep 25 15:01:55 2026 GMT
Subject: CN=57825575c9ea2a1f0e5c2d2c2e4750d0add485cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:06:66:15:3a:66:ca:84:b2:82:e6:e8:fc:
ea:87:e4:7d:3a:c3:c4:d4:be:e4:f7:4b:53:2b:92:
b0:d0:8e:0b:ed:e9:57:97:87:00:6b:5c:f2:ba:47:
01:56:cf:63:f2:eb:c8:d7:b1:04:84:21:45:33:bf:
da:d6:6b:28:70:ad:9b:1e:51:63:55:b2:67:5a:b9:
29:38:c4:25:ec:3e:10:06:06:04:c5:b6:78:7f:e6:
22:e7:1c:fc:f3:c1:9d:3e:a4:26:ed:20:d7:ac:5a:
2c:dd:95:53:59:1e:26:f0:e9:7f:fd:e5:3d:58:67:
1c:ac:a2:29:e2:d3:5d:5c:47:db:9a:85:6e:ea:1f:
33:4c:61:77:92:a7:ff:0e:20:36:5b:6c:43:a2:5a:
4e:76:ae:b9:89:8d:5d:57:f5:27:5b:6b:a6:c8:62:
3d:7f:f3:dd:aa:14:28:81:e4:7e:e0:e6:51:66:0a:
4f:8e:0e:ff:dc:2f:62:f5:1a:84:88:5a:14:ec:e8:
59:f7:da:f4:eb:62:2e:64:df:de:76:d7:06:84:97:
fc:f0:51:f5:cf:78:0c:af:87:b5:46:83:46:3a:8b:
97:be:08:53:6b:77:a8:ad:d6:cc:65:f5:8f:87:af:
95:4e:57:c7:7b:de:70:66:8c:03:25:0a:32:0e:b5:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:55:75:C9:EA:2A:1F:0E:5C:2D:2C:2E:47:50:D0:AD:D4:85:CD
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:ab:9e:52:c9:5a:b5:95:72:01:bd:d5:ea:bf:5c:76:c7:
43:45:8a:8a:c6:d8:3a:7f:2e:fa:3c:f0:2a:3b:10:89:ce:82:
5f:2f:7c:dd:da:94:9f:1c:0c:9f:d1:ce:0d:95:69:40:70:9f:
1a:a3:4c:9e:d4:bf:67:fb:85:75:ae:c4:59:f9:89:65:04:4a:
b0:e0:93:2f:d3:98:43:ba:be:db:90:35:d5:25:96:55:87:ca:
2c:8a:21:b3:76:b4:d0:4f:16:a6:3e:04:7e:30:ea:ca:ce:b9:
f5:4d:e9:7f:8a:c8:3a:e9:0b:be:4a:7e:41:12:0d:55:68:67:
b8:06:f6:ec:ab:1e:14:88:2d:a0:3b:eb:a4:66:71:55:77:c6:
7c:32:52:42:91:ea:ad:67:2d:c3:69:02:82:53:c9:18:eb:a6:
12:3c:53:94:67:d1:fc:54:93:b0:93:bd:fa:5d:f0:34:78:08:
89:99:97:66:f5:35:0d:72:d0:0c:66:5f:25:e9:8a:ee:c3:31:
df:db:31:4d:9c:b7:37:97:f0:ac:17:db:f6:c8:86:87:b5:00:
ba:87:7f:1b:1c:9f:af:c2:a2:18:d5:86:8c:76:10:ae:65:22:
18:14:3c:a2:1a:f4:e0:e6:99:3c:65:d9:9a:6d:0d:22:07:7a:
dc:7a:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:45 2026 by rpki-client