Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: dVjv9sX/gKhm6IKZo1+bgWP7I46e4tj9fXyk6cmVpbM=
Subject key identifier: A3:37:DE:0B:31:2A:3D:CF:E7:D0:34:CA:0E:08:91:59:30:7A:69:92
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01A0D200382098B515565A0F6E5B5550485A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 068F
Signing time: Thu 24 Sep 2026 06:00:24 +0000
Manifest this update: Thu 24 Sep 2026 06:00:24 +0000
Manifest next update: Fri 25 Sep 2026 06:00:24 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: SjUjzXPLnjqugXqhVB0kkD4qfv/HIydZkvEhAJg+ddU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:38:20:98:b5:15:56:5a:0f:6e:5b:55:50:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Sep 24 06:00:24 2026 GMT
Not After : Sep 25 06:00:24 2026 GMT
Subject: CN=a337de0b312a3dcfe7d034ca0e089159307a6992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:35:07:69:04:19:a4:4e:d3:b5:7f:aa:52:
29:fc:07:67:f5:1e:7b:aa:79:aa:53:5a:a3:f2:f9:
9a:14:70:7f:f7:24:7c:7e:2d:1e:ea:51:d0:c4:2b:
a9:e4:cf:4d:d5:94:71:10:d2:32:fe:e3:3b:2c:bf:
4d:81:9b:7b:9a:0e:03:1d:f1:7a:31:e3:0b:a4:b6:
5e:78:38:f3:26:d0:ed:b3:d1:d2:fe:07:ff:ac:bf:
75:af:4d:07:fd:e6:40:52:b4:98:d8:1e:bb:e0:54:
7e:57:7f:e7:18:e8:f1:eb:25:19:11:d3:af:3d:9c:
56:42:d3:35:4b:42:8a:7b:cc:d9:98:4e:62:1b:0a:
a2:55:40:a4:2c:dc:4c:f7:43:b5:dd:f6:d2:df:0f:
fe:7d:64:7a:c5:20:ce:dd:f7:5d:a2:50:60:0a:6f:
28:34:6d:5c:4a:a5:1d:08:29:84:3d:e9:6d:bb:53:
bf:89:c9:04:40:12:9b:93:96:fe:f4:47:34:e8:1c:
7c:a1:af:cb:46:44:b0:76:fa:9a:1f:9b:1b:3c:8e:
8f:85:c3:9d:55:63:1e:1a:d1:a3:91:6a:ee:b4:80:
61:76:91:92:ef:5c:95:d7:97:0c:15:a4:30:24:e7:
2e:59:63:b2:04:e0:5a:98:cc:3f:21:32:a8:bb:e0:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:DE:0B:31:2A:3D:CF:E7:D0:34:CA:0E:08:91:59:30:7A:69:92
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:0c:f9:53:c2:97:e6:37:97:cd:46:b9:ce:88:45:c5:c0:
94:fc:63:99:09:1f:d4:16:32:14:fe:36:be:4c:20:bf:f0:53:
5b:c4:6e:1a:6c:82:9b:10:90:58:62:a9:bf:9a:31:c8:90:36:
41:9c:2a:55:a0:a9:27:c9:d1:1d:9a:63:4b:d2:41:0c:dc:67:
ef:8b:8d:dc:59:e3:88:14:71:fe:61:d9:b4:bc:79:82:c3:5d:
81:19:64:86:2b:51:22:c6:b7:73:37:09:50:28:8d:ba:b0:41:
aa:b4:af:8f:0e:98:24:c6:10:de:ae:dd:72:b1:3d:71:a0:5c:
79:c8:45:81:da:16:9e:10:2a:cf:ad:5b:2e:38:2c:83:79:6c:
bc:7d:ba:67:ef:6c:12:36:3f:34:dd:36:ea:f2:8b:ff:29:3e:
ed:c5:25:09:1d:7e:c9:df:a7:49:b9:09:9f:7d:12:63:90:37:
f1:7e:a7:1e:41:9a:a5:1e:80:d7:49:2f:83:eb:b2:97:96:cb:
39:1f:c9:d9:f1:21:0f:70:5a:7e:94:d4:88:7e:5a:d4:1d:fb:
54:1a:13:d3:5e:84:7f:ce:43:2e:b0:ef:93:75:4c:72:c0:2c:
27:81:16:2a:38:97:a9:7b:b2:80:2b:b6:20:07:6e:d8:0b:68:
c5:21:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:27:22 2026 by rpki-client