Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: NqMuwZs+D2tZai3MSyUDM22OQp6PKON9Dxwe5QUJQds=
Subject key identifier: 2C:24:A2:24:80:86:DC:B2:32:C7:24:E2:4B:23:54:26:E8:BC:F2:56
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019F905A8567FE8A008397D773980A3A3660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0B02
Signing time: Thu 23 Jul 2026 19:01:19 +0000
Manifest this update: Thu 23 Jul 2026 19:01:19 +0000
Manifest next update: Fri 24 Jul 2026 19:01:19 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: /ug/rNYd6AlFI5LdByzUHjE6LPpTcN7fgQavFm8/qBA=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:85:67:fe:8a:00:83:97:d7:73:98:0a:3a:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Jul 23 19:01:19 2026 GMT
Not After : Jul 24 19:01:19 2026 GMT
Subject: CN=2c24a2248086dcb232c724e24b235426e8bcf256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:da:66:e7:b1:73:ca:db:56:94:84:06:07:
19:51:c7:ae:28:44:a9:f4:60:b4:a7:1d:c1:b6:3d:
f6:15:bb:03:48:78:4d:d1:cc:db:79:7d:bb:58:02:
04:05:e9:5c:06:bf:72:3d:99:90:c5:64:d2:c4:5a:
5a:0c:f8:6b:9d:02:fa:a3:f0:96:5e:dc:9a:b8:1e:
5d:d5:bc:62:6c:86:0d:32:39:19:c5:00:4a:93:96:
35:76:2d:63:6e:06:bd:0f:6e:ba:ea:be:95:0c:37:
5d:89:f5:7b:85:da:60:3d:7c:b9:21:cd:21:31:08:
0c:02:db:44:e8:d6:75:14:dd:02:25:b0:6c:75:8e:
bf:d5:fc:9c:1e:c1:32:52:5c:32:6d:fd:9e:70:d4:
6a:50:a6:c8:1e:1a:5e:97:66:5c:de:e3:10:06:3c:
e7:58:b1:34:60:96:b2:2c:98:31:72:f0:86:ee:ef:
ae:0b:f0:d1:14:f1:49:0e:3b:6a:05:a4:b6:02:0e:
55:ea:36:d5:ff:93:c0:6f:4c:ac:8f:dc:fb:70:c8:
3a:9c:94:7a:52:65:12:c0:21:d0:e6:b0:01:71:61:
ff:a9:d5:6f:52:a2:bd:bb:6b:30:01:0f:95:3b:1f:
c9:58:b0:12:33:d7:db:2a:20:d0:f4:e7:0b:0d:4d:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:A2:24:80:86:DC:B2:32:C7:24:E2:4B:23:54:26:E8:BC:F2:56
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:44:aa:f2:6c:1f:21:18:a5:86:d1:f5:06:56:ae:92:f2:b1:
26:91:03:89:54:93:18:33:7c:ce:06:4d:62:e5:8e:a3:47:7a:
db:2c:f1:16:8e:18:fe:db:99:32:87:28:5b:d8:1f:14:fd:02:
07:f7:d6:2c:4c:9a:fc:be:15:c7:28:f2:38:25:41:5e:b2:df:
90:dc:29:3e:72:cc:d6:a0:f4:fd:7d:86:f1:1b:55:5c:fc:38:
cc:06:e6:ec:e0:81:5d:0e:b4:68:3a:3b:61:73:6f:e5:54:bd:
49:a1:e7:1d:8a:38:29:5e:17:d7:24:d5:b2:53:bd:eb:c2:c8:
c8:d2:0b:3a:15:6e:99:c5:b7:7a:f4:94:29:35:00:63:ec:3c:
35:23:d9:0e:4d:32:72:54:0c:29:bc:5b:0c:9e:59:cb:9b:c8:
fc:b5:c3:b6:af:fc:e5:77:0e:cd:98:4e:fc:a7:14:bc:df:b6:
b9:6c:f1:f1:0e:3a:73:e7:16:59:b6:d2:ca:39:cf:ed:e1:bf:
ac:7e:1b:59:4d:66:43:4c:b3:35:06:5e:0d:6f:b2:91:07:5a:
9e:11:b8:98:53:f0:d3:be:d9:70:6c:b1:68:c4:e1:b3:a7:3f:
c9:9d:a1:72:c1:e1:e2:64:96:9d:96:7c:49:4b:1a:0c:e5:a9:
25:a4:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:48 2026 by rpki-client