Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: Kdz5ESKbd5fIEmhSypYlgbD9UKbA+0Dn57t1OD03btE=
Subject key identifier: E1:82:31:0B:A0:07:BA:AD:7D:18:49:1A:02:8D:5B:18:2F:87:2C:0A
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019E1D90EDE2727A357DF3B12D6B4165547B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0A42
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: wFe3uMnIike3OCEGLCGWcbfzUZ6Pmfa5hoF1v2xetrI=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ed:e2:72:7a:35:7d:f3:b1:2d:6b:41:65:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=e182310ba007baad7d18491a028d5b182f872c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:92:ab:de:67:71:19:2f:df:51:93:74:f7:
c4:59:60:08:38:06:0a:ec:15:76:77:33:53:69:d0:
44:87:0e:62:21:40:0a:75:55:63:b1:f2:38:17:50:
15:24:89:98:46:61:c9:b6:68:f9:30:c3:e8:bd:5e:
98:eb:59:a4:c7:84:a6:f2:73:fc:e3:a9:ed:c9:09:
0b:e2:fe:55:0b:98:31:b6:50:9c:7f:40:71:76:cf:
fb:db:8a:83:bc:31:74:fb:51:9b:53:8e:ef:99:a2:
ef:56:cb:01:ea:e9:55:1d:3d:75:fd:96:ac:ad:99:
08:75:7e:9b:2a:ee:06:45:eb:4c:ce:ae:82:ce:50:
00:af:d9:ea:f3:a8:f2:22:df:1c:6b:5c:e0:c6:d9:
b7:86:83:94:c7:a6:1c:0a:8e:05:c2:58:24:71:8d:
11:f9:27:87:44:e8:07:ab:c8:49:9b:d4:8c:03:fb:
09:85:03:14:fe:77:b6:d5:bb:76:b0:5b:55:60:68:
a0:74:d8:d8:fb:fe:f4:23:46:e4:1e:a1:05:89:11:
41:e3:02:70:b4:e7:60:70:b1:fd:93:0a:ef:74:be:
e9:d5:58:df:16:95:1a:3c:cc:10:53:3e:60:a6:b1:
ef:1d:2f:05:02:ab:fd:09:72:c1:a9:5a:1b:36:02:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:31:0B:A0:07:BA:AD:7D:18:49:1A:02:8D:5B:18:2F:87:2C:0A
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:75:cf:72:35:df:1a:33:e1:c1:67:8a:88:ad:1f:cc:e2:82:
eb:74:ee:b0:2e:9e:a8:50:d7:28:38:be:65:79:00:00:4f:8c:
5e:27:9e:fa:cb:1c:2b:e3:ec:98:65:34:99:65:b9:cd:ff:82:
1f:ca:87:bb:8d:41:8f:fe:30:40:bb:06:23:c3:18:59:12:9f:
5c:35:18:c8:e3:6f:8f:24:62:cc:b8:0f:13:48:95:c9:4d:37:
fa:7c:ed:d3:ab:ef:b3:5b:22:ff:86:2f:bf:29:78:bb:58:b7:
88:aa:d8:0b:d2:55:46:36:6a:46:6a:ea:4b:df:29:f9:96:e8:
e4:e0:4f:80:38:74:82:5a:d5:03:cc:8c:8c:19:3d:e4:f5:4b:
f4:dd:7f:64:93:46:4b:bc:6e:87:27:8a:de:68:52:8e:2b:c7:
bc:5e:28:c3:bb:ae:32:78:c9:ca:45:6e:97:f8:a1:6a:63:b0:
85:a7:28:44:d5:b9:40:1b:fd:95:ff:79:09:58:89:c0:cf:13:
f7:48:ce:86:5c:1b:2c:74:b7:a6:89:77:f8:5e:28:49:e1:27:
32:c5:c5:ce:f1:12:28:06:87:7f:04:02:c2:4b:a6:fd:a8:ee:
af:fb:72:cf:aa:e5:ed:65:d1:1c:8f:c3:fc:30:c1:5f:cf:20:
57:77:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:57:45 2026 by rpki-client