Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: 3sMRNlBUi/+Kze5G8gKEfkVQH1uOwyIhmuknFi/ozB4=
Subject key identifier: 37:DE:5A:C7:BC:7B:7B:70:13:03:22:23:C3:28:A9:E6:78:8B:A6:46
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019D26962CD3F6BB8B78F28F25D2AF420651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: 6kSOIxyUUaSHMHlsYLexpblnCcxKgvqX1ypK+BECf2c=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2c:d3:f6:bb:8b:78:f2:8f:25:d2:af:42:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=37de5ac7bc7b7b7013032223c328a9e6788ba646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:0c:82:d5:f9:bb:a6:11:40:38:d9:c4:2c:
90:0f:f8:08:51:19:2c:47:88:90:14:d4:be:0e:0a:
9b:94:2f:20:90:c1:dd:77:0e:f4:d2:d9:c0:a2:60:
16:7f:02:cf:df:0e:74:cc:4b:84:16:0f:de:29:74:
4f:d4:d3:b2:ce:4b:1a:4b:9f:06:75:c5:bb:16:d7:
0f:90:4c:14:82:62:05:e6:a3:09:f7:84:82:76:f0:
b6:a7:64:78:b5:e7:7a:75:1d:3c:ce:74:3d:54:f8:
5d:0a:aa:01:80:3e:c0:29:7c:87:74:47:ed:da:c1:
66:bc:30:b1:42:05:4a:1b:55:e1:bb:ad:53:9e:5e:
c6:76:13:20:a0:38:91:0d:d0:1a:8f:c1:75:c2:fa:
0a:ff:e9:fd:36:d4:43:23:92:f3:db:e3:71:60:6b:
6d:a8:e8:14:57:a9:15:28:10:48:c5:50:12:28:90:
bf:de:52:9a:2a:6d:a3:53:59:3f:9d:fe:12:a2:71:
93:cc:1e:1d:1e:16:f8:54:12:f1:81:6b:f4:9d:d2:
7c:26:da:57:cb:e6:2c:4c:f9:41:6a:21:cc:b5:68:
3e:6d:ce:5c:50:87:8b:31:b7:f3:af:e7:cd:5a:18:
5c:44:a0:1d:8d:2d:73:02:9a:44:51:7e:b0:43:e5:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:5A:C7:BC:7B:7B:70:13:03:22:23:C3:28:A9:E6:78:8B:A6:46
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:6f:1a:16:20:1c:6f:55:00:73:25:6d:7a:cd:dc:3e:f0:
65:c4:01:42:b4:19:0c:90:f7:78:85:6f:18:b6:76:07:b5:1d:
6f:a1:f9:3f:38:88:75:65:8b:97:cd:ba:c8:a7:f7:ce:3d:5a:
a8:ff:62:da:bb:f5:40:f2:7a:3f:42:f6:34:a3:f5:8f:dc:d5:
47:7d:71:9c:0a:85:57:49:17:09:9d:10:c2:7d:b6:7c:f2:18:
ee:37:b6:6f:20:db:ef:39:4d:ce:66:f8:e6:af:25:7d:e8:6c:
6f:26:e5:ac:45:57:0c:4f:7e:36:d7:7e:2f:93:01:46:13:3f:
e1:7c:64:82:21:e0:68:47:20:b7:3e:68:e6:93:76:31:f6:33:
96:4a:a1:92:64:e7:61:03:7b:a4:15:25:42:a2:49:14:02:d7:
50:66:2d:23:47:05:e3:8e:35:53:0f:0a:d9:2b:3a:92:f6:a5:
1b:41:86:dd:7d:25:39:25:f4:c1:2e:f9:cc:bd:a7:a2:83:a7:
7f:ea:76:3e:a3:6d:75:ea:00:d3:07:1e:29:a3:cf:b1:79:47:
09:5b:d5:0b:9f:ae:b9:5b:a5:55:3e:39:0a:b7:80:8d:ae:b1:
d8:94:89:60:91:3e:2e:9d:f8:1d:aa:47:70:cb:d5:a8:db:52:
4f:80:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:23 2026 by rpki-client