
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: Iu1rQ9rC5G9+3LlbOnQnQaNgbHdtKvXdaw/oKXQ1Fzo=
Subject key identifier: 98:13:23:C2:51:0B:14:F4:7E:F2:E7:8C:91:41:4B:93:B2:CA:D7:8F
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 01A1450490D39F0F776100BCDE8F585F6D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 14:01:29 +0000
Manifest this update: Fri 16 Oct 2026 14:01:29 +0000
Manifest next update: Sat 17 Oct 2026 14:01:29 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: VyH0JE6dtiOK5apsGiBPM87Xzuk/Xr+PhvLB+Gn5Mjo=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:04:90:d3:9f:0f:77:61:00:bc:de:8f:58:5f:6d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Oct 16 14:01:29 2026 GMT
Not After : Oct 17 14:01:29 2026 GMT
Subject: CN=981323c2510b14f47ef2e78c91414b93b2cad78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:fb:88:f7:5c:95:82:19:de:96:ab:f7:a3:
e8:fa:92:c5:f0:5f:b9:74:7a:41:ba:6c:be:63:43:
1f:ec:f0:87:f3:eb:f3:8d:e3:de:51:dd:c2:bf:fe:
4e:91:53:76:63:07:c4:d7:20:21:a0:12:23:98:ff:
fa:e5:41:31:58:9b:2c:25:26:8e:37:ff:05:b0:e5:
cf:b8:e2:c1:eb:64:9d:a2:09:f7:d4:8d:3a:d3:e6:
97:b0:16:cb:a8:3b:4e:c2:bc:79:3b:89:fe:25:14:
1b:31:ae:37:e1:5b:1e:c9:8a:cd:0c:08:d3:f5:12:
74:40:e3:6e:8c:8c:d5:4b:43:99:8a:6a:83:4d:0d:
9b:42:78:a8:20:6b:a3:ff:ff:3c:94:f2:bd:af:c0:
bf:8e:72:05:1c:38:3a:43:db:53:6e:90:f8:77:80:
95:fa:74:d3:10:52:49:1c:63:ad:9b:fe:de:d5:1e:
2d:e6:90:2a:e2:33:08:fd:07:7c:2f:41:28:1f:88:
bb:e9:2e:43:80:e7:8f:d5:30:7a:d3:6c:b4:1a:ed:
1c:58:c7:4b:c2:9a:39:0c:fe:41:f3:ed:d4:a5:8a:
a2:6a:e5:53:2e:d2:4d:2c:e6:41:a3:41:42:09:6d:
58:c7:7a:43:3d:e0:c2:fa:70:73:a8:63:44:26:28:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:23:C2:51:0B:14:F4:7E:F2:E7:8C:91:41:4B:93:B2:CA:D7:8F
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a9:f6:9e:d8:61:dd:27:b4:94:cc:67:55:dc:0e:47:7e:94:
5d:23:17:f8:44:47:6c:e4:ae:7c:ba:2c:25:12:c6:fb:e5:85:
82:cf:8b:e7:bc:07:12:bc:06:40:a2:4b:6e:65:fa:a5:94:bc:
21:9e:0c:e3:1b:59:ed:91:c3:2a:4a:f2:91:78:11:2a:2d:4c:
7d:b8:ae:18:e6:91:2d:34:29:cc:bc:22:01:ee:c6:27:42:d4:
24:84:34:a8:ad:da:12:5f:5c:8b:43:f7:c7:1f:7f:1f:87:40:
98:d2:46:c6:33:6f:3f:a3:be:10:5b:75:0a:dd:26:c1:91:4b:
cd:04:99:32:59:88:28:0f:d2:98:98:7e:77:45:19:58:f2:d5:
6c:76:ce:65:8c:84:72:ba:9a:5a:61:32:02:a5:38:b8:0c:40:
6c:02:f1:70:13:8f:cc:6a:56:9d:77:46:a5:41:62:11:fe:f8:
c9:a6:41:31:30:33:27:9c:87:0a:6b:01:33:18:84:f7:00:57:
51:b3:16:a4:97:d4:d0:2e:3b:ef:f3:62:6b:9a:d4:f6:f5:21:
f8:a4:35:23:24:31:85:e9:24:e1:bb:1b:ef:e1:a7:b6:4b:f4:
b4:ac:7b:ad:cc:ae:f2:3b:67:2d:8b:f4:9c:f6:fb:04:b5:ca:
e8:75:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 00:04:43 2026 by rpki-client