Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: qUH5ZF70s/Gsibl2OwcoOe0hykEsPYaXSDYLZ7DnmKA=
Subject key identifier: DA:E0:07:BA:4B:0A:93:0F:CE:BD:70:17:3B:68:30:65:31:B9:6A:D6
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019E1DC7690BD7B4C6129E0338B5F8CA9070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: xg4EuuKlLQcFdjVSz5xXeQ/vk0Qhnja2WH1pQDGqT4E=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:69:0b:d7:b4:c6:12:9e:03:38:b5:f8:ca:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=dae007ba4b0a930fcebd70173b68306531b96ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:81:8c:8e:d9:fb:ee:1a:76:f2:20:33:1a:
b8:7f:96:a8:e5:9b:49:d5:70:6f:44:14:51:79:f0:
03:6d:72:f0:e3:fe:3a:ac:ae:6f:a0:a2:43:f8:f9:
1e:fa:2b:26:6c:ef:a7:50:07:a7:b8:3f:ce:6d:60:
a8:63:41:65:ef:e1:51:fd:c7:d8:db:07:71:a0:c4:
f6:79:11:2e:31:10:a5:30:d0:54:f2:1c:7c:6d:bf:
f4:3f:11:51:6b:2d:96:10:02:26:25:cd:82:ca:df:
42:a9:44:4c:50:00:61:30:e0:f3:ba:9e:b6:60:de:
86:4f:e5:47:3f:fd:3c:cc:8c:70:e1:7f:59:66:d7:
73:36:95:72:09:86:eb:15:3d:e4:39:68:14:01:cf:
ed:e0:00:8c:be:42:8d:32:4a:f8:e2:b8:23:b8:bf:
5a:fe:56:bf:9f:5c:c6:9d:08:42:6c:59:75:3e:a6:
86:e8:38:69:51:be:54:00:18:9d:35:00:93:46:79:
04:85:4f:69:2b:49:2c:d1:79:86:cf:cc:b1:34:71:
f7:ba:15:d8:d2:75:fe:53:00:45:3d:44:e6:99:4f:
76:eb:c4:8d:ed:41:71:c4:5e:a3:29:ac:74:ee:0c:
83:f7:f1:55:b2:32:38:e4:ca:bc:74:cc:b8:a0:16:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:07:BA:4B:0A:93:0F:CE:BD:70:17:3B:68:30:65:31:B9:6A:D6
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:00:9a:01:0e:32:05:89:df:15:1a:2d:0e:cf:36:c1:38:83:
60:64:b1:e4:ef:92:95:4c:d6:a4:32:86:76:bf:e4:5e:98:d3:
6b:c1:fe:52:9d:49:7b:1b:74:15:23:07:e2:86:95:2f:98:3c:
bc:de:bb:78:0f:a8:09:77:ba:f1:2b:79:e5:b0:a4:79:f7:c3:
5f:68:1a:76:ec:5a:cb:92:45:e6:3d:bc:5b:04:b8:e4:d9:be:
dd:1c:bd:94:f7:fc:85:2f:1d:ec:72:3a:92:a1:f0:71:a9:b7:
06:bf:c5:b6:16:04:85:89:61:39:8e:15:b3:ab:30:0f:64:2d:
9f:19:da:a2:66:7c:15:28:65:ed:a6:57:f2:bd:ba:3f:7b:97:
08:8a:21:30:0d:6e:54:5d:b2:ba:38:da:0e:37:d7:e9:76:af:
b7:d5:83:02:84:c9:bd:0f:4d:f2:a0:54:48:fe:b5:b3:b0:df:
ab:d7:1b:e1:cc:1f:10:da:2c:9c:2c:28:6f:a4:c4:77:da:6a:
10:f1:00:93:1c:c3:33:5a:7f:73:c1:fa:f3:b1:c0:b0:d4:9a:
4c:51:cf:4f:f5:ef:60:ef:39:f3:74:03:50:1e:23:23:4c:1a:
4d:97:d3:ae:19:9f:74:4f:81:42:3f:c1:a4:ac:6e:ac:f7:e1:
13:a2:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:51 2026 by rpki-client