Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: 36wrLn7JbWPJAcZAv80dURvN+5GLfod1PYPBybLg0W4=
Subject key identifier: 6D:F0:98:4D:6E:C8:ED:A3:BD:F2:4E:18:44:BE:7F:E3:AD:B5:DA:E7
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 01A146F2D6AC662A04A278F26C3369893F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1AAA
Signing time: Fri 16 Oct 2026 23:01:22 +0000
Manifest this update: Fri 16 Oct 2026 23:01:22 +0000
Manifest next update: Sat 17 Oct 2026 23:01:22 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: a8iRLttO1Wt94DGaQmdv1mXsGnGVEvEZ5i9Ivn06Sjo=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:d6:ac:66:2a:04:a2:78:f2:6c:33:69:89:3f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Oct 16 23:01:22 2026 GMT
Not After : Oct 17 23:01:22 2026 GMT
Subject: CN=6df0984d6ec8eda3bdf24e1844be7fe3adb5dae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:28:40:05:c9:78:c2:b7:a6:8a:7a:0c:7d:
2c:b2:4d:14:3c:1d:b1:d3:63:c4:82:74:d8:43:17:
16:63:24:fb:71:f8:e2:2e:78:96:94:bb:99:57:3b:
d0:ff:a2:e9:0e:ff:47:c9:eb:4f:e9:8e:db:91:5b:
18:57:7c:58:d6:a0:13:36:33:70:39:32:fe:90:24:
dc:8c:96:24:67:3a:b8:56:6a:de:8a:af:b9:c9:20:
71:d7:56:52:4c:78:81:f9:bf:a9:a7:e1:bc:7b:b4:
04:99:e5:6f:ed:6d:7e:d7:f5:52:76:70:73:90:c4:
e3:12:f7:7e:12:60:dd:4c:58:e1:4e:79:cd:2d:5c:
b6:a2:2f:92:9d:57:14:eb:c5:ef:a6:0f:53:f5:e6:
67:e2:9f:d3:51:d8:2a:30:08:3d:f2:be:24:1c:c1:
f9:47:f7:c1:a4:86:73:f8:fe:7b:01:fe:e4:1f:9c:
91:44:e4:e0:b7:a8:33:df:16:29:30:d3:43:ec:44:
f7:b0:7f:c0:2b:27:0d:0f:0e:cc:30:48:98:0c:db:
f8:d2:fb:00:ba:aa:6e:ca:5d:70:5d:9b:56:20:bb:
7c:d6:a7:6a:9a:41:9e:d0:93:94:ad:89:df:9b:ad:
a0:75:01:19:de:62:24:5c:bc:b1:63:c1:a8:4b:d1:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:98:4D:6E:C8:ED:A3:BD:F2:4E:18:44:BE:7F:E3:AD:B5:DA:E7
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e2:d9:4a:c3:fe:9f:dc:82:9f:03:b3:50:52:15:7e:f3:e9:
48:53:d3:26:d0:e1:a0:80:ed:b5:f6:d0:12:44:1d:7b:c7:04:
93:13:af:b9:a3:e3:fc:4b:4b:71:7a:42:8e:8e:62:1f:15:2b:
68:a3:ce:f4:ee:44:5a:d6:33:ad:52:3d:6e:dd:eb:78:e1:34:
69:dc:5b:ee:40:8b:f7:d3:a6:1f:53:b5:f0:43:a1:48:1c:88:
39:4e:b0:22:75:af:a1:4c:a4:75:46:82:88:d0:6f:5f:30:54:
3a:c2:ea:09:6f:8f:90:51:cb:83:83:cc:03:64:67:c1:c6:4b:
b8:de:82:5b:ef:64:62:06:26:d3:a8:9f:d4:e9:17:5b:d5:0f:
91:15:2e:03:ab:f9:ce:56:4e:69:26:c1:b7:dc:6d:b3:58:dc:
a3:dd:25:ba:8f:ac:9d:b9:3a:bc:ce:5b:b9:24:4c:0e:da:f2:
fb:8f:23:7c:5b:76:c8:af:57:7f:2a:76:a2:60:db:39:75:eb:
f7:35:f3:35:b2:d0:e0:f1:b8:7c:ce:b5:b0:b1:a8:b0:d5:91:
08:0c:95:f2:5b:3a:59:53:29:54:8d:1b:c7:4f:6f:fc:11:05:
b7:2f:fb:b3:92:32:3e:66:c1:7d:ee:ba:a6:6a:97:7a:ea:5e:
5e:08:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:46:52 2026 by rpki-client