Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: 01CLqmrp6IxpMockoP39b3HCC+PsaabqtplEfn7fHK4=
Subject key identifier: E9:A7:4E:77:02:99:C8:45:BC:6E:7E:07:3F:E3:75:3A:9F:EB:81:1C
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019D27727AC507A3DF3EFA96EB656ECD5405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1784
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: sC43LnRl/p6RLwKuP7oXOo2Item6ubIJcR0b/53VkaI=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7a:c5:07:a3:df:3e:fa:96:eb:65:6e:cd:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=e9a74e770299c845bc6e7e073fe3753a9feb811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:0f:24:e1:d0:b7:eb:a9:23:55:9b:b3:b8:
68:90:9f:52:c9:8e:8f:17:82:97:50:25:82:10:9b:
d7:7f:f3:77:78:c4:cd:ad:cc:d4:c6:31:5a:0f:aa:
02:14:2b:2e:77:dd:58:7f:a4:4c:23:99:48:35:8a:
46:db:02:54:67:08:48:23:83:6d:3c:cf:1a:76:4c:
5e:85:8b:bf:99:50:52:bc:d8:6f:49:58:e5:bc:12:
62:c1:4b:73:5f:30:78:d6:97:10:f1:4f:d7:5b:a3:
a1:9f:ed:30:8b:7b:0e:b8:b7:0b:e8:d0:85:75:aa:
ea:07:2e:ab:91:bd:05:cf:c1:35:bd:8d:4f:33:45:
a2:5e:2f:09:83:40:b1:2d:e0:52:3c:12:34:2e:0e:
66:55:55:f6:3c:0c:82:da:2f:1b:8e:f3:74:cc:f1:
6a:c4:28:23:64:cb:99:a0:ae:5e:20:1a:7d:25:b4:
b5:47:27:93:0b:3a:2b:d1:18:d9:46:fe:75:0a:71:
ce:15:d7:0d:69:34:98:df:b8:c6:71:b7:c4:6d:4c:
eb:c3:c9:12:69:b8:5d:ee:75:8a:e4:17:64:e9:1c:
84:42:a7:ec:bb:96:90:e0:d9:b2:0e:c9:07:4f:ea:
8b:ba:4a:5b:1a:06:0c:88:09:a6:e0:0f:a5:60:c6:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:4E:77:02:99:C8:45:BC:6E:7E:07:3F:E3:75:3A:9F:EB:81:1C
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a5:9d:e1:e1:95:f2:21:c7:6c:e8:ec:2e:73:27:b1:08:04:
a5:df:75:b3:fb:5f:90:64:c0:86:47:58:98:be:2a:84:a1:85:
8e:a6:19:f5:ab:8f:c4:79:9b:49:a6:48:67:ce:9b:ae:22:cc:
08:25:d7:ac:dd:d1:e9:02:fc:98:10:f1:35:8d:2e:3d:a0:7c:
dc:51:33:61:cc:a5:cc:c6:ad:d0:67:cc:3f:44:4f:14:59:80:
fb:a2:dc:93:a7:1a:d1:65:ac:ce:12:a2:2b:a7:cb:94:c6:01:
da:47:f1:70:ff:61:c7:22:e0:d0:5e:98:1e:20:08:36:c0:d8:
af:93:91:99:1d:aa:ad:d8:0a:56:cd:e9:47:c5:fe:3f:2f:61:
2a:88:f3:82:7c:23:64:1f:e2:67:52:29:00:33:fd:24:3c:ac:
97:4b:5d:92:66:74:b3:a2:3a:31:50:a2:2f:b6:12:03:85:e9:
da:9d:38:b4:e6:cd:55:25:96:9c:89:00:01:dc:d8:69:03:c2:
7c:c2:9b:1f:6f:86:a5:b1:13:35:e3:61:e9:15:43:04:ed:89:
07:d0:ed:16:78:6d:e8:f8:3b:1a:ca:c9:de:59:af:b8:94:cd:
e5:da:3e:b4:61:19:20:ba:f0:9b:f0:82:c7:0f:0a:54:e2:f9:
d2:73:7b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnrFB6PfPvqW62VuzVQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjYwMzI2MDAwMTQ3WhcNMjYwMzI3MDAwMTQ3WjAzMTEwLwYDVQQD
EyhlOWE3NGU3NzAyOTljODQ1YmM2ZTdlMDczZmUzNzUzYTlmZWI4MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/MPJOHQt+upI1Wbs7hokJ9SyY6P
F4KXUCWCEJvXf/N3eMTNrczUxjFaD6oCFCsud91Yf6RMI5lINYpG2wJUZwhII4Nt
PM8adkxehYu/mVBSvNhvSVjlvBJiwUtzXzB41pcQ8U/XW6Ohn+0wi3sOuLcL6NCF
darqBy6rkb0Fz8E1vY1PM0WiXi8Jg0CxLeBSPBI0Lg5mVVX2PAyC2i8bjvN0zPFq
xCgjZMuZoK5eIBp9JbS1RyeTCzor0RjZRv51CnHOFdcNaTSY37jGcbfEbUzrw8kS
abhd7nWK5Bdk6RyEQqfsu5aQ4NmyDskHT+qLukpbGgYMiAmm4A+lYMZIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmnTncCmchFvG5+Bz/jdTqf64EcMB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKWd4eGV
8iHHbOjsLnMnsQgEpd91s/tfkGTAhkdYmL4qhKGFjqYZ9auPxHmbSaZIZ86briLM
CCXXrN3R6QL8mBDxNY0uPaB83FEzYcylzMat0GfMP0RPFFmA+6Lck6ca0WWszhKi
K6fLlMYB2kfxcP9hxyLg0F6YHiAINsDYr5ORmR2qrdgKVs3pR8X+Py9hKojzgnwj
ZB/iZ1IpADP9JDysl0tdkmZ0s6I6MVCiL7YSA4Xp2p04tObNVSWWnIkAAdzYaQPC
fMKbH2+GpbETNeNh6RVDBO2JB9DtFnht6Pg7GsrJ3lmvuJTN5do+tGEZILrwm/CC
xw8KVOL50nN7zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:59 2026 by rpki-client