Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: vX3ULi32ixHXDGGF8zFpy7Lkb+IkUn9VPxfDdbD4qlg=
Subject key identifier: B2:EC:FD:D1:03:51:22:7A:22:7B:CC:BB:69:AB:C3:75:0D:98:24:34
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019E1EA367D60FF8A2C7EDCCBF7C4E115029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1804
Signing time: Wed 13 May 2026 00:01:25 +0000
Manifest this update: Wed 13 May 2026 00:01:25 +0000
Manifest next update: Thu 14 May 2026 00:01:25 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: njqid2d99jL5YOvaGFsM+is5eZzACLPfF2ckV8lf1Zk=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:67:d6:0f:f8:a2:c7:ed:cc:bf:7c:4e:11:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: May 13 00:01:25 2026 GMT
Not After : May 14 00:01:25 2026 GMT
Subject: CN=b2ecfdd10351227a227bccbb69abc3750d982434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:9d:3c:e5:3b:1a:b4:d4:85:3c:0c:fa:b0:
28:6c:26:07:53:94:10:d5:1a:6d:b6:ab:9c:ce:61:
fe:c9:b2:6a:9b:dd:2b:65:8a:2a:16:93:cc:37:bf:
61:04:f2:0e:bd:b5:f8:c5:96:f4:7d:28:6c:7d:66:
51:57:a4:fb:96:53:fa:3f:e3:c4:86:ea:b5:82:7e:
0f:b8:39:e4:d2:ac:55:0b:ab:33:d6:bf:1f:c6:b2:
85:62:1b:1c:ca:33:eb:c5:6e:22:bc:e3:48:70:3b:
0a:5a:47:fd:51:72:d5:07:07:76:16:17:d6:3c:99:
86:57:7d:95:27:2c:1f:1c:fb:9f:37:46:0d:0d:c4:
b6:ed:c1:82:35:bd:1f:e1:7a:cd:17:5c:6a:d9:89:
d3:3a:1f:8e:03:7d:4c:3e:a0:00:89:bb:a7:4b:57:
7f:8b:c8:f9:22:c9:9b:b2:bc:04:87:2a:2b:45:0e:
09:4d:c0:79:99:0d:55:3e:be:24:52:33:65:ec:73:
ca:42:1e:e1:d3:a1:e4:04:64:4d:c4:61:a1:c8:9b:
31:63:99:a3:de:2e:3d:00:1d:50:22:27:1c:38:11:
63:20:8b:8b:1a:a2:d3:b1:c4:0f:03:f8:4f:2f:9e:
33:cb:2c:31:27:40:12:d2:bb:1d:d8:b2:b9:5a:4e:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:FD:D1:03:51:22:7A:22:7B:CC:BB:69:AB:C3:75:0D:98:24:34
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:3d:7b:8e:61:d9:d4:3e:9a:b0:5c:5a:de:5f:38:8c:fd:
42:94:76:a1:fe:71:6c:b0:67:21:20:87:82:bf:45:4c:22:36:
f4:52:cf:aa:ed:d0:da:05:a5:4e:77:84:50:28:40:6b:3e:ae:
f7:73:52:08:4b:70:cc:ae:43:f7:d8:59:48:61:ec:31:7a:de:
20:68:bf:9c:16:c2:78:cb:1a:42:96:3b:23:ae:01:8d:03:26:
0c:e3:78:76:ab:63:23:bc:16:fc:09:1a:df:77:61:0d:6c:25:
8c:7a:30:83:67:8a:4c:26:7d:ed:f3:51:c3:29:34:6e:c4:f5:
5c:a0:9f:c3:9f:66:47:8e:a5:71:84:6e:5b:31:28:31:53:cf:
ff:cb:ed:f6:52:c6:4e:ab:3f:2f:ed:83:10:1a:c2:6a:b2:8f:
17:86:1b:75:90:08:a7:6e:55:4b:5f:61:09:c2:52:21:b9:ab:
e5:79:b1:95:d2:eb:73:da:51:1a:9a:00:25:11:5f:83:a6:ef:
09:83:e9:94:e8:ef:14:71:c8:d0:21:6d:0a:b4:cb:a9:b0:7d:
82:81:37:8c:8f:94:7d:8a:aa:75:b3:f9:ca:6c:52:e4:33:97:
37:90:d4:6c:ae:78:22:45:41:df:03:5f:a8:5a:1d:df:a7:9e:
01:e9:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:47 2026 by rpki-client