Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: AXDkpIqbWf8oEADe4/D1u/iB40vU0XvBqrGaTNFogUs=
Subject key identifier: EB:22:13:FC:16:54:AB:61:96:A6:F2:3D:7C:19:A9:A8:04:F1:2F:F5
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01A1DA93985B147862CF19A0ADF00C3E7444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 19F3
Signing time: Sat 14 Nov 2026 15:01:08 +0000
Manifest this update: Sat 14 Nov 2026 15:01:08 +0000
Manifest next update: Sun 15 Nov 2026 15:01:08 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: dn1ypn+hY9b1s/C9zIYhL7qdOeR2ICntmtn9Qfz/y4M=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:98:5b:14:78:62:cf:19:a0:ad:f0:0c:3e:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Nov 14 15:01:08 2026 GMT
Not After : Nov 15 15:01:08 2026 GMT
Subject: CN=eb2213fc1654ab6196a6f23d7c19a9a804f12ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:88:8d:82:f0:38:90:5a:d4:10:6c:a9:0a:
da:13:aa:78:66:0f:1a:97:a2:19:03:1d:9d:4c:6b:
11:68:13:47:7f:41:cb:bc:9f:00:4c:47:88:3b:3c:
18:05:1b:8a:02:d4:4d:f0:65:88:26:47:6a:cd:14:
9d:1d:4c:de:0f:a1:9e:1a:3c:46:62:86:a5:fa:e7:
39:32:de:3f:7f:3a:eb:1d:c7:5a:40:9c:dc:e8:d8:
51:b0:36:70:84:8a:55:85:03:65:b7:49:5c:c7:8f:
76:b4:13:f8:4c:1a:11:b4:31:97:3f:54:1b:45:38:
79:31:14:ef:62:26:89:3f:a3:1a:bf:b2:cf:0f:3d:
49:4e:9b:2d:d3:75:1a:75:d6:88:5f:22:ad:75:32:
5e:b1:be:a5:b5:aa:89:3b:6d:c7:9f:0b:50:57:da:
ca:54:89:42:b1:32:77:67:25:45:07:c8:54:9a:17:
63:cf:47:ae:94:59:d6:c6:f2:1d:d9:30:fd:7d:b9:
88:dd:15:0e:32:35:ad:b7:d0:bb:0d:0a:64:59:4e:
d8:8b:35:47:f7:fa:3d:3c:32:f2:dc:c4:58:53:db:
2a:29:2e:7e:96:11:2c:37:4c:09:d6:f7:64:90:02:
89:9a:ae:10:6a:01:27:f2:82:93:6b:82:62:cb:34:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:22:13:FC:16:54:AB:61:96:A6:F2:3D:7C:19:A9:A8:04:F1:2F:F5
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:d2:60:fc:c3:98:db:81:36:9c:0e:11:b1:b6:d5:d7:87:
22:64:5e:44:68:a3:a0:0b:c2:bb:69:e2:31:84:02:0d:49:24:
2f:b5:84:9e:08:ec:db:94:00:e2:ab:44:e6:4f:75:53:aa:22:
4e:f7:8b:27:07:7d:17:9a:06:d0:7d:b2:84:6a:86:28:1f:2a:
24:73:38:1b:f3:1b:53:7b:99:09:3b:99:ea:25:26:eb:fe:8d:
aa:24:bf:16:57:75:23:31:5c:d8:a6:ed:53:cb:86:fa:6e:c3:
98:aa:d8:83:86:86:7b:b1:f1:c9:f3:4e:1f:bc:e7:87:59:f7:
8f:57:5c:30:8c:62:f6:b1:1f:4f:e2:b1:57:44:30:f2:ec:99:
19:41:a7:99:97:07:99:26:18:ef:40:21:c5:d2:07:d0:92:37:
f7:0e:86:43:16:f5:19:ea:2b:29:e8:42:41:28:3b:44:b7:94:
f0:f1:9e:2b:9a:57:a4:ff:5f:58:6b:a5:32:5e:0d:04:a3:af:
46:7b:ef:f3:97:01:7f:47:f3:cd:c0:31:9e:4d:d8:88:6e:17:
12:b8:94:37:fe:e7:38:c9:db:e2:06:85:81:0f:f1:eb:1b:96:
62:d4:08:5e:23:65:99:3e:e6:9a:9f:d8:3c:01:6b:0b:30:96:
a1:45:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:31 2026 by rpki-client