Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: pLn2zB/Q1fWXmXwc5P0pIW8kD3ouIVTLv01vezx2p9E=
Subject key identifier: 42:21:7E:AA:36:DE:57:38:D2:0D:7E:A0:20:50:1B:C6:D1:3E:3E:8E
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019F935BE62127C213C18D6895600DD1CAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 18C5
Signing time: Fri 24 Jul 2026 09:01:41 +0000
Manifest this update: Fri 24 Jul 2026 09:01:41 +0000
Manifest next update: Sat 25 Jul 2026 09:01:41 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: s9ZnixsePtjrzgR3EUvmagCvKuCdjlH4au3GB019jmc=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:e6:21:27:c2:13:c1:8d:68:95:60:0d:d1:ca:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jul 24 09:01:41 2026 GMT
Not After : Jul 25 09:01:41 2026 GMT
Subject: CN=42217eaa36de5738d20d7ea020501bc6d13e3e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:df:d1:b7:e9:73:b9:95:b7:5d:8a:d1:81:
7a:2b:50:7f:79:09:79:c9:9f:38:af:62:ed:95:b2:
39:03:42:9f:89:81:01:a8:36:aa:a8:07:7d:47:8e:
ed:26:ca:5a:1e:7d:34:76:60:ea:6b:b5:fa:2a:a7:
76:af:9d:ad:8e:9e:a9:e3:2a:0f:66:8a:4c:f9:a7:
3b:e6:67:98:da:bb:56:bf:2e:2a:57:71:bb:01:e8:
8d:91:f6:e6:68:bb:47:f0:0d:e3:9a:ac:eb:4f:39:
7e:ab:08:62:d5:ae:84:62:d1:d3:74:c8:e6:bc:f4:
a5:f3:6f:44:e7:36:45:54:c5:b3:08:76:0e:4c:c1:
9c:8c:85:32:7b:fe:5a:a3:74:f1:70:26:b2:fe:32:
bf:03:c3:1a:df:20:ac:28:c8:d1:1e:50:98:9e:b7:
a4:31:91:17:df:26:8a:b7:40:db:9f:bf:61:4a:19:
3d:c0:1d:57:3b:79:bf:b8:4e:c1:94:75:2e:d0:c3:
f5:3c:18:63:77:96:ef:3a:50:db:27:1d:35:f1:5a:
28:2d:a3:76:1a:5c:49:ef:63:c2:b3:89:ef:a8:a6:
77:d9:cb:5c:3e:4e:51:ed:04:73:9a:67:a8:36:77:
0d:c0:34:00:26:48:b6:19:cf:6c:97:39:a2:3d:1a:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:7E:AA:36:DE:57:38:D2:0D:7E:A0:20:50:1B:C6:D1:3E:3E:8E
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:3b:c5:5c:c8:d1:7d:32:74:6f:88:10:0b:04:27:8c:02:
6e:c0:13:e8:23:58:78:4c:1d:8c:9e:fd:24:5b:ca:cd:0f:a0:
08:a2:17:e4:7f:e1:ef:db:d2:3f:45:41:af:cd:0d:08:94:88:
e9:cb:93:55:2a:50:e4:16:b6:f5:85:b8:3e:a7:5a:b1:6f:b1:
4e:1a:48:20:e6:08:30:58:a8:ed:11:f5:08:b1:d5:b4:5b:c1:
1c:30:35:82:86:6e:6e:1f:c2:c7:f9:8b:31:cf:5b:2d:48:38:
ba:5f:59:47:a7:69:19:55:e7:06:0f:4b:d9:61:c1:70:ef:fa:
20:af:e5:3d:c2:b0:53:9c:b2:59:84:c8:29:80:1b:6d:18:77:
fc:b4:13:2e:4b:2c:5e:0d:51:20:c2:f0:7a:96:a6:e6:04:e9:
9a:f6:8b:c8:4f:2c:25:a1:0e:53:14:cb:c2:ae:22:d1:3a:b6:
7a:c5:92:12:47:8c:09:17:59:32:cd:e5:e5:57:f7:da:9d:be:
a8:5d:6c:4d:33:75:1b:40:fc:60:5a:54:e6:b4:7a:1d:61:29:
9a:31:56:38:0c:d9:09:0f:3d:c5:91:53:95:1d:7c:bf:cc:3b:
5b:f5:7b:1a:e8:28:65:41:7c:90:be:fe:49:1c:75:e4:90:16:
81:be:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:56 2026 by rpki-client