Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: kFhlzYTOpx3iMWRUAm1vVHz6mYLG6HfCH+7j+nHgtko=
Subject key identifier: 17:4D:87:E2:A5:6F:AD:AC:5E:48:95:75:01:74:CA:D6:94:24:28:FB
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019E20FF3F58CE38C8D19E4F2CD1F103F057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0726
Signing time: Wed 13 May 2026 11:00:59 +0000
Manifest this update: Wed 13 May 2026 11:00:59 +0000
Manifest next update: Thu 14 May 2026 11:00:59 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: VlFhCvv97nZOucXkFg6SVW1lUirc/k7sxXDG2kIe0Qk=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:3f:58:ce:38:c8:d1:9e:4f:2c:d1:f1:03:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: May 13 11:00:59 2026 GMT
Not After : May 14 11:00:59 2026 GMT
Subject: CN=174d87e2a56fadac5e4895750174cad6942428fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:d1:a8:cb:fc:cd:24:07:a1:90:a2:2d:9d:
8d:54:a4:91:32:bf:20:9d:bd:d5:91:38:9e:c8:90:
d3:e7:c5:22:a0:dd:00:36:0d:d0:2b:53:cb:58:57:
af:95:0d:7b:0d:3f:45:dc:d8:21:07:df:dd:e6:c8:
3b:d8:f5:ca:6b:fa:b7:8a:bb:6a:80:d1:e1:e5:33:
14:74:9b:1f:b0:8d:3b:19:5d:58:76:1c:6c:d8:b1:
fd:45:60:be:b6:88:cc:2c:21:79:39:79:01:fc:16:
e9:39:22:a3:dd:a8:00:4f:14:ca:a8:96:c3:23:4e:
e3:14:c7:89:59:08:22:a1:d1:a7:80:30:80:86:41:
aa:25:06:1f:46:a3:c2:45:a1:f9:5c:2a:27:74:c5:
6c:05:76:77:4a:d6:e1:be:cc:8e:6f:ec:86:27:5d:
28:7a:8f:c0:73:f1:04:ae:19:ec:cd:ef:83:9b:3d:
75:34:8e:2f:5f:31:ba:c9:d4:42:40:7c:6d:6a:c5:
44:82:b8:f8:44:5d:f7:87:22:c4:2d:1e:6e:e9:4e:
5b:60:2d:ab:b8:cd:c9:09:5d:32:34:72:40:d2:3f:
0e:8f:c7:40:7e:ec:94:10:fa:de:dc:00:44:ab:5a:
93:92:0f:1c:c0:8b:2f:e6:ab:d0:04:a7:a5:73:3a:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:87:E2:A5:6F:AD:AC:5E:48:95:75:01:74:CA:D6:94:24:28:FB
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a7:7a:03:c5:8c:f2:0d:c2:51:e7:db:d9:88:59:19:7b:7f:
66:b5:87:9c:6d:84:31:35:00:a4:3f:df:d0:2e:d5:da:88:4d:
d5:47:8d:c5:f6:c6:20:83:0b:23:5b:f1:af:88:c3:c7:e4:f0:
79:6d:54:af:28:c8:c3:22:06:48:ea:3b:93:fb:6a:b4:9e:67:
a4:f2:22:65:7b:e8:38:bc:92:98:05:f9:c4:3a:d3:a3:a2:ba:
1a:36:02:82:cf:48:21:5e:85:4b:b4:bc:45:17:02:2b:a8:47:
bc:4d:6a:1d:39:dd:1e:6a:67:89:e0:0a:8e:5d:59:41:60:8b:
ab:85:9f:d4:e0:f0:7e:99:20:0f:c0:37:1e:a1:b0:04:db:ef:
16:42:f3:d5:7c:ae:b3:03:49:f1:06:b0:d8:6b:1f:aa:02:49:
40:4b:40:16:8c:ec:99:45:5d:9d:ec:85:c4:5f:ff:4b:93:60:
da:a2:49:c9:34:28:17:02:c1:0a:f7:5b:8d:8c:c2:9e:fb:58:
ae:29:7f:61:61:49:8a:41:52:21:b2:dc:6c:5b:eb:de:3d:2c:
58:fa:f7:03:a4:61:64:a0:3e:77:25:fd:b9:b0:0a:70:10:22:
7f:b8:46:c9:5c:92:ae:09:47:04:46:ac:17:f9:b6:24:ea:d9:
1f:96:10:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/z9YzjjI0Z5PLNHxA/BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm
YTcyMjgwHhcNMjYwNTEzMTEwMDU5WhcNMjYwNTE0MTEwMDU5WjAzMTEwLwYDVQQD
EygxNzRkODdlMmE1NmZhZGFjNWU0ODk1NzUwMTc0Y2FkNjk0MjQyOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAvRqMv8zSQHoZCiLZ2NVKSRMr8g
nb3VkTieyJDT58UioN0ANg3QK1PLWFevlQ17DT9F3NghB9/d5sg72PXKa/q3irtq
gNHh5TMUdJsfsI07GV1Ydhxs2LH9RWC+tojMLCF5OXkB/BbpOSKj3agATxTKqJbD
I07jFMeJWQgiodGngDCAhkGqJQYfRqPCRaH5XCondMVsBXZ3StbhvsyOb+yGJ10o
eo/Ac/EErhnsze+Dmz11NI4vXzG6ydRCQHxtasVEgrj4RF33hyLELR5u6U5bYC2r
uM3JCV0yNHJA0j8Oj8dAfuyUEPre3ABEq1qTkg8cwIsv5qvQBKelczooMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdNh+Klb62sXkiVdQF0ytaUJCj7MB8GA1UdIwQY
MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt
MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2
LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqd6A8WM
8g3CUefb2YhZGXt/ZrWHnG2EMTUApD/f0C7V2ohN1UeNxfbGIIMLI1vxr4jDx+Tw
eW1UryjIwyIGSOo7k/tqtJ5npPIiZXvoOLySmAX5xDrTo6K6GjYCgs9IIV6FS7S8
RRcCK6hHvE1qHTndHmpnieAKjl1ZQWCLq4Wf1ODwfpkgD8A3HqGwBNvvFkLz1Xyu
swNJ8Qaw2GsfqgJJQEtAFozsmUVdneyFxF//S5Ng2qJJyTQoFwLBCvdbjYzCnvtY
ril/YWFJikFSIbLcbFvr3j0sWPr3A6RhZKA+dyX9ubAKcBAif7hGyVySrglHBEas
F/m2JOrZH5YQeg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:49 2026 by rpki-client