Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: vCqLlIHj9WqMItdgAtvbcWssZoUeGORmf4FrDFZSHkA=
Subject key identifier: 76:CF:E7:1A:7F:E4:E9:C3:5C:BB:EF:45:C5:BB:6C:DD:CE:70:6F:79
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019D29CDCE10D453CFECD93B44E889E2D50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 06A6
Signing time: Thu 26 Mar 2026 11:00:46 +0000
Manifest this update: Thu 26 Mar 2026 11:00:46 +0000
Manifest next update: Fri 27 Mar 2026 11:00:46 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: IYPJOqeBA+QL1ceaLfotWOkmXEHGEzDYBeLv4UyztWg=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ce:10:d4:53:cf:ec:d9:3b:44:e8:89:e2:d5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Mar 26 11:00:46 2026 GMT
Not After : Mar 27 11:00:46 2026 GMT
Subject: CN=76cfe71a7fe4e9c35cbbef45c5bb6cddce706f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:29:f3:5e:a6:e0:68:f2:a1:10:12:f1:31:
ff:b0:d9:c6:eb:61:53:e6:91:e2:a0:29:37:0e:75:
25:5e:29:b9:e9:c7:38:90:1d:54:fc:e4:37:54:3b:
4c:aa:42:96:8a:7f:99:e6:56:5f:53:0e:70:f4:ab:
98:ab:ae:a5:10:31:f9:6c:c3:6d:06:88:2f:8c:1b:
9c:76:d5:eb:60:d6:c3:f4:85:f1:9e:88:28:ed:af:
ae:d0:5c:4b:79:e0:0f:0a:91:03:de:85:27:31:e6:
ac:14:23:cf:10:36:41:71:8a:f6:83:e7:39:c3:22:
ee:94:fd:09:fd:1f:8a:f8:cd:d9:61:61:c5:6d:27:
06:6f:45:02:83:b9:d1:f2:b0:de:c2:cb:bd:18:d1:
0d:c5:b6:22:0e:91:95:c9:1a:c8:eb:94:2c:7c:9c:
68:47:68:5c:97:43:08:ba:82:3b:b0:6e:5a:d0:ea:
5c:74:fd:3c:7c:d4:a0:4a:e3:5d:2d:2b:cc:e9:5d:
f6:b2:ba:a4:7b:48:52:be:ae:ba:a5:e1:f5:52:1a:
8e:57:34:95:43:2a:81:a3:50:88:3a:91:98:9f:20:
69:9f:fe:fd:be:5c:d8:1b:47:d9:e8:03:76:c7:e4:
3c:6e:e4:d0:f0:9f:ec:7e:dc:b0:68:21:3b:0f:04:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:E7:1A:7F:E4:E9:C3:5C:BB:EF:45:C5:BB:6C:DD:CE:70:6F:79
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:15:a2:59:fc:16:33:ad:ec:d4:5d:a8:80:86:21:e5:9e:1a:
04:ac:2a:5c:92:1f:58:1d:a9:59:a0:0c:db:68:8c:69:88:42:
1a:b4:c1:e0:d2:ee:f0:9c:36:d6:64:bb:fe:5d:c5:48:c5:7b:
08:e9:84:72:9a:00:89:fa:97:49:5c:f7:67:07:9d:b0:aa:0b:
10:01:72:83:be:80:25:a9:df:f3:4a:ba:6b:64:32:6c:6b:63:
2a:f9:d8:4f:c9:02:29:89:21:19:4b:88:20:76:8f:8b:8c:89:
6a:5b:66:77:a5:e8:68:ff:62:09:d7:01:24:1d:21:f0:7e:42:
28:2c:bc:13:03:38:d8:7e:f0:a1:ab:4a:2c:ef:8d:b0:0f:72:
f5:26:37:4d:13:ea:ba:b7:09:bb:2f:43:7f:75:b3:37:87:bb:
fb:1e:55:6d:04:b3:67:24:5e:65:ca:ab:01:c4:d0:2e:fa:be:
71:17:a0:88:65:f6:c9:58:b1:42:14:01:2c:47:96:d4:b8:ea:
77:fd:3f:78:96:e0:6e:6b:9f:9a:59:28:f6:a1:1b:94:b1:8c:
2d:6c:32:53:27:60:0e:2f:43:c0:b0:13:77:e9:9f:7a:d8:7d:
be:68:b5:80:ce:48:5d:14:ee:32:e4:37:5a:8c:dd:b9:fc:04:
9a:6b:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:30 2026 by rpki-client