Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: D3JDQbnhTkGBBdQVIIu23yGCjwTrTVRqnOHUG9g55XQ=
Subject key identifier: 2D:D4:B8:73:0E:06:8E:B0:A6:05:8A:3D:BF:C4:40:10:06:1D:73:59
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019D29CE8A4E75A20D17CB33F6A03014E7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 0753
Signing time: Thu 26 Mar 2026 11:01:34 +0000
Manifest this update: Thu 26 Mar 2026 11:01:34 +0000
Manifest next update: Fri 27 Mar 2026 11:01:34 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: cxyUwRMYXosb1IHZC/K2f1SZe5FyZ4CtF2TGEPfRPh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:8a:4e:75:a2:0d:17:cb:33:f6:a0:30:14:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Mar 26 11:01:34 2026 GMT
Not After : Mar 27 11:01:34 2026 GMT
Subject: CN=2dd4b8730e068eb0a6058a3dbfc44010061d7359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:3b:2b:f7:7a:af:67:a0:91:5a:90:cf:18:
79:bc:d0:09:f6:b5:7b:1a:82:45:b1:ad:3b:ea:ee:
92:b5:4a:cc:9d:7f:a7:26:c6:06:a8:cf:5f:d0:0b:
30:8b:b8:61:0e:ee:9c:24:35:00:74:4a:9a:8b:24:
6a:de:aa:e0:93:7e:83:0e:76:b1:63:67:f5:96:21:
80:78:78:b7:d4:b1:32:91:05:ee:02:56:05:94:5a:
59:a7:c9:b0:dd:f6:22:24:1b:fc:a4:2f:94:09:36:
cf:6f:1f:fa:fd:05:25:af:ac:2e:97:78:cd:06:7f:
fc:f5:35:9d:b4:ac:de:9e:9e:a3:ae:00:b8:49:8c:
78:5a:a6:1b:5e:ab:f4:bf:e7:88:3e:b9:64:7d:b6:
8c:d3:2f:c8:2a:13:eb:09:f7:d9:24:a9:ad:13:48:
19:7f:b4:35:c7:72:8a:06:34:79:4f:ab:e2:2a:8b:
b5:cb:2a:86:0f:49:aa:2f:e3:7d:69:f1:8b:21:c5:
ed:c7:47:0a:30:74:82:ff:dc:3c:b9:bc:67:00:76:
a5:42:d2:27:14:f4:24:06:9c:3c:be:4d:65:5f:e6:
db:6c:57:a0:62:34:f0:90:c3:e6:7d:6c:a6:17:2a:
92:d0:ca:e3:9e:2a:40:2d:3d:e0:74:55:6b:df:ba:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:B8:73:0E:06:8E:B0:A6:05:8A:3D:BF:C4:40:10:06:1D:73:59
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3a:72:38:e3:b4:1d:bc:21:74:fc:7c:5b:a0:d2:da:c3:d8:
03:21:2e:4d:5a:9c:ab:a0:c9:2d:d0:02:c1:6d:52:c9:2b:5d:
2b:3c:c1:01:78:c9:1a:8d:5a:58:43:8e:b1:3b:39:f6:b5:b0:
4e:ef:ca:d5:4e:d2:92:f0:26:1f:00:08:31:34:d1:bf:6a:0c:
11:23:66:9e:cf:5d:f3:45:b8:cd:3d:50:f1:ae:30:95:a2:a4:
c3:ec:d1:14:7a:b7:fb:47:26:58:83:de:e0:6c:e8:3d:cf:35:
2c:e3:e4:a0:36:7f:bf:75:09:c8:96:76:5a:36:05:10:42:1c:
1c:fe:ef:e9:13:e9:5d:20:80:7a:f0:66:c4:10:16:ee:61:05:
32:6a:70:d9:eb:10:e3:13:ae:05:9a:7c:5f:2c:8f:70:8d:f5:
42:f5:1e:21:c1:1b:a9:9f:1a:17:3d:7c:d5:52:4d:71:9f:86:
2e:3d:dc:34:af:8f:a6:38:11:ef:b1:54:10:48:85:58:b6:51:
f5:c4:ae:91:da:0e:a7:26:9f:31:b1:95:21:94:4f:2f:86:5e:
48:f3:99:e8:e1:7e:82:d0:ee:5d:18:13:7b:67:35:33:c2:87:
53:30:28:76:c3:b1:29:65:cd:b6:ae:90:30:2b:07:0d:b8:0e:
af:54:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:27 2026 by rpki-client