Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: ouGjhwYSgBMR5pDnhhKFnmHXqCmmbWODvjV4DFrMx5Y=
Subject key identifier: FF:5A:A6:41:E0:AB:43:1A:74:24:5C:56:DB:21:A4:48:7C:E9:E2:B2
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019F93C902BCC9F488ADFE9B2973C944CFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 0893
Signing time: Fri 24 Jul 2026 11:00:51 +0000
Manifest this update: Fri 24 Jul 2026 11:00:51 +0000
Manifest next update: Sat 25 Jul 2026 11:00:51 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: Z/XcI289WEY4/Q8HYaPy+ON68QnfKK2GPSiWJnMi7jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:02:bc:c9:f4:88:ad:fe:9b:29:73:c9:44:cf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Jul 24 11:00:51 2026 GMT
Not After : Jul 25 11:00:51 2026 GMT
Subject: CN=ff5aa641e0ab431a74245c56db21a4487ce9e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:0f:96:53:8f:50:8b:63:9a:b7:ea:2b:c2:
94:5a:19:8f:0a:06:77:d5:a4:92:03:41:22:34:da:
bb:23:3e:c6:a3:b1:ec:c7:a7:0f:a5:c3:ec:35:8d:
bf:38:5f:c9:9a:b0:f4:37:3d:07:67:bf:25:ab:23:
97:8e:d9:31:59:e6:4e:96:15:41:c2:08:cb:2f:97:
76:a7:69:64:5c:8a:3a:a9:7f:e9:ee:dd:4c:fd:54:
ab:d4:c9:04:35:d9:4e:97:cb:96:33:e4:f1:38:e7:
d8:3d:72:1c:ed:a2:d5:f3:01:f1:ba:9b:29:a2:d5:
33:a5:e2:95:af:e4:0a:ca:ed:6d:ea:6d:fe:c5:66:
a8:5a:3f:83:bf:a2:a2:68:3f:36:d4:ae:58:d5:9b:
a4:69:51:80:75:f5:db:9c:e5:50:b8:3b:f2:3b:38:
5c:26:7d:5d:21:d1:94:62:2a:de:03:b3:b6:72:88:
56:3d:c3:fd:27:46:72:81:92:90:90:e9:8f:46:36:
b9:c6:60:3e:8d:5d:da:59:2b:7a:04:51:06:3a:0a:
de:fe:0b:5d:58:c7:aa:87:bd:41:38:a8:8a:a4:2b:
54:b5:a9:e6:39:40:5f:b4:f3:dc:69:0c:2a:e0:05:
e4:76:12:b6:4e:71:27:33:e8:96:63:41:a3:29:95:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:A6:41:E0:AB:43:1A:74:24:5C:56:DB:21:A4:48:7C:E9:E2:B2
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:ee:ec:dc:ca:39:a1:07:ad:17:38:38:b7:7e:99:f4:e0:
62:7b:31:ef:68:b5:dc:87:21:f0:b3:a1:dc:d2:d5:d6:8a:8b:
ff:19:48:fb:71:ff:16:83:ce:5c:db:36:b8:a3:2d:19:d3:f4:
d4:7d:ed:40:2e:43:9c:93:8e:c9:98:f7:ab:4d:2d:f7:96:03:
c9:6e:0b:72:08:1c:b2:a1:b3:f3:ef:38:93:5e:06:4b:aa:25:
41:b3:32:55:6e:7a:54:f8:67:1a:4f:23:5d:1c:14:20:41:ba:
7c:75:95:0d:c2:90:cf:a4:67:4e:da:2c:41:44:65:d0:00:aa:
c7:ac:5b:ed:5e:6e:c1:84:04:c0:6f:10:cb:42:8a:c3:cf:f7:
63:0b:f6:ce:60:31:e8:d2:1f:98:6a:d4:fa:03:19:e9:ec:22:
20:59:e1:7d:7e:9b:a2:2c:db:f9:3b:dd:46:b0:78:55:07:8c:
b1:cf:e9:1d:3c:5c:df:69:c6:f4:e0:42:ee:d6:36:dc:cc:7e:
a9:8c:62:d5:79:5b:34:4b:ab:9c:21:8d:42:25:cd:29:68:2d:
e9:3d:47:7f:bf:a1:c8:44:13:67:c1:a0:2d:4a:70:3c:35:16:
d2:98:e1:e2:ac:f1:74:ef:53:11:3a:f3:72:57:1f:24:46:e0:
1f:87:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:10 2026 by rpki-client