
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: lPWOMCIj4zHQN213tlXn5RLi7iGPAenuwgUrqFpijQw=
Subject key identifier: 6D:23:39:61:44:96:BA:1E:4A:B2:C2:8F:5F:D1:91:86:B8:74:9D:BF
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019E1F11747F04E6E34E3D290D6899DB9AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 07D2
Signing time: Wed 13 May 2026 02:01:38 +0000
Manifest this update: Wed 13 May 2026 02:01:38 +0000
Manifest next update: Thu 14 May 2026 02:01:38 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: qabHFkwAGiT1ZL2xnGx/35JK4Voym35kYrU9HSn0sys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:74:7f:04:e6:e3:4e:3d:29:0d:68:99:db:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: May 13 02:01:38 2026 GMT
Not After : May 14 02:01:38 2026 GMT
Subject: CN=6d2339614496ba1e4ab2c28f5fd19186b8749dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:c4:c3:a0:4c:17:cb:65:09:69:2a:eb:82:
59:61:c4:09:f7:aa:a2:cb:18:27:d8:07:b2:f4:35:
c1:02:64:1f:50:e2:93:a8:d6:6b:82:6b:07:5d:bb:
f0:bc:c4:8b:6f:e1:e4:42:e2:2a:65:8e:3e:33:fd:
2a:ff:85:fe:16:e3:d4:f6:ed:62:23:ef:24:31:39:
b0:23:98:d2:74:3c:7b:3d:40:82:6b:62:78:a8:1c:
6c:53:db:ea:bd:e5:6e:c6:76:38:fb:3e:66:3f:71:
da:65:96:32:1d:5f:c1:90:d0:7e:34:a5:50:8b:81:
3a:70:ee:83:28:b0:fe:80:c5:02:a8:8c:ec:6b:55:
3c:b6:1d:f9:f1:95:cb:4d:27:25:b6:1b:d6:d4:2f:
45:86:46:8e:34:32:93:81:ba:e9:8b:77:55:06:4c:
14:7b:ed:c9:a9:69:14:1d:b2:28:02:1f:35:2a:20:
42:55:eb:e7:4e:7b:dc:8e:f9:92:7e:c1:84:be:5c:
2b:25:8a:dd:96:4a:b7:f1:d2:7f:4e:61:d4:bc:9b:
56:68:a6:fa:8b:e0:69:37:c8:ec:63:0c:38:ee:89:
eb:ab:08:4c:a8:f6:e6:77:07:71:88:40:19:e0:d0:
04:9b:70:f5:07:14:6d:fc:b0:f7:01:25:22:3e:13:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:23:39:61:44:96:BA:1E:4A:B2:C2:8F:5F:D1:91:86:B8:74:9D:BF
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c8:51:6e:1a:8d:fd:27:f5:f9:b1:0d:f5:17:25:b6:83:af:
59:32:57:3a:f6:7e:93:79:03:3a:ca:af:36:dc:65:2b:5c:d0:
2b:5a:4a:6d:5e:d4:8c:b3:e9:92:20:2f:bb:b3:ea:5d:45:c7:
b7:ef:28:9c:14:18:4d:a8:ac:bc:bf:d3:1b:9f:52:ce:f1:7d:
f7:3c:98:fa:e1:30:f5:0c:70:90:53:2c:bb:7f:30:46:a7:54:
c0:93:cb:50:b2:81:a3:a0:17:34:f3:f3:e0:fc:23:52:4c:3c:
78:bb:4a:68:e0:6d:1e:d6:2b:4f:be:aa:d6:cd:74:30:70:7b:
dd:cf:44:33:58:fb:b4:b9:df:28:c8:d4:f4:27:a4:6c:b7:08:
8f:bf:d1:e8:3c:ec:86:21:48:76:71:4b:cf:93:34:49:ed:b1:
07:72:49:cd:aa:26:32:27:be:8b:04:6c:c1:11:3e:00:7f:7c:
dc:84:be:7b:e5:28:2e:1a:46:c9:05:eb:29:79:cd:a6:1e:2c:
a3:f4:5e:2f:cf:01:14:e0:2b:d2:41:d2:15:47:ec:72:d7:85:
2f:18:71:c2:e7:db:a2:60:59:cf:52:3c:5c:96:86:be:04:dc:
6c:dc:1c:46:cf:a8:db:0b:41:cc:ee:c5:8b:1a:59:9e:dc:d6:
0a:f0:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:04 2026 by rpki-client