Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: bRrWV04NHdOR08iHfQKfFtGwHngTXNS8jEr39x0mras=
Subject key identifier: E8:42:22:DF:67:1D:C7:3B:6B:94:7F:B1:A7:BB:C3:B6:0E:FB:A2:3A
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 01A0F78DA320FA49A887C58BE12ED495721A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 17C1
Signing time: Thu 01 Oct 2026 13:00:49 +0000
Manifest this update: Thu 01 Oct 2026 13:00:49 +0000
Manifest next update: Fri 02 Oct 2026 13:00:49 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: o1BafO+PkX6chLNaMDuomM6wvsW8EMN8bc/q3H/AUHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8d:a3:20:fa:49:a8:87:c5:8b:e1:2e:d4:95:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Oct 1 13:00:49 2026 GMT
Not After : Oct 2 13:00:49 2026 GMT
Subject: CN=e84222df671dc73b6b947fb1a7bbc3b60efba23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:6c:a8:0c:0a:2c:42:f5:22:42:ae:e6:84:
0b:56:53:0f:01:e5:e9:ca:d6:7d:9d:b2:c6:c4:e4:
db:8e:f7:2a:f7:d9:2d:84:27:6b:47:0b:f2:b1:a1:
9a:00:b2:78:94:14:16:4c:21:ec:2a:4d:d4:18:a8:
6c:40:1b:d2:f9:45:cf:ad:43:35:81:22:9a:b7:d8:
36:aa:94:62:58:42:ed:34:5c:78:0c:52:00:59:27:
33:e8:68:5d:e0:f4:1f:98:28:2a:66:65:64:c7:70:
c0:c4:ce:b1:01:06:c2:fa:59:5b:eb:66:c2:0d:f1:
76:c4:64:4c:0d:c6:b9:0a:40:91:4d:eb:21:e0:b0:
3b:42:ea:fe:09:84:2c:95:b8:bf:12:92:39:e2:fa:
61:19:29:51:c4:5c:42:80:c4:27:c6:d8:5b:65:22:
0f:6b:61:1b:de:50:bd:9c:0a:c3:4a:73:0e:53:38:
c0:7e:52:1a:8a:4d:9c:01:e1:b7:4e:64:a0:be:ca:
45:9d:18:de:dc:7b:15:77:62:98:25:2f:2d:8d:e3:
5f:8b:01:87:40:92:b8:05:66:91:b5:3b:da:55:c4:
fd:bd:86:99:3a:6d:ba:e9:6d:5e:05:fa:a1:72:66:
c3:df:8d:a6:5a:41:46:fe:18:ac:6c:34:4b:b1:08:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:22:DF:67:1D:C7:3B:6B:94:7F:B1:A7:BB:C3:B6:0E:FB:A2:3A
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:53:56:0f:3e:b4:db:61:9f:da:df:6e:00:c2:a2:67:b1:
78:b3:3d:9d:b7:a0:73:92:27:63:52:25:88:8e:8b:bb:dc:92:
e6:e8:b2:9c:ab:88:2d:91:30:6e:96:0a:31:cb:09:5f:3c:4a:
9c:7f:b5:a5:75:3d:07:86:44:0c:70:05:f9:df:cd:a8:e1:88:
c6:be:e7:bd:26:92:8b:68:8f:50:c2:f8:d2:6f:d0:7b:ab:5f:
74:38:48:f4:da:72:05:92:1b:e3:f1:3c:2b:2a:ce:0c:7c:02:
fa:5c:d4:28:dc:3c:a4:58:df:e7:6e:9c:e9:f0:d6:ec:1c:75:
04:92:ce:cc:ef:95:03:86:73:ad:c3:31:a8:15:53:7f:74:bd:
31:6e:51:ff:39:1e:7d:18:e1:a2:fd:51:42:fe:41:5f:7b:2f:
38:2a:1f:e7:33:6a:05:42:6f:dc:c0:be:40:dd:d4:c8:0d:cc:
1b:b8:8b:ed:d7:4f:43:60:68:8f:d7:67:46:ea:c8:c6:5b:4e:
c9:b7:c7:c2:84:4d:e6:5c:78:22:01:c5:a5:e6:a0:0b:1c:5f:
62:c4:ab:c4:07:38:e1:af:59:31:dd:64:8c:6f:11:ed:a4:07:
e2:0f:7f:5e:02:0d:2f:8b:9f:34:0b:65:77:d9:11:bd:4a:da:
67:ec:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:04:16 2026 by rpki-client