Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: mxLVKyzx2db7/3nfNtDd7bBpRhlVxV7/p5hyghc4s3c=
Subject key identifier: 34:3E:3A:B9:5A:D6:B9:50:8D:47:7A:E7:F1:93:B1:77:24:D5:F1:32
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019F92487D28D75023C14CF7E28BC0641E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1708
Signing time: Fri 24 Jul 2026 04:00:51 +0000
Manifest this update: Fri 24 Jul 2026 04:00:51 +0000
Manifest next update: Sat 25 Jul 2026 04:00:51 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: GgKeZ2IQtxC9Hiry3FnOvuY3HgnpSUqRr8vYtG1GWJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:7d:28:d7:50:23:c1:4c:f7:e2:8b:c0:64:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jul 24 04:00:51 2026 GMT
Not After : Jul 25 04:00:51 2026 GMT
Subject: CN=343e3ab95ad6b9508d477ae7f193b17724d5f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:c9:4d:35:3c:4b:e4:96:d6:01:c2:e4:82:
91:b5:43:57:58:02:c5:8e:7d:24:3a:b8:68:83:23:
d2:f3:c2:c0:54:2f:79:8e:a0:0d:01:43:81:19:ce:
62:8e:7f:f3:a3:90:fb:40:0c:83:88:6d:3a:54:3a:
11:3b:31:be:b3:f8:ab:aa:a8:eb:26:d6:32:6a:9b:
63:17:78:d7:a1:9d:40:fe:b3:b9:dd:6d:95:05:4d:
85:f0:3b:dd:01:f4:66:a2:ce:8d:a8:3e:32:77:03:
38:db:87:e8:2c:24:9c:71:6b:67:59:b9:d0:94:fb:
e3:92:a8:2a:da:25:52:79:93:71:07:70:8a:42:76:
52:5b:ee:8c:6e:59:8f:03:07:24:06:d1:73:0b:8b:
8d:e0:45:ca:e6:05:87:f5:15:4d:1f:21:79:6f:ec:
83:22:5d:14:13:11:4c:f1:f6:46:cb:41:7a:a1:ce:
00:df:6f:b3:c7:5b:0c:6e:c2:3d:b0:3a:e6:21:a8:
e0:15:0c:4f:84:6d:04:a0:11:17:89:a3:88:e4:08:
b4:16:ba:44:f3:f2:aa:c5:fd:ce:43:08:ab:0a:2e:
f4:75:d7:e1:b7:35:19:6c:85:05:e2:4e:5f:43:df:
de:17:65:c9:83:0a:c8:24:6d:d5:77:c9:7e:2f:48:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:3A:B9:5A:D6:B9:50:8D:47:7A:E7:F1:93:B1:77:24:D5:F1:32
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e1:b5:1a:25:eb:4d:6e:70:66:97:21:55:71:d6:dd:9d:04:
74:b3:c5:53:a4:29:b1:f3:16:2d:83:a1:a8:d9:9f:be:8f:38:
e5:70:5e:bd:e0:26:0c:ca:03:43:8e:f8:e3:69:07:2d:60:05:
27:ce:88:21:34:39:cf:43:5c:03:48:66:47:ae:dc:9c:55:3d:
22:d5:d5:10:c6:67:e8:a6:ec:b6:94:31:8f:cf:48:33:c7:97:
32:49:c6:d2:fd:11:2f:6d:0f:1c:cd:8b:b0:37:4d:65:a6:fc:
f6:b3:97:61:52:d6:57:a8:64:e1:99:bd:21:66:3e:da:4c:2d:
de:48:d5:96:86:d3:40:c2:17:2f:c5:4f:68:9c:fa:9e:be:96:
94:3e:82:f8:4d:35:2e:b1:94:11:2d:4c:80:25:c5:43:5a:f2:
8b:84:a2:30:2f:91:20:35:2d:f7:51:d3:5e:45:0c:dc:8c:8f:
a7:17:fc:e9:f0:b8:41:5d:ef:70:bb:62:ca:da:40:a7:d7:b9:
6f:de:6f:8e:75:11:84:9f:30:ab:6f:40:52:a6:7a:37:d8:67:
dd:51:5d:eb:a7:f9:9b:e1:74:9c:d1:7c:52:9d:c0:2f:7f:92:
d5:f0:28:dd:c3:a7:75:21:8a:51:52:6f:2c:0e:5c:54:06:7a:
03:55:3c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSH0o11AjwUz34ovAZB6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjYwNzI0MDQwMDUxWhcNMjYwNzI1MDQwMDUxWjAzMTEwLwYDVQQD
EygzNDNlM2FiOTVhZDZiOTUwOGQ0NzdhZTdmMTkzYjE3NzI0ZDVmMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2PJTTU8S+SW1gHC5IKRtUNXWALF
jn0kOrhogyPS88LAVC95jqANAUOBGc5ijn/zo5D7QAyDiG06VDoROzG+s/irqqjr
JtYyaptjF3jXoZ1A/rO53W2VBU2F8DvdAfRmos6NqD4ydwM424foLCSccWtnWbnQ
lPvjkqgq2iVSeZNxB3CKQnZSW+6MblmPAwckBtFzC4uN4EXK5gWH9RVNHyF5b+yD
Il0UExFM8fZGy0F6oc4A32+zx1sMbsI9sDrmIajgFQxPhG0EoBEXiaOI5Ai0FrpE
8/Kqxf3OQwirCi70ddfhtzUZbIUF4k5fQ9/eF2XJgwrIJG3Vd8l+L0j9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+Orla1rlQjUd65/GTsXck1fEyMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+G1GiXr
TW5wZpchVXHW3Z0EdLPFU6QpsfMWLYOhqNmfvo845XBeveAmDMoDQ47442kHLWAF
J86IITQ5z0NcA0hmR67cnFU9ItXVEMZn6KbstpQxj89IM8eXMknG0v0RL20PHM2L
sDdNZab89rOXYVLWV6hk4Zm9IWY+2kwt3kjVlobTQMIXL8VPaJz6nr6WlD6C+E01
LrGUES1MgCXFQ1ryi4SiMC+RIDUt91HTXkUM3IyPpxf86fC4QV3vcLtiytpAp9e5
b95vjnURhJ8wq29AUqZ6N9hn3VFd66f5m+F0nNF8Up3AL3+S1fAo3cOndSGKUVJv
LA5cVAZ6A1U84g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:31 2026 by rpki-client