Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: n6BlNexQ6jDlF40k9iyHRKxQheHKhnGBmdJuhaaff9Q=
Subject key identifier: 8A:40:60:3F:9B:8D:A5:C4:F6:4A:82:B0:5B:B3:9F:E1:84:2E:1C:BF
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 019D2996EBEA010A78693471F77ABA7F9A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: eZ1vnil2R_lRaxzm1u2K8oueOEA.roa (hash: iEQw8uo18WbpEVqcP2/fu5Vr2CBuKtNokc7vp22mHpA=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: fJrksHqtrReST759YTP6ox1CZyTvAQYGuS9u6BzIwvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:eb:ea:01:0a:78:69:34:71:f7:7a:ba:7f:9a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=8a40603f9b8da5c4f64a82b05bb39fe1842e1cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:6a:dd:ee:6e:04:4a:b1:1b:63:b2:7f:e0:
98:4f:dd:2b:32:c0:01:89:5e:47:7d:13:b8:ec:0c:
3c:58:9f:fe:33:f4:6f:c7:b8:c7:2d:b2:1a:b2:39:
98:ec:04:73:3a:1a:3c:88:68:86:2e:07:4f:7d:87:
50:42:95:27:f4:5e:8a:53:ef:b9:e7:45:ea:91:ca:
e0:91:fa:10:44:70:ef:00:8c:fc:67:01:b1:c6:89:
f3:b3:25:88:67:b5:42:e4:62:3e:fe:55:44:54:4a:
53:00:39:46:a7:c0:5e:be:62:e4:7b:56:9c:6a:0c:
d3:74:54:f0:46:76:0e:7b:33:3a:77:74:f4:81:ce:
aa:16:d2:0a:da:73:11:3f:e2:3b:4b:d6:66:b3:08:
17:6b:60:fe:f4:31:70:ca:81:fc:bf:33:d4:0f:18:
3c:67:94:85:3e:fa:6f:26:11:bf:94:0b:6d:50:68:
d0:cc:cc:31:06:db:03:f4:e8:10:aa:8a:dd:a6:c2:
00:67:35:34:8b:d9:30:74:d3:c0:ca:ef:b2:0c:88:
94:45:4f:92:0b:4d:d8:64:2b:2b:e4:e5:c5:34:91:
94:55:c9:e7:c0:90:13:30:3d:f1:ae:b7:af:d4:42:
ca:ca:6e:47:e5:af:eb:2f:09:38:56:7b:f1:0a:fc:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:60:3F:9B:8D:A5:C4:F6:4A:82:B0:5B:B3:9F:E1:84:2E:1C:BF
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:1d:d9:d5:46:0b:7a:c2:1f:eb:ae:96:8a:0d:0d:59:e5:
1a:94:ed:50:7f:28:d9:d1:a0:a8:20:73:8c:13:89:45:7c:28:
5f:8b:06:8d:0c:6b:fc:32:03:f5:b0:af:42:23:05:70:27:4c:
65:dc:48:d0:20:eb:7f:ed:ab:b5:97:e1:55:16:ab:94:53:9a:
63:f3:ed:46:89:e3:ab:23:a5:73:57:6b:57:c6:37:71:87:0d:
bf:a9:7e:e8:92:57:51:99:b4:fd:1b:08:a9:28:91:e1:28:42:
e1:19:c4:ad:99:18:f7:09:2b:e7:b3:f9:84:dd:0a:e8:7e:8e:
87:38:e8:f6:93:3c:9b:0a:d7:ab:44:6b:ff:1a:8e:69:16:20:
7c:cd:b0:7c:e8:0c:e9:e2:0d:3a:fe:6f:2e:41:f6:b2:be:a0:
73:7f:38:3c:73:4a:42:b5:7f:c7:13:53:c6:35:4d:71:ba:e6:
38:fe:51:c5:94:2c:27:27:5f:25:43:e2:89:7d:2b:d3:6d:23:
83:94:e6:ee:2a:ac:03:58:fb:6c:f9:c0:50:32:a6:3b:81:10:
c2:6a:0c:b2:a3:db:b2:ac:0e:08:5b:05:46:f9:b0:73:a1:4e:
eb:64:c9:00:5f:98:1d:e2:5f:80:62:31:e2:72:78:aa:f7:6d:
5d:84:89:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pluvqAQp4aTRx93q6f5pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjRiNDAxZmZlYWMzZDVkYjQyZjgyOGNhYjRmMTYzYzA2
NGQ2ZDUwHhcNMjYwMzI2MTAwMDQ5WhcNMjYwMzI3MTAwMDQ5WjAzMTEwLwYDVQQD
Eyg4YTQwNjAzZjliOGRhNWM0ZjY0YTgyYjA1YmIzOWZlMTg0MmUxY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtARq3e5uBEqxG2Oyf+CYT90rMsAB
iV5HfRO47Aw8WJ/+M/Rvx7jHLbIasjmY7ARzOho8iGiGLgdPfYdQQpUn9F6KU++5
50XqkcrgkfoQRHDvAIz8ZwGxxonzsyWIZ7VC5GI+/lVEVEpTADlGp8BevmLke1ac
agzTdFTwRnYOezM6d3T0gc6qFtIK2nMRP+I7S9ZmswgXa2D+9DFwyoH8vzPUDxg8
Z5SFPvpvJhG/lAttUGjQzMwxBtsD9OgQqordpsIAZzU0i9kwdNPAyu+yDIiURU+S
C03YZCsr5OXFNJGUVcnnwJATMD3xrrev1ELKym5H5a/rLwk4VnvxCvyPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpAYD+bjaXE9kqCsFuzn+GELhy/MB8GA1UdIwQY
MBaAFIcktAH/6sPV20L4KMq08WPAZNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEt
MDExMTAzODkzNGQzLzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEtMDExMTAzODkzNGQz
LzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQkd2dVG
C3rCH+uulooNDVnlGpTtUH8o2dGgqCBzjBOJRXwoX4sGjQxr/DID9bCvQiMFcCdM
ZdxI0CDrf+2rtZfhVRarlFOaY/PtRonjqyOlc1drV8Y3cYcNv6l+6JJXUZm0/RsI
qSiR4ShC4RnErZkY9wkr57P5hN0K6H6Ohzjo9pM8mwrXq0Rr/xqOaRYgfM2wfOgM
6eINOv5vLkH2sr6gc384PHNKQrV/xxNTxjVNcbrmOP5RxZQsJydfJUPiiX0r020j
g5Tm7iqsA1j7bPnAUDKmO4EQwmoMsqPbsqwOCFsFRvmwc6FO62TJAF+YHeJfgGIx
4nJ4qvdtXYSJwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:12 2026 by rpki-client