Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File: HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier: rPpZblZobetlaytHFt9NVgnmHpo4LhbZPl030mBaptc=
Subject key identifier: 39:D3:2A:42:2A:4B:B0:9F:1A:23:7D:DF:D4:49:3E:A5:98:40:46:58
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 01A1D9EEEE5D866E9B87BBB1F37B176DA50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number: 1AFE
Signing time: Sat 14 Nov 2026 12:01:16 +0000
Manifest this update: Sat 14 Nov 2026 12:01:16 +0000
Manifest next update: Sun 15 Nov 2026 12:01:16 +0000
Files and hashes: 1: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: Whp03sxaEr/v+Yzz+e7Nne8lX9B4Ur1bgJ2u8zHgaZ8=)
2: LegPI0LcRAcrLBTlGUY6DuF5bPU.roa (hash: NBAPRKnIYd+TgJ5/R1gZLE8ial4CZdJAp6oEz5nJrso=)
3: MwqpyesVYA3SiDQe_gYsUNaHgho.roa (hash: DTL27ykAsxNz3ciYm9p1pXPqk6KXZx1AnSSON092aSA=)
4: dZcFXy59OBgCvb8-LnAFu481H80.roa (hash: S71mkWocgYTtJLOJGQFJaSGFLZadtvbJJdWNegtQAMs=)
5: g6HuTRYxkPIeOK1wvMsYT53swsg.roa (hash: vbQAr04vlCF8WtVYcFJOkk1ncKZozWuxqhYPaVdI02I=)
6: nffOhSPbCiWPAgtugzjWRyuC30E.roa (hash: ozFheVA8KcSrBcCrb3RelsPEg0hh8qk70m83xq3pSAo=)
7: sUCFmwpJav81ZSRKsG-SSJaCaxg.roa (hash: 9KxlfWrLv7YnnCH1Vf26DGRif8A8TjjKojTT9mB5Eaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:ee:5d:86:6e:9b:87:bb:b1:f3:7b:17:6d:a5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Nov 14 12:01:16 2026 GMT
Not After : Nov 15 12:01:16 2026 GMT
Subject: CN=39d32a422a4bb09f1a237ddfd4493ea598404658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:75:12:0d:bb:92:94:c3:52:2c:1c:4a:9e:
ba:f7:99:07:32:37:e8:38:24:7f:b9:eb:34:3b:30:
4e:13:c2:e1:9e:71:19:b3:c3:cd:2b:9e:35:23:9d:
a8:2c:fb:2f:1e:e6:bb:a2:01:0b:06:20:35:21:bf:
8f:4d:af:2c:08:5d:6e:2d:3f:23:64:11:f5:ed:69:
ce:4e:ea:e1:f1:a8:ac:38:38:5d:8c:0e:f3:41:12:
97:7b:d6:27:00:b7:cf:f1:89:2b:d0:31:6b:a2:70:
04:fb:d0:7c:e7:fe:a9:ac:bf:c0:ac:ce:3f:07:88:
01:68:e1:1a:51:95:3a:4e:78:e7:f2:a3:14:7c:9c:
b4:b5:96:af:ff:ba:3a:f4:b7:a9:02:21:5a:7f:0c:
a2:27:cb:bb:b1:cc:3b:dd:31:19:73:3a:97:13:42:
c8:cd:a0:e6:1c:1c:91:6a:d3:59:44:dc:13:aa:da:
93:65:41:ce:c8:ad:d0:47:af:ce:65:21:eb:4f:39:
13:c8:c7:6b:65:b3:b6:db:34:71:0a:c8:ae:56:4d:
e6:1b:de:12:e8:59:90:a8:66:21:42:b5:d2:99:dc:
ee:09:74:49:26:59:f0:bf:8f:04:86:f6:03:ce:ec:
74:85:9d:e9:b1:12:ea:62:b8:d9:f8:4e:4e:2a:c2:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:2A:42:2A:4B:B0:9F:1A:23:7D:DF:D4:49:3E:A5:98:40:46:58
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:a6:4d:ad:68:6e:97:d4:5b:fa:66:d7:dc:f6:c1:e9:e7:
9a:b2:af:e2:30:21:91:86:f1:c7:89:ff:99:58:b8:7c:3b:e2:
58:e3:8f:49:24:8b:b5:f3:52:86:9c:5f:93:cf:54:81:44:da:
bd:c5:be:dc:a1:86:57:ca:20:e6:0a:67:8e:83:27:26:15:ce:
5e:5c:3f:54:54:ff:16:6d:9f:22:fc:24:14:93:79:0f:79:1c:
a0:8c:8c:7e:04:f4:d7:43:59:bb:95:17:2b:f1:bb:2c:ec:6b:
26:6f:b6:8b:b3:5f:6c:c9:65:e4:e1:2b:cc:6d:d2:dc:a5:4a:
2d:f7:3b:e3:5f:e2:de:ca:db:cd:11:e8:1f:f1:fa:08:da:ff:
48:12:fc:7d:4e:49:4d:57:27:f7:f0:af:58:a2:15:fa:e8:55:
47:e1:3a:ef:4a:9c:5e:fb:f6:25:18:42:9b:71:1e:41:bd:56:
2c:a5:c9:63:91:e6:10:aa:48:63:09:be:5b:66:da:e4:99:7d:
f9:6a:9b:e5:71:d5:b3:a6:1a:bb:17:ad:98:40:72:5c:62:f6:
59:d1:fc:11:93:8d:92:f9:71:e0:23:0c:42:f7:03:bf:fc:c6:
12:b8:03:2e:0d:9f:86:83:9a:c2:41:df:65:7e:6c:e3:37:d7:
8c:ea:b0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZ7u5dhm6bh7ux83sXbaUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjYxMTE0MTIwMTE2WhcNMjYxMTE1MTIwMTE2WjAzMTEwLwYDVQQD
EygzOWQzMmE0MjJhNGJiMDlmMWEyMzdkZGZkNDQ5M2VhNTk4NDA0NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowB1Eg27kpTDUiwcSp6695kHMjfo
OCR/ues0OzBOE8LhnnEZs8PNK541I52oLPsvHua7ogELBiA1Ib+PTa8sCF1uLT8j
ZBH17WnOTurh8aisODhdjA7zQRKXe9YnALfP8Ykr0DFronAE+9B85/6prL/ArM4/
B4gBaOEaUZU6Tnjn8qMUfJy0tZav/7o69LepAiFafwyiJ8u7scw73TEZczqXE0LI
zaDmHByRatNZRNwTqtqTZUHOyK3QR6/OZSHrTzkTyMdrZbO22zRxCsiuVk3mG94S
6FmQqGYhQrXSmdzuCXRJJlnwv48EhvYDzux0hZ3psRLqYrjZ+E5OKsKtNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnTKkIqS7CfGiN939RJPqWYQEZYMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGCmTa1o
bpfUW/pm19z2wennmrKv4jAhkYbxx4n/mVi4fDviWOOPSSSLtfNShpxfk89UgUTa
vcW+3KGGV8og5gpnjoMnJhXOXlw/VFT/Fm2fIvwkFJN5D3kcoIyMfgT010NZu5UX
K/G7LOxrJm+2i7NfbMll5OErzG3S3KVKLfc741/i3srbzRHoH/H6CNr/SBL8fU5J
TVcn9/CvWKIV+uhVR+E670qcXvv2JRhCm3EeQb1WLKXJY5HmEKpIYwm+W2ba5Jl9
+Wqb5XHVs6YauxetmEByXGL2WdH8EZONkvlx4CMMQvcDv/zGErgDLg2fhoOawkHf
ZX5s4zfXjOqwmA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:52 2026 by rpki-client