Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: ycYFdXDoo4td1byf+HAFa4rtGLVdBc/N2KVjl1W7P5A=
Subject key identifier: 85:71:5C:60:AA:9B:8C:37:E5:27:7F:F7:B2:51:6F:62:BE:C8:3E:CC
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 019D265FC7C262722F8111A31A65B7B47C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: 0416
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: Pb0h0H+yS2SaKdh5aDlD9mBcGvrki5qW1wSFymn1cTY=)
2: wwU1S55C4yLYaQjdeeCtJMW97Ds.roa (hash: jlSPnAdZGybw8CZHpy8KeBi6D61DmXXCG5VqfHvBTME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c7:c2:62:72:2f:81:11:a3:1a:65:b7:b4:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=85715c60aa9b8c37e5277ff7b2516f62bec83ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:9a:37:3c:5b:c3:d9:58:bd:7a:07:25:0b:
c0:69:b1:d5:03:5c:59:17:fd:74:b1:95:f4:78:7f:
82:ee:e6:61:c7:2e:2b:59:e4:fc:8c:44:cb:75:a3:
6d:00:46:34:53:2c:14:80:92:36:fd:61:44:0d:7c:
8f:9e:f0:df:23:1e:97:63:a7:96:84:01:ac:f1:35:
70:1c:99:f0:b5:a8:5a:96:bd:7b:a5:ea:e3:3b:cb:
cc:98:b7:a7:93:e0:fb:7e:c9:0e:00:55:b6:e6:16:
37:28:2e:1d:4e:91:26:8f:ff:38:e3:f3:d0:d5:74:
ef:97:8b:c4:4b:45:5f:bd:d5:f2:a9:3a:c1:13:f7:
bf:ad:73:46:47:3e:69:69:f0:79:66:a2:b7:3f:7f:
74:a8:5a:fb:a8:78:42:a0:79:fd:76:3e:30:40:bc:
ac:66:99:a6:c3:7a:9e:3d:6c:55:b8:18:66:14:7b:
a2:4c:66:0a:27:97:40:d8:01:cd:f7:5a:22:f3:61:
f0:5e:64:49:6d:e6:b0:1c:0d:cc:78:88:3c:38:d7:
4c:66:f8:9a:ff:1c:81:ba:19:01:57:bc:22:b9:ac:
ec:79:f7:41:47:0e:18:cb:d6:aa:0b:15:95:21:9d:
bf:f1:53:9d:ad:a0:64:56:54:e6:d7:dc:92:ec:3f:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:5C:60:AA:9B:8C:37:E5:27:7F:F7:B2:51:6F:62:BE:C8:3E:CC
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:ef:a7:a7:9b:ed:39:9c:c4:a8:36:c5:14:30:82:d5:21:
ba:c1:af:8a:3b:af:e0:ec:58:43:61:59:d9:ab:86:27:ec:e8:
20:c5:3a:a1:0e:f7:4e:d9:1c:b9:33:e6:46:75:64:c1:0b:94:
d1:16:83:63:1c:34:09:f4:40:43:0f:b2:66:1a:55:c6:f3:74:
80:c0:3a:dc:2b:08:b6:ae:b0:f6:83:52:68:83:49:89:a0:a9:
d5:d8:3f:bf:7a:a9:83:8b:8e:f6:d6:96:f2:06:86:49:3e:b4:
db:09:50:88:45:ba:ed:f2:cb:d5:6a:b8:b6:e4:72:f3:79:44:
da:9d:5c:f9:ee:35:8c:1b:d0:f6:d7:3a:3d:81:f2:5d:ae:37:
28:c0:f4:c9:9b:75:7c:fd:5c:73:64:c4:eb:6c:b4:f1:b8:f8:
d9:fe:0a:94:51:0c:c9:75:50:ed:18:56:a4:b9:d0:0b:eb:58:
20:25:f5:c3:47:a0:62:44:ed:0b:40:66:51:42:bc:a0:d7:35:
5d:89:b7:b0:ee:e5:a6:8f:57:2d:8f:e2:6d:50:48:12:3e:7d:
e7:44:f7:28:8a:64:c7:cf:ce:05:bc:49:e7:e1:95:75:98:6d:
bf:cc:9c:12:84:72:0b:0b:6e:66:9d:64:d3:5d:1c:8d:98:ce:
40:27:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:21 2026 by rpki-client