Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: LMlFgYXKBMbCXgkikpJ2ccioJEg2aYryAZD7/IKHfrc=
Subject key identifier: 23:F1:4F:72:DF:CB:E2:53:11:FD:9B:3E:93:C3:72:3E:AD:69:A1:B1
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 019D27A92D6F6211AE1CAA54BA984C8C7AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 043B
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: oQ8T+VM/U09o3UVkm33iCHl8DKe+7dNEdf2MrN5AjV8=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2d:6f:62:11:ae:1c:aa:54:ba:98:4c:8c:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=23f14f72dfcbe25311fd9b3e93c3723ead69a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:d0:a2:99:db:79:5e:29:10:42:f9:a1:36:
21:b5:97:fd:ff:de:75:9e:f0:f4:5f:ed:ec:15:34:
66:5c:ca:12:d8:6a:e0:ef:68:55:7a:f7:49:a7:5e:
0b:92:cf:b5:a0:95:d4:59:bc:80:24:c0:eb:7e:2d:
b7:82:0b:53:70:e8:a9:48:b1:61:6f:a1:31:ee:a4:
74:23:0b:fa:32:2b:03:1e:5e:ea:c0:ae:d7:94:3d:
df:72:5f:20:a6:64:90:49:bd:90:0f:ad:87:4f:1b:
33:dd:01:27:6b:3e:91:16:2f:47:b1:63:de:b7:d8:
61:49:bc:0d:1b:2d:05:42:0d:8e:51:f9:2f:26:1f:
92:cd:c2:68:57:45:ec:0e:ff:f5:36:f3:74:14:b0:
1f:7a:b5:16:e3:75:f4:b0:da:af:53:ba:a6:54:a0:
b8:83:21:19:1b:32:2f:fb:94:44:fa:c5:6e:9f:8e:
fb:db:8c:5e:74:d3:c3:f5:86:83:b6:1f:c0:28:07:
a4:23:41:a9:78:0b:53:b0:22:ff:38:52:8d:7f:16:
85:2d:da:f8:6a:c2:d0:08:99:2a:b4:ac:48:64:e3:
9c:49:f4:dc:a6:20:d1:dd:f7:45:92:90:19:55:50:
d5:2d:f0:eb:e2:c4:c0:e5:46:e8:69:8c:0d:40:bd:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:4F:72:DF:CB:E2:53:11:FD:9B:3E:93:C3:72:3E:AD:69:A1:B1
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:6f:32:a9:fe:8a:83:56:e6:ca:e0:40:13:93:76:c2:bc:
5b:9f:64:7c:6e:48:1d:5a:fa:ae:4c:62:ab:11:95:f8:f5:6d:
96:68:5a:97:5a:e1:8b:bd:9f:17:e7:a3:50:3b:ee:24:96:12:
91:5d:a1:96:88:d3:db:c5:fd:ac:8b:ac:01:56:1a:a4:d8:88:
96:52:de:1e:43:67:94:a5:9e:7b:1f:4f:a3:28:af:4a:20:47:
fb:e5:7e:50:6d:a8:2f:03:68:82:85:34:a6:7d:5d:fb:52:86:
16:44:15:1e:17:d1:50:f9:db:81:63:b4:00:d7:c6:dd:03:37:
ae:1e:82:f2:62:93:63:30:f0:13:16:92:ca:c1:ef:0a:33:03:
34:6c:8b:31:8a:f9:9d:f8:33:38:83:eb:81:18:fa:ef:27:82:
0e:2a:d5:ee:e0:89:91:7b:ac:8b:71:77:43:ec:64:cb:fd:84:
3c:9d:f5:95:76:76:8a:2a:02:6d:be:85:67:ac:10:6a:dd:89:
83:02:22:5c:c4:86:ea:fa:54:98:44:9d:eb:96:a4:8d:a7:c4:
22:48:58:4e:64:bb:51:8b:e3:24:f8:ab:df:6e:98:92:ce:19:
77:0e:40:57:63:33:af:9c:61:47:26:ea:20:26:14:aa:03:b9:
7b:3f:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:03 2026 by rpki-client