Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: E5sv21H8vpMAKeRCrJIzsJu6tPKBO0EKQlvjtl/lYGs=
Subject key identifier: 55:2B:FB:2A:A6:45:EA:26:C4:E5:FC:BD:7B:90:4B:44:A8:F2:28:5B
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 019E1EDA098DAC2D2A0B5DBFAFE04015766F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 04BB
Signing time: Wed 13 May 2026 01:01:06 +0000
Manifest this update: Wed 13 May 2026 01:01:06 +0000
Manifest next update: Thu 14 May 2026 01:01:06 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: s5KERugLAddWHB/poRgOBACtNcq+awjd/OKCACXTTQg=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:09:8d:ac:2d:2a:0b:5d:bf:af:e0:40:15:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: May 13 01:01:06 2026 GMT
Not After : May 14 01:01:06 2026 GMT
Subject: CN=552bfb2aa645ea26c4e5fcbd7b904b44a8f2285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:77:cb:9f:ab:86:41:7a:fb:7f:2f:59:d4:
01:99:64:a9:e8:22:39:67:e1:a5:42:61:cf:d3:e8:
bf:75:93:25:4f:51:7b:80:a8:78:38:6b:97:db:a2:
04:98:8d:17:4d:df:33:12:b4:1d:59:ad:3f:52:a1:
cc:ea:15:db:aa:4f:d0:5e:2b:41:4a:15:b7:9c:fe:
e5:9b:bc:4b:39:37:1f:18:1d:5c:ec:b0:8b:2f:cc:
7e:1d:59:c4:15:c4:82:7f:a7:fd:16:2d:1d:5c:f9:
9c:a9:87:59:44:ec:c9:2f:62:61:05:fe:07:e0:5c:
28:eb:f6:6a:bb:15:16:dc:c9:18:2b:46:4f:1f:f5:
48:fe:96:b6:ab:37:b2:5e:32:2a:67:aa:0a:cf:d3:
d1:bb:14:42:6a:07:8b:92:12:fd:65:40:6c:dc:23:
e0:24:89:0b:68:e8:c9:4b:04:02:3f:82:5f:27:04:
b6:21:30:c9:49:98:88:1e:88:4b:99:79:d7:ab:22:
e2:32:26:cb:ee:eb:47:dc:50:aa:53:63:33:02:68:
50:e3:8d:5f:26:69:58:d7:79:e1:0f:1a:35:a2:ca:
a8:44:ae:d6:dc:df:d8:91:b1:e1:75:31:3b:64:7c:
85:2a:02:3d:62:6e:9b:80:02:4d:c9:01:23:dc:52:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:FB:2A:A6:45:EA:26:C4:E5:FC:BD:7B:90:4B:44:A8:F2:28:5B
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:f3:5f:13:6a:be:18:ec:14:81:ea:c3:0a:24:68:71:d8:
7e:98:96:ef:ef:8a:70:12:d0:64:8a:8a:f1:80:ea:05:00:1e:
12:52:23:3e:a1:18:36:cd:46:68:9d:aa:5d:f5:93:4a:83:52:
84:d2:bf:05:68:e1:57:98:96:dd:6c:e3:41:2f:c0:f2:ee:f9:
32:e1:f4:11:91:64:65:54:96:a6:28:0d:b4:16:f0:c0:37:7c:
f6:5b:e8:98:bf:29:3c:32:68:36:23:d3:cc:1c:4a:0c:ae:f5:
23:ca:5c:f2:c8:d8:6b:38:c7:4c:6d:a3:6e:93:3b:e3:f5:48:
4c:b7:ea:57:f4:44:cc:bd:9e:ab:90:ec:95:9d:90:1b:12:4f:
65:0f:96:b0:4a:9b:e3:61:60:94:25:2e:13:d4:68:ee:d5:b9:
38:b0:0f:60:f3:a4:d6:fa:4f:7e:6d:3f:8e:62:5e:02:09:e2:
e9:c1:5b:11:77:b9:99:cc:7b:3d:4a:46:32:b1:6b:3b:d8:20:
c2:56:dd:1f:94:2e:9d:af:3b:59:09:5d:6f:5a:83:6e:24:4c:
72:06:92:40:11:5a:a2:1e:8e:9b:41:84:d5:68:8c:c3:e4:01:
f1:bd:43:ca:43:0e:75:f2:dd:8a:ac:ea:28:15:ce:f2:c7:09:
98:c1:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:57 2026 by rpki-client