Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: bxJSVnIjtwZ9auLXt+7E8Vismi6uWBCC/509di4kZGw=
Subject key identifier: 92:A9:0C:88:3F:22:95:F2:60:4C:7E:61:FA:B9:FE:E0:06:2D:F6:CD
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01A0D9F1B992E4D8EC2A50B8205328ABC2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 0625
Signing time: Fri 25 Sep 2026 19:01:32 +0000
Manifest this update: Fri 25 Sep 2026 19:01:32 +0000
Manifest next update: Sat 26 Sep 2026 19:01:32 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: Vd5ayrRKjuTggMQh5p6g8KHjr8AyFJgAbShfug9nFCU=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b9:92:e4:d8:ec:2a:50:b8:20:53:28:ab:c2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Sep 25 19:01:32 2026 GMT
Not After : Sep 26 19:01:32 2026 GMT
Subject: CN=92a90c883f2295f2604c7e61fab9fee0062df6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:b5:3b:29:89:d8:00:84:ae:f4:74:60:36:
02:76:48:5c:60:59:d9:64:a5:7c:af:b1:08:c8:b6:
ab:da:1b:f4:5d:14:e7:fd:43:47:04:18:ae:f7:4e:
2a:b5:13:19:a5:d5:23:04:bc:82:1f:d7:74:48:f8:
ab:8b:60:da:0d:f9:9a:8c:b8:5d:fa:fc:b0:c0:6c:
7c:55:6e:24:13:f1:b7:cd:91:e9:c9:6b:7e:45:69:
e6:e3:69:98:b3:06:21:59:e7:7f:40:9d:64:0a:ff:
1a:da:c9:8d:ab:a0:90:5f:7f:36:3f:aa:62:74:8d:
ae:26:dc:4b:e4:7f:c4:2f:0e:98:5a:28:f9:50:e3:
f1:3d:98:32:b4:e6:a9:fe:2d:00:cf:51:e8:c0:26:
b3:86:a7:78:c7:3d:85:4a:e4:1b:64:58:58:5e:f9:
dd:5f:cc:d6:29:47:e9:7e:00:c5:fa:2e:3b:c2:ad:
98:06:b9:5f:79:17:1f:28:1f:a9:5b:40:83:81:7f:
76:71:79:01:d4:ed:5c:bb:cf:c8:b7:5b:86:ea:15:
b0:d5:45:d5:39:d2:f8:3b:11:84:72:fd:fe:a1:01:
ca:ef:dd:44:5d:f0:73:8c:7c:3d:99:28:c2:9b:37:
dc:ee:5f:51:58:ee:d3:a4:6a:33:9a:1c:f0:f9:ca:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:0C:88:3F:22:95:F2:60:4C:7E:61:FA:B9:FE:E0:06:2D:F6:CD
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:12:ba:97:9e:eb:9b:17:7b:d0:1d:4b:65:12:21:02:8c:
83:06:6d:5f:65:b8:4f:41:31:64:d5:d0:f2:7e:9e:0a:23:3a:
01:f7:f7:4b:8c:b1:d9:94:58:fc:52:fd:94:24:a4:61:7a:7a:
b5:31:7d:49:d4:84:fd:31:c0:ee:35:59:6b:66:7d:6a:b5:83:
69:f1:8c:5a:9e:0a:06:3d:40:3a:a2:fc:ce:9c:5c:f0:54:7b:
1f:b3:a3:a7:0c:08:d8:38:27:27:3a:d5:e5:21:62:ca:c7:a1:
91:37:f5:f1:f4:11:4b:ac:a3:c3:5e:e0:12:3e:00:50:aa:ed:
33:af:fe:33:13:ee:d5:41:65:27:ff:d1:9f:0a:53:9a:a1:e5:
49:79:6a:64:e2:70:bd:3a:a1:a4:8f:19:12:a6:e8:87:a2:fc:
91:79:08:08:d5:a3:e0:ad:28:6a:44:d5:99:44:bf:44:d4:e4:
39:0a:e6:9d:6a:1e:c1:be:46:b5:f6:14:36:6b:2a:96:cf:6a:
ea:1c:f0:ea:3f:10:e9:02:00:b6:53:0b:84:d8:ea:c4:2d:50:
01:59:c1:7d:c9:cd:02:8c:14:c9:06:a8:7f:c4:ba:54:c0:fd:
ac:6f:c6:52:16:a4:82:51:90:71:c7:34:8a:26:95:53:7f:25:
09:cb:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:42:53 2026 by rpki-client