
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File: HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier: sJRSBFmUbmJOH1my/caYg0PdkCeDAIukdj6RLqrmjEw=
Subject key identifier: 19:C3:A2:37:90:AB:37:B6:B4:55:92:A0:DC:24:AE:1E:68:52:F9:7C
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer: /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial: 019D2816A9A3E05B374CC1B6EFA0F649A1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: rjR4R4/+IOwjql71S8g6n/62vOtAdoCwYlw98Ba/npw=)
2: a0cVwY782bVLctNvuUYwvwuDYXc.roa (hash: 3BEBxuA8q6f/xOJc9Z5fI70F8QjqsLEuZxOTHMXzCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a9:a3:e0:5b:37:4c:c1:b6:ef:a0:f6:49:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=19c3a23790ab37b6b45592a0dc24ae1e6852f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:03:5b:87:7c:d1:4a:a6:bb:92:da:e7:5f:
17:6f:cb:a9:19:0a:2e:66:db:03:7c:85:c3:c1:ad:
09:7c:b2:2e:c2:a9:6c:4c:97:44:ff:25:38:3f:26:
c6:a7:6e:a6:0c:e9:9a:9d:c2:f3:a8:18:a0:13:58:
4a:b7:22:f1:fa:e4:99:af:dd:0f:ec:40:4e:70:28:
61:ae:83:53:76:ad:65:da:77:49:28:73:fb:83:88:
19:fe:d4:62:d3:8c:f8:bb:86:ae:49:2a:f5:7f:5b:
12:37:5c:5e:e9:46:89:b1:ba:46:ca:90:99:87:ce:
02:d0:86:96:58:9e:ca:8d:09:56:cc:85:f9:30:81:
1c:94:e9:0e:fb:4a:3a:cb:03:c2:54:60:f2:f7:0d:
d7:91:9a:d0:3c:fe:12:0c:92:4d:e5:c2:5d:dd:e0:
47:13:e0:2b:89:e9:ad:87:72:58:4e:46:77:44:ec:
c6:f0:be:b3:47:6d:6e:56:a0:32:43:c7:a5:8b:a3:
9d:d0:eb:50:49:f6:9d:2c:ec:d4:ef:23:30:62:f2:
1f:c4:56:43:41:30:5b:d0:3e:82:1b:88:89:6b:db:
cd:14:11:f6:14:51:8c:ff:33:da:fb:47:f9:a7:82:
b4:84:5d:51:bc:b3:e7:14:dc:2a:55:c3:62:29:b4:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:A2:37:90:AB:37:B6:B4:55:92:A0:DC:24:AE:1E:68:52:F9:7C
X509v3 Authority Key Identifier:
keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:24:5d:3c:6d:09:00:bf:a5:c2:fc:55:26:49:ed:84:06:
00:05:71:07:5a:11:df:1d:87:8f:d0:75:a0:27:f2:bb:78:8e:
8e:84:e2:c2:e8:4c:e6:22:f4:44:5c:35:05:98:80:04:3d:1a:
79:ad:48:6b:0f:2c:d7:e9:c7:ee:e4:c2:fc:2b:5c:65:5c:31:
d8:c9:a9:23:ad:ea:cf:f6:67:a6:11:56:c0:51:4b:62:48:35:
16:34:ff:ad:76:ab:57:32:db:f7:00:c8:ba:53:a3:7b:0c:aa:
a6:27:dc:e7:9a:92:f0:1b:43:7d:e8:7a:9d:1f:b5:bc:d5:9c:
d7:06:e2:bf:4a:6f:33:87:44:f4:ef:24:4e:1e:46:0c:70:94:
23:cb:63:08:bd:4e:64:2e:4e:7a:3f:52:1b:40:4a:7e:9a:a0:
d9:07:b3:d2:2b:7d:80:64:84:10:96:c8:56:ae:4e:1b:a3:8c:
3e:21:39:77:2c:22:96:e9:72:7f:46:12:2d:d1:34:04:e8:bf:
6b:63:56:9b:4f:ab:30:1c:a8:de:be:cf:d1:36:e3:53:69:36:
ec:9f:e5:61:cb:90:54:9e:e3:40:d3:3c:11:62:8f:91:97:11:
07:56:3e:aa:c7:2a:0f:7b:b4:13:e3:68:53:b6:f2:53:de:34:
06:e6:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:58 2026 by rpki-client