Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: YTkdsb13iK2aGFLpLDGbyFwdHTt0Cs7SSKHyIDHZkFc=
Subject key identifier: 18:EE:4E:15:D7:06:A9:FC:2E:E0:4F:F2:56:14:F7:2E:8D:BE:0F:5A
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 01A0E363A138EA5070D8F1E6073A7825C837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 068C
Signing time: Sun 27 Sep 2026 15:02:32 +0000
Manifest this update: Sun 27 Sep 2026 15:02:32 +0000
Manifest next update: Mon 28 Sep 2026 15:02:32 +0000
Files and hashes: 1: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (hash: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=)
2: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: zgO4amY5OTNdw4jLjbrtHOgVnzai5Bzk7L9wWWBsT3c=)
3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:a1:38:ea:50:70:d8:f1:e6:07:3a:78:25:c8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Sep 27 15:02:32 2026 GMT
Not After : Sep 28 15:02:32 2026 GMT
Subject: CN=18ee4e15d706a9fc2ee04ff25614f72e8dbe0f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:74:54:67:12:e6:6f:21:5d:a4:8a:ef:62:
26:c8:ad:fe:fb:a1:2a:c2:be:f0:e8:6b:ac:74:f3:
24:62:5e:d8:e4:29:96:9d:f0:a6:34:df:a7:64:c7:
49:08:ce:cd:d4:99:01:7d:1f:b4:e1:cb:c4:35:90:
19:49:7b:2b:36:2b:34:f2:58:2e:89:75:00:c2:84:
dc:3f:a6:be:60:a6:3b:84:f7:b7:8b:3f:30:50:d8:
0a:db:3e:eb:5a:50:05:3d:55:c3:c8:35:cf:4a:05:
2b:2b:55:78:18:be:2c:d8:36:7d:1a:6d:05:3c:6e:
be:3c:fd:88:f1:91:c3:0c:96:20:ee:9e:c1:81:2d:
e4:cd:4e:10:e4:ac:28:8d:ba:35:78:3a:bd:65:08:
cf:3e:0c:f5:84:95:84:56:0a:f7:36:20:73:60:5c:
b3:66:dc:f0:91:47:7b:cc:ee:d1:7a:91:8c:c5:61:
ae:e6:d7:1a:fc:c1:0a:90:88:20:88:46:95:87:52:
c7:fa:2e:d6:97:93:b4:85:10:34:24:1a:6a:fd:df:
00:96:4f:9f:22:8a:6c:fc:50:80:dc:52:28:03:76:
56:ec:6e:6b:05:8e:02:4c:21:46:76:ba:e0:79:fd:
5e:91:73:22:61:9b:16:92:2d:94:76:31:22:92:88:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:4E:15:D7:06:A9:FC:2E:E0:4F:F2:56:14:F7:2E:8D:BE:0F:5A
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:f8:1f:6f:c4:85:0a:38:ee:70:63:23:70:fd:2f:0c:8a:
7d:55:f1:71:c2:94:ef:6b:e6:e7:3a:5e:30:5f:93:fe:2b:67:
9c:42:6c:a9:2d:83:b8:bd:5e:0a:c7:05:1b:69:df:d6:b5:fb:
e1:3f:ac:42:fb:ab:8f:3b:2d:06:37:2b:28:04:e8:07:d0:5a:
9f:ae:06:93:3d:1a:f8:0c:e4:49:4c:3d:99:74:8c:0c:21:9b:
06:02:36:39:f8:1a:fb:34:b0:b8:40:45:23:de:be:a1:1d:88:
33:22:94:6b:5a:bc:95:97:87:dc:19:11:54:dc:97:d8:6c:0f:
6b:da:75:d9:be:83:e5:5b:f9:b1:fa:ae:d3:83:62:70:a4:d9:
72:f3:c6:36:58:56:a6:28:b2:72:48:75:6a:28:1b:5c:ba:92:
2d:90:03:41:ee:94:e9:77:68:e2:8e:79:90:34:da:4b:e3:c2:
3b:48:ed:ca:ce:e0:ef:d8:e3:47:88:dc:a2:2f:75:df:fe:2c:
8c:0f:28:a6:94:b9:7b:fa:30:fe:f3:e1:47:8a:2c:e1:92:5e:
1b:96:9f:39:b1:8d:6e:31:b7:7b:8d:4e:57:b4:da:0b:3a:4c:
04:94:d4:a3:d5:56:11:a8:36:fa:c2:62:a8:5c:88:3f:58:9a:
5e:e8:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:13 2026 by rpki-client