Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: XDTkE1eYcm+Wqpnw5Ad89iEk0b+ZGXFwIzLb191MF6k=
Subject key identifier: 17:FA:63:74:69:F6:E8:0B:65:81:F2:A4:C8:82:B9:2E:F1:DC:19:9B
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 019F954994F87C6173CB8452671F875A0202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 05DF
Signing time: Fri 24 Jul 2026 18:00:55 +0000
Manifest this update: Fri 24 Jul 2026 18:00:55 +0000
Manifest next update: Sat 25 Jul 2026 18:00:55 +0000
Files and hashes: 1: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (hash: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=)
2: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: pJi58rEKo5joqpdTXr5bpgN8XjKQ9N6koqP9SLTqP+0=)
3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:94:f8:7c:61:73:cb:84:52:67:1f:87:5a:02:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Jul 24 18:00:55 2026 GMT
Not After : Jul 25 18:00:55 2026 GMT
Subject: CN=17fa637469f6e80b6581f2a4c882b92ef1dc199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:f9:32:44:9a:30:41:44:71:ff:e0:fb:16:
c6:a0:3f:01:d4:85:7b:61:46:70:a3:14:95:4f:b9:
45:6c:1c:aa:db:df:91:36:87:4c:b5:bf:9a:95:37:
46:30:67:81:4f:1c:ae:b5:4c:23:c6:0d:32:be:69:
46:2c:2e:ca:9f:c2:48:bb:7b:84:54:98:78:cf:94:
d3:86:b5:6d:32:84:0a:d4:16:3e:ef:da:61:55:d4:
b2:d7:77:ed:7f:f0:0d:d5:f0:f5:76:08:74:be:81:
1f:f7:5e:1a:65:82:5b:a1:d2:92:b1:26:5d:91:9d:
6a:0b:30:6e:44:5f:b2:78:1c:15:f4:34:97:75:50:
6b:4d:e0:8d:b2:c0:78:0f:69:61:d7:29:6c:14:9f:
0d:04:4b:66:f8:54:e8:9d:b1:80:df:5b:f5:9b:ae:
82:8b:44:3b:7a:67:48:b5:0c:5c:dc:e4:a7:ab:4e:
a7:6b:3d:3f:62:6a:df:fc:4e:7a:e1:29:9d:81:07:
a6:10:3b:97:27:dd:d7:cb:9e:bf:37:80:dd:ff:f8:
08:0a:83:7e:da:14:8b:a6:3a:53:cb:c7:9c:ce:27:
8f:0c:04:56:62:08:0e:b5:97:49:46:57:6a:58:bc:
20:3e:e0:4c:28:9c:f4:33:bb:5a:29:8c:fe:9c:3f:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:63:74:69:F6:E8:0B:65:81:F2:A4:C8:82:B9:2E:F1:DC:19:9B
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ac:f2:b0:3d:fe:48:52:17:54:37:1d:44:6f:c8:8e:0d:36:
fa:c0:4f:ce:18:86:3d:46:0e:c6:e9:6c:68:ad:d0:a0:26:a0:
b9:a1:e6:08:cd:34:2d:57:a4:d6:c4:f3:4c:19:05:e9:bf:43:
39:6c:e1:57:78:54:59:dd:fc:74:68:d0:2f:bf:da:02:60:34:
43:06:9c:1c:e2:a6:c6:93:9b:a1:fe:47:98:c0:72:b8:6f:ad:
9e:a8:ed:e0:4c:34:82:7b:93:50:54:51:4c:a1:e7:17:bc:ee:
58:30:94:d7:15:8f:a4:50:da:75:df:cc:a3:9a:7a:98:6d:8c:
fa:94:0a:e1:55:66:0f:6d:8d:73:e4:04:e0:2f:50:ad:f9:50:
31:d5:f2:b8:cb:85:51:af:9f:fb:cc:13:99:8c:f1:d1:db:ba:
15:ec:ab:49:ea:b9:6a:d8:64:24:6a:29:b3:dd:bf:9d:29:af:
4b:6d:21:b6:43:a1:9c:49:8b:b1:43:7a:80:c8:67:78:05:b9:
a8:f2:5d:11:3b:a1:57:4c:45:50:fb:26:15:3a:13:29:4a:b4:
61:fa:57:93:08:a9:d5:7b:f3:2c:4d:2a:20:c1:4b:41:73:41:
f3:5f:63:b9:28:ee:58:58:59:d5:4a:08:28:39:86:e1:17:3b:
50:db:41:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:06 2026 by rpki-client