Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.mft
File: HYKbXmBtyDxRcR35wiPYHYEe95g.mft (raw, json)
Hash identifier: 2cESHuDQkGbn8mFTgnHvzhftZubuhMjt9dpyLxaGebQ=
Subject key identifier: 30:65:AB:48:8F:19:84:E1:7A:26:AD:59:85:D4:6E:1D:5D:F5:17:77
Authority key identifier: 1D:82:9B:5E:60:6D:C8:3C:51:71:1D:F9:C2:23:D8:1D:81:1E:F7:98
Certificate issuer: /CN=1d829b5e606dc83c51711df9c223d81d811ef798
Certificate serial: 019D32D0C8E934401DA636DE93123C6BB45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKbXmBtyDxRcR35wiPYHYEe95g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.mft
Manifest number: A3
Signing time: Sat 28 Mar 2026 05:00:36 +0000
Manifest this update: Sat 28 Mar 2026 05:00:36 +0000
Manifest next update: Sun 29 Mar 2026 05:00:36 +0000
Files and hashes: 1: HYKbXmBtyDxRcR35wiPYHYEe95g.crl (hash: uCQzB6PLMxE8/wBHHWnNUqxxhsJp0JbfuQzJ1x12RUo=)
2: U56TnthDRWDIW4gL93EyrEAgwAI.roa (hash: tOCfDzaHMm1ONV/c7UPDq6X22FPcYs62vU3FGgv74iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKbXmBtyDxRcR35wiPYHYEe95g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:c8:e9:34:40:1d:a6:36:de:93:12:3c:6b:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d829b5e606dc83c51711df9c223d81d811ef798
Validity
Not Before: Mar 28 05:00:36 2026 GMT
Not After : Mar 29 05:00:36 2026 GMT
Subject: CN=3065ab488f1984e17a26ad5985d46e1d5df51777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:d2:72:54:82:16:4d:f4:0c:51:1e:41:66:
db:de:ec:2c:34:49:f5:e2:db:a6:ee:fb:40:5c:67:
68:e5:6f:a2:63:7c:23:d0:46:9f:78:4f:5f:04:dd:
66:96:57:52:a7:ab:b4:b8:b6:17:3a:28:48:ba:5f:
c0:87:38:1a:50:f7:77:39:66:c5:44:26:c4:c6:13:
9b:66:5c:7b:10:85:af:35:38:96:de:e4:5b:ef:71:
ad:73:33:4f:59:9a:fb:3e:f0:ea:17:6d:07:f3:da:
5f:b1:6c:b7:25:ed:4b:8c:7e:8a:9b:37:36:de:84:
26:db:c9:5e:b0:aa:44:48:1a:46:e3:f7:c2:78:d5:
2e:ac:cb:f4:f4:96:36:36:da:bf:f3:83:3d:21:f4:
a0:28:80:16:48:0d:80:77:f8:9c:81:e6:a8:28:29:
ce:82:46:0b:32:0f:c8:b3:9c:f1:dd:f4:6f:fe:ac:
5d:8a:36:30:8c:80:d1:f4:6c:1d:df:ee:c3:c5:a9:
82:68:72:47:af:a4:c3:00:42:5c:80:65:85:f1:c5:
df:cd:9b:ef:86:57:c5:78:f4:65:cd:f9:31:e9:de:
08:d4:fa:4a:a0:e7:41:b9:e3:b2:67:8d:9d:56:24:
45:91:b1:1d:23:f3:8b:5a:72:07:84:b0:af:63:eb:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:AB:48:8F:19:84:E1:7A:26:AD:59:85:D4:6E:1D:5D:F5:17:77
X509v3 Authority Key Identifier:
keyid:1D:82:9B:5E:60:6D:C8:3C:51:71:1D:F9:C2:23:D8:1D:81:1E:F7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKbXmBtyDxRcR35wiPYHYEe95g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7f9fc3-601c-404e-ad41-6da85931160f/1/HYKbXmBtyDxRcR35wiPYHYEe95g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2f:77:e7:29:83:43:a5:0c:38:31:bd:2b:3c:46:14:88:f7:
32:c5:8b:3e:9e:4f:b4:db:e4:e2:4e:05:38:71:d1:eb:fd:09:
59:0e:07:61:a1:fe:5c:92:06:c3:b1:d4:e9:43:b2:41:7d:16:
34:b1:43:ce:ed:ad:1f:37:69:2e:d1:e6:b7:c6:ad:db:40:35:
07:c6:66:c5:19:d8:36:4a:14:91:97:8e:4c:5b:05:24:d5:02:
06:b3:c9:0d:ee:2c:b4:32:5a:05:09:66:85:2f:36:4a:ee:7b:
04:af:14:51:19:4e:73:2a:e1:df:b9:7a:13:d0:3f:54:37:9b:
b7:f2:16:24:d2:a5:ec:2c:45:46:00:98:79:ee:f1:75:ec:7b:
6c:f1:a2:91:5c:c1:80:01:06:d4:1c:72:64:13:cb:05:96:3b:
74:ee:43:cc:82:f2:fe:f0:13:aa:01:b2:a1:e3:35:85:02:92:
dd:c8:d2:80:7b:5f:cc:5a:29:d7:2a:4a:0a:7c:3d:84:cc:37:
34:5b:83:f3:ce:d7:d0:15:a2:ea:77:f9:bc:36:1e:b4:66:32:
58:4c:f2:07:8b:60:10:59:cf:3d:51:b8:b0:43:ac:5f:98:d0:
bd:e6:0d:a0:21:93:b8:35:85:7d:18:13:8b:30:11:56:9b:c9:
08:f6:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:37 2026 by rpki-client