Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: CFo+XTfbdMulxQwisP1x4VzElh6zRkmY+luc4/yHqjA=
Subject key identifier: 3A:08:D3:17:68:50:23:5D:0B:0C:D5:71:89:05:10:E4:2D:0C:97:63
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019E1F479233733079E0CF113116CD598A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0766
Signing time: Wed 13 May 2026 03:00:44 +0000
Manifest this update: Wed 13 May 2026 03:00:44 +0000
Manifest next update: Thu 14 May 2026 03:00:44 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: qIrdkr7kqHi+FdG4cTarMxC+ejKKZNd6LsNwZYf1cyQ=)
2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:92:33:73:30:79:e0:cf:11:31:16:cd:59:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: May 13 03:00:44 2026 GMT
Not After : May 14 03:00:44 2026 GMT
Subject: CN=3a08d3176850235d0b0cd571890510e42d0c9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:8f:ec:c3:65:ae:b6:bc:fb:2f:a8:ee:5c:
05:f1:76:0b:85:7f:78:29:7e:48:18:ca:fd:81:d0:
50:1e:18:c8:b5:99:20:df:4d:dc:f3:c7:7f:3c:e9:
18:f5:25:74:2b:df:ff:92:0b:88:5e:38:27:49:73:
af:65:7b:3e:31:16:79:f6:c2:f5:52:13:a7:2f:49:
82:42:fb:da:67:02:6b:c3:9a:dd:44:d2:87:e4:7d:
e6:7d:df:f4:37:33:04:a8:70:5d:ba:b9:9f:eb:34:
04:b9:8b:6b:95:61:f6:2b:3a:d5:5f:c6:5b:e4:cb:
2f:ca:72:42:8b:0d:1f:37:66:20:09:3d:64:a9:17:
f4:d4:c4:c4:83:6f:13:85:6d:0d:52:24:d7:46:dd:
72:05:9c:e1:80:37:2a:55:27:ce:81:d2:26:ab:82:
c8:53:ca:9d:60:e2:be:75:38:47:16:b4:a8:68:85:
84:76:44:87:6a:e7:8f:6b:01:28:8c:75:db:1d:3a:
61:8e:66:a2:0a:b0:34:9b:e4:ab:c4:b4:11:14:74:
d8:d5:3c:77:d6:51:8e:a9:27:bc:e2:0b:b6:e9:20:
c6:24:52:b1:1e:94:7e:82:7f:81:e7:0d:6a:ba:3a:
43:da:20:d6:aa:1a:e4:86:9f:4b:e9:fe:1b:4a:15:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:D3:17:68:50:23:5D:0B:0C:D5:71:89:05:10:E4:2D:0C:97:63
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:65:4a:1c:d5:d7:a9:06:04:b6:30:71:12:25:3f:e0:96:
72:d0:07:19:ac:e3:40:19:bd:4a:3d:22:16:40:e1:36:d2:46:
7d:d9:fc:69:46:d3:1e:1b:55:bb:a1:49:44:dd:d8:ba:63:71:
8c:53:0c:0f:42:f7:a9:25:75:72:c0:9a:38:73:9e:29:31:60:
67:7f:d5:0d:54:6f:11:82:e1:e5:05:3b:42:32:ea:fc:7e:d8:
dd:04:01:80:99:5b:1e:57:85:e4:ef:10:d3:65:86:23:32:49:
fd:48:ee:82:c9:69:85:4f:61:2c:08:29:aa:d6:99:ed:43:83:
10:58:aa:12:aa:89:e1:8d:a0:dd:8c:2d:51:03:72:35:1f:84:
29:03:e4:fb:97:47:00:57:30:c5:ab:65:9f:86:b8:10:44:f9:
3e:7b:1a:cc:12:23:ad:4f:60:e7:e0:10:6e:40:e2:32:d8:50:
a3:f7:b1:70:92:2b:56:56:b0:a1:a5:e6:ef:9a:12:0a:a8:9f:
41:63:41:7f:3d:a1:d3:c1:03:12:99:76:21:4c:13:e6:18:fb:
a9:5a:16:36:83:0d:63:05:8a:c5:44:06:cb:b2:2e:6c:75:5d:
53:8b:b7:08:3a:11:cb:6e:a0:76:70:c4:ef:d8:d9:b9:03:30:
74:3b:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:45 2026 by rpki-client