Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: Spo4Q7048IGutLHYir9U2A+AP8iFoFk7HxwKzezu2V4=
Subject key identifier: D7:98:37:98:4C:A7:27:E9:78:20:B7:8F:F5:06:C7:5C:58:42:03:3C
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019F940031D220831F8539C4D57C68C7324C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0FF7
Signing time: Fri 24 Jul 2026 12:01:08 +0000
Manifest this update: Fri 24 Jul 2026 12:01:08 +0000
Manifest next update: Sat 25 Jul 2026 12:01:08 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: H7P5z/UBgH2a0pAo5302bYWv2ORe6AHzh1k91CaEPwc=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:31:d2:20:83:1f:85:39:c4:d5:7c:68:c7:32:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jul 24 12:01:08 2026 GMT
Not After : Jul 25 12:01:08 2026 GMT
Subject: CN=d79837984ca727e97820b78ff506c75c5842033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:9b:3a:1e:6d:01:dc:a6:6b:15:fe:4e:34:
5d:62:5f:45:b6:a2:c0:33:0d:31:1e:d0:a1:19:fa:
63:a5:aa:4a:76:0f:03:1b:f3:15:f6:5f:cd:6a:60:
c8:6f:b9:89:6f:2f:b3:f7:af:a9:97:da:9f:9e:b3:
cf:ef:e1:09:19:d6:f9:b9:8f:c2:39:bd:6e:41:7d:
50:ad:53:6b:6a:58:13:62:5e:9d:d4:be:5a:53:80:
33:46:18:a8:be:45:76:c7:5a:67:f2:b1:bb:30:4c:
c8:e1:e7:9a:79:89:d4:56:b3:49:b1:38:13:ba:9e:
24:20:bf:3a:5e:0b:7d:79:4c:a1:26:0c:ac:9a:b7:
81:35:39:0c:47:1c:1b:ee:1d:37:22:cb:ad:84:c5:
83:77:56:41:66:4d:1e:67:04:6d:e2:86:cd:8c:a6:
db:88:89:7a:29:b2:ff:77:21:4a:41:48:01:a0:47:
48:63:b1:cc:af:93:4a:18:55:08:85:d0:75:8a:46:
02:e5:49:3e:00:c1:c6:6a:ab:85:5b:7d:17:8c:23:
26:bf:eb:1f:36:3f:af:e2:5d:bd:62:48:e1:2e:b3:
4a:01:19:02:4a:a9:bc:61:fd:6c:d2:2e:c6:6d:a1:
e5:9a:8a:54:00:ea:f1:6d:37:58:2c:7c:13:d9:f5:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:37:98:4C:A7:27:E9:78:20:B7:8F:F5:06:C7:5C:58:42:03:3C
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7c:dc:34:9e:ac:a2:a8:76:f8:4f:70:d7:95:e3:7a:44:cc:
98:de:50:73:f1:24:c1:46:4c:f0:37:93:94:7f:7a:22:4f:16:
28:a3:84:75:52:f0:d0:d5:8b:41:87:91:3e:52:88:5d:49:ed:
a6:46:27:4b:d5:a1:ba:1e:7d:57:ce:61:1f:21:02:95:7b:d9:
1d:e3:19:85:cc:1c:15:1d:c5:b8:ee:14:36:00:ab:e5:ca:22:
3b:da:91:4f:37:ad:d1:d0:a4:9d:d6:5f:fd:13:c6:2c:9a:20:
d0:7b:e0:f4:10:93:e3:19:36:64:4e:87:a1:96:50:ad:1a:b9:
20:2c:48:26:1d:7e:cf:e2:05:ac:87:d5:34:37:35:46:73:a0:
4e:69:4d:d9:d6:e0:73:b4:fa:10:10:50:83:06:43:1c:42:9c:
8b:a5:2a:b7:bb:a2:91:f1:90:ac:3d:59:03:ef:a3:d4:a1:9a:
de:fc:3b:31:3e:47:97:50:53:ce:38:2b:6c:9c:43:37:a8:8b:
cb:46:7c:c2:1c:39:60:d6:68:18:27:68:90:35:e3:1d:37:04:
e1:2a:8d:1e:b0:61:49:8c:46:32:91:b0:2e:e9:44:0f:c5:94:
16:a8:12:de:39:46:be:8a:3a:1d:a4:8d:b9:18:76:3b:a3:78:
c1:2d:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:53 2026 by rpki-client