Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: rjOXtA48eIy8x1WrLpfun+JbJ5nTu9Ifa7jqwqbfsQs=
Subject key identifier: C4:45:EC:FA:0A:12:63:28:86:3C:A1:ED:57:49:BB:7D:FE:16:9F:92
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019D2816535B05EF9741E436AD518087F960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0EB6
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: rG7ENrzqd8mJG8MJ6+lWAJb4TolnsXRZs8YZ6WAJj6Q=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:53:5b:05:ef:97:41:e4:36:ad:51:80:87:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=c445ecfa0a126328863ca1ed5749bb7dfe169f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:ed:2e:c3:c8:1a:7f:8c:7a:ea:b4:c1:e4:
9d:e7:60:e7:37:55:02:62:0c:e4:c0:98:3d:6e:46:
1c:f5:e9:5a:fe:4e:17:03:b3:16:94:a0:27:cf:40:
73:4b:46:5f:16:d3:67:d1:c8:8c:53:69:3f:1b:19:
48:2d:e4:30:5e:2d:4f:ae:ca:e8:b1:ba:00:30:e6:
01:d2:74:cd:e2:38:8e:9f:ee:5e:74:69:9c:be:6d:
14:4e:8a:09:30:3a:ba:09:a1:df:a9:2f:1d:ae:ee:
5f:b7:21:8d:bf:58:c4:ff:9e:62:1f:eb:59:eb:7d:
2f:6a:8a:ef:c4:af:4f:91:b5:e0:ff:55:c7:6a:2b:
12:26:79:d0:cb:fe:9a:16:0e:ec:9b:29:1c:85:72:
2e:d5:bf:ca:b6:74:91:b3:53:2f:3a:10:8f:33:f3:
d2:4b:cf:de:7a:d0:cf:35:77:b3:aa:04:c4:f2:80:
c4:79:48:8a:d2:91:1a:22:97:33:2a:c0:ed:d2:c0:
7a:c8:54:c3:c7:2d:79:8d:e3:9a:85:25:26:e8:1d:
f4:d3:93:f1:15:4f:11:32:ae:f5:2b:79:2c:4e:2e:
4c:9b:82:2e:4f:62:48:4b:dd:27:51:ed:3e:64:9e:
3d:1d:32:3f:09:7f:99:9f:7b:fe:e6:82:a6:1b:56:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:EC:FA:0A:12:63:28:86:3C:A1:ED:57:49:BB:7D:FE:16:9F:92
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:a0:e9:1a:94:f4:33:18:04:9f:36:6a:4b:89:ca:43:19:
6e:3d:8e:95:5c:b9:bf:a4:5d:8f:dd:f9:f0:0a:b4:cb:42:40:
8b:06:c2:39:9d:30:88:00:f1:42:65:69:1b:bf:e1:65:f5:7d:
df:17:da:5a:8e:e6:c8:d2:90:83:19:97:8d:51:39:19:47:23:
72:c0:6b:c0:e6:4a:6e:7b:01:84:1e:d5:61:43:14:36:49:4d:
ba:1f:db:16:e8:30:95:5d:30:5c:36:e2:8d:38:ed:2c:4c:fd:
69:ce:87:e6:c4:a1:7d:44:15:a7:10:58:cc:f8:5d:7f:dc:21:
e3:28:b9:73:9b:4f:aa:f6:0e:a5:c3:a4:ea:aa:ef:6e:20:3e:
ba:8e:e8:59:db:80:e1:d2:23:4b:8a:c5:c9:cd:57:72:d9:52:
2d:d6:07:f0:fb:8b:b7:36:c9:1e:95:fa:68:6a:74:57:f1:f2:
13:67:32:7a:70:b1:5e:4b:b6:18:94:84:17:2a:51:f1:0b:2c:
20:26:7f:09:2a:01:da:62:9d:68:15:da:be:c6:31:ee:54:73:
5c:fe:b8:42:f1:9b:da:1b:40:e9:74:34:a8:8b:3f:5e:86:a5:
3f:c2:82:df:3c:1d:78:22:df:2f:69:8e:6b:be:1a:f9:26:6d:
82:6d:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:21 2026 by rpki-client