Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: jyXu1ao/H6utPG7pOb+/FZzfidWce/QYmCjePx6KsMA=
Subject key identifier: BA:FB:1A:9E:47:99:A7:A7:56:DA:2E:BB:FA:C8:AA:FB:1F:D7:9D:E1
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01A0D683127A935E91A7119751D209E1A628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 109E
Signing time: Fri 25 Sep 2026 03:01:49 +0000
Manifest this update: Fri 25 Sep 2026 03:01:49 +0000
Manifest next update: Sat 26 Sep 2026 03:01:49 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: dsLYPERYR3/VLd/jM7RyuS9xt2jCOqoV1fGBvFOjwlg=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:83:12:7a:93:5e:91:a7:11:97:51:d2:09:e1:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Sep 25 03:01:49 2026 GMT
Not After : Sep 26 03:01:49 2026 GMT
Subject: CN=bafb1a9e4799a7a756da2ebbfac8aafb1fd79de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:bd:c4:8e:5d:68:45:63:56:52:3a:51:81:
06:4c:07:e0:66:a0:a9:f2:56:a5:a0:6a:f7:57:75:
61:ca:6b:4e:0f:30:f9:1e:f1:11:cc:d0:93:44:90:
80:12:a0:37:63:9e:11:68:9c:73:57:d1:34:4f:62:
43:b3:06:c9:f4:e8:d9:f1:22:9b:ea:ae:20:98:2d:
a0:75:be:96:21:c8:b9:9f:d3:19:e4:c5:d2:c7:88:
e5:90:ec:22:e0:4b:45:3a:9f:eb:55:83:bd:30:37:
0d:29:1f:c8:44:b6:2e:f0:81:af:ee:5d:ae:83:5e:
f8:4c:33:9a:24:e9:c9:23:ac:57:e5:bf:5f:63:88:
cd:05:a8:91:1c:cf:68:d6:27:22:5b:b3:80:44:e6:
e0:c3:9e:8b:d8:99:8f:65:a3:ef:79:b4:b6:75:0b:
cb:34:eb:56:c7:24:e6:00:bc:8c:11:8c:29:4a:62:
d2:de:8d:73:ac:dd:e0:ac:49:2c:72:23:1a:f9:ea:
bb:e6:21:27:15:0b:d2:ec:0f:d9:f7:44:95:6c:5d:
df:ac:86:b9:8c:8f:f4:0f:3c:ab:33:25:43:0c:c6:
bc:34:11:bb:a6:88:bb:7d:85:c1:de:37:72:08:f1:
e0:e9:d1:56:45:95:7d:32:12:57:7a:2d:62:56:c0:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:1A:9E:47:99:A7:A7:56:DA:2E:BB:FA:C8:AA:FB:1F:D7:9D:E1
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:62:5b:29:c0:57:1f:99:3a:ab:cb:d7:73:3e:b8:58:8b:9c:
a2:4d:10:16:3d:28:9b:66:d8:e9:5b:ef:ad:7b:5f:23:62:64:
e7:2d:b2:92:14:62:7c:4f:17:45:0e:d7:cb:33:1f:c8:4c:e6:
d2:f0:33:1c:88:b5:21:9b:56:58:37:72:19:b0:6c:39:9f:ea:
09:11:d2:ec:61:84:dc:76:b2:bb:88:b1:08:a7:f0:e9:f9:3b:
83:89:88:2b:c9:49:6d:32:68:9a:cc:db:4b:2c:25:4c:9a:ed:
e7:a1:6b:49:1e:6e:d7:6c:ef:99:71:23:cf:12:7b:21:0b:9f:
03:1b:fa:e5:71:bb:dc:b8:ac:a5:79:b1:ce:b5:4f:25:32:a8:
98:aa:40:f6:bb:da:5a:51:5b:6a:07:9f:8f:d9:0d:77:f6:71:
af:01:fb:ee:46:73:c1:b6:aa:5a:36:d2:a9:4d:0d:45:94:65:
c1:a7:f0:0f:7e:2d:91:32:57:e1:91:b7:03:8f:f6:d4:41:57:
ac:a9:53:3c:2d:cf:25:e8:b7:39:fd:47:fe:a9:00:ab:d9:3e:
c8:63:91:9d:03:b6:36:f8:d2:b9:62:a8:15:86:f1:95:8b:a7:
64:8b:cb:02:74:17:20:56:c0:ad:1c:4f:0b:d0:71:81:ae:67:
97:ea:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:21 2026 by rpki-client