Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: xGyTy45m9A1x5LGHwg+BHg2vHpOd6yfQgoMXdOpnyWE=
Subject key identifier: 28:80:70:40:12:11:BC:59:ED:16:C7:D4:0B:20:3E:E4:05:E9:25:ED
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019E1F47DF77F41A1A93057D02E69759692F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0F36
Signing time: Wed 13 May 2026 03:01:04 +0000
Manifest this update: Wed 13 May 2026 03:01:04 +0000
Manifest next update: Thu 14 May 2026 03:01:04 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: bZPY4zYb5FeeS8QRveSQlffFvF8xPweOSb6M+nr8xy8=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:df:77:f4:1a:1a:93:05:7d:02:e6:97:59:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: May 13 03:01:04 2026 GMT
Not After : May 14 03:01:04 2026 GMT
Subject: CN=288070401211bc59ed16c7d40b203ee405e925ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:a4:fa:01:6d:0f:d8:51:24:96:e9:ae:90:
a4:7c:49:49:cd:2e:9d:41:1f:0b:5d:ed:67:0a:a6:
8c:ae:c5:42:3c:b6:d4:67:1c:1c:ca:ea:3f:10:07:
1f:6c:55:f6:7f:70:50:8f:df:ff:98:c7:0b:63:4b:
f1:c2:67:f1:14:7e:75:e9:48:0a:e7:17:6b:fa:b6:
97:bd:76:31:36:44:3d:ae:ae:67:55:a9:e9:dd:68:
3d:f1:c6:86:b6:a1:24:e4:cb:eb:bf:35:b8:0e:ea:
a2:27:52:c0:9a:ec:30:0f:eb:d8:80:03:c0:e5:f3:
84:67:08:ec:36:ab:ac:4e:4b:90:dc:ed:a7:b6:12:
c6:0a:96:1f:9f:0f:e5:da:d8:3b:bd:5f:e2:7a:07:
c1:96:6d:21:ef:85:b4:69:01:45:61:3c:1a:5e:f6:
5e:5a:ed:78:19:91:a9:66:d2:10:73:44:e2:90:80:
17:56:86:db:67:4f:9d:43:fe:0c:68:b6:6d:da:ae:
dd:9e:a5:cf:87:7f:7b:45:1a:9c:5e:32:82:22:16:
b2:fc:ac:98:7d:4b:3b:4f:f7:bb:c7:c5:9c:46:b9:
2a:ca:ce:6a:d8:e5:14:50:06:4a:f0:b2:02:15:ab:
ca:4f:4f:d4:e6:e0:01:42:8a:d0:1d:05:bd:4c:ae:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:70:40:12:11:BC:59:ED:16:C7:D4:0B:20:3E:E4:05:E9:25:ED
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:84:bf:56:1e:0e:80:fe:d5:e9:27:25:8e:36:92:83:e0:
fc:17:0b:d6:45:ba:2d:9f:d5:79:3c:ba:bc:68:de:9f:99:9c:
86:d4:44:94:ca:79:63:3d:91:ce:13:28:47:a5:fd:c7:67:fd:
a0:92:f4:6e:e9:32:72:74:e2:53:b1:0a:c3:68:09:5c:70:4f:
af:1d:b8:00:77:bd:a5:0f:05:9b:78:4a:9b:fc:01:1f:92:0c:
af:ce:11:bd:40:42:1e:ed:37:45:11:ab:8c:75:37:7d:33:28:
31:fb:8c:3c:45:e7:1d:6b:fd:27:f4:e0:25:88:b1:b7:1b:38:
6a:7a:68:a7:25:ca:66:77:04:5c:1c:98:47:ed:48:84:74:56:
47:62:e2:02:6c:37:8f:a8:77:35:00:8a:d5:5d:da:68:6e:dc:
0c:59:59:0a:8f:dd:b0:43:6b:1f:4e:db:23:69:48:f8:fc:d6:
f6:b7:d1:dc:c8:b8:18:9f:bb:fa:0e:57:f9:6e:5e:d3:fd:86:
3e:10:ad:81:42:d5:a7:a2:f3:f3:41:6c:03:e4:4f:43:f0:2b:
ae:64:53:86:e6:09:a9:da:cf:34:90:07:ce:cb:b1:a6:be:90:
37:b1:a1:85:56:b6:7c:f5:b0:15:69:56:9e:87:6d:79:c3:f7:
49:1e:58:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR9939BoakwV9AuaXWWkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjYwNTEzMDMwMTA0WhcNMjYwNTE0MDMwMTA0WjAzMTEwLwYDVQQD
EygyODgwNzA0MDEyMTFiYzU5ZWQxNmM3ZDQwYjIwM2VlNDA1ZTkyNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRSk+gFtD9hRJJbprpCkfElJzS6d
QR8LXe1nCqaMrsVCPLbUZxwcyuo/EAcfbFX2f3BQj9//mMcLY0vxwmfxFH516UgK
5xdr+raXvXYxNkQ9rq5nVanp3Wg98caGtqEk5MvrvzW4DuqiJ1LAmuwwD+vYgAPA
5fOEZwjsNqusTkuQ3O2nthLGCpYfnw/l2tg7vV/iegfBlm0h74W0aQFFYTwaXvZe
Wu14GZGpZtIQc0TikIAXVobbZ0+dQ/4MaLZt2q7dnqXPh397RRqcXjKCIhay/KyY
fUs7T/e7x8WcRrkqys5q2OUUUAZK8LICFavKT0/U5uABQorQHQW9TK5TSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiAcEASEbxZ7RbH1AsgPuQF6SXtMB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfSEv1Ye
DoD+1eknJY42koPg/BcL1kW6LZ/VeTy6vGjen5mchtRElMp5Yz2RzhMoR6X9x2f9
oJL0bukycnTiU7EKw2gJXHBPrx24AHe9pQ8Fm3hKm/wBH5IMr84RvUBCHu03RRGr
jHU3fTMoMfuMPEXnHWv9J/TgJYixtxs4anpopyXKZncEXByYR+1IhHRWR2LiAmw3
j6h3NQCK1V3aaG7cDFlZCo/dsENrH07bI2lI+PzW9rfR3Mi4GJ+7+g5X+W5e0/2G
PhCtgULVp6Lz80FsA+RPQ/ArrmRThuYJqdrPNJAHzsuxpr6QN7GhhVa2fPWwFWlW
nodtecP3SR5Yww==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:31 2026 by rpki-client