Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: BKjvnhjqNMnhKXoW87AF3KMSCdLZmjMx3tFcOnUoBGY=
Subject key identifier: 45:6B:8D:77:27:80:74:25:9B:1E:81:03:9F:7C:8A:AC:06:1A:A6:50
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 019F8F7E40F198B38AF5515D6DB0EBEDB63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 67
Signing time: Thu 23 Jul 2026 15:00:43 +0000
Manifest this update: Thu 23 Jul 2026 15:00:43 +0000
Manifest next update: Fri 24 Jul 2026 15:00:43 +0000
Files and hashes: 1: 8OTUnfIsOo0HOvnAnxDiliLhxVk.asa (hash: yWmYRKzlchVAVmIXrfu5eKc71tco2zin1I9txnwVrGw=)
2: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: MaOf+xesc4d6cx/avS0xa79T3I7VcYwqq1JtsaFC4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:40:f1:98:b3:8a:f5:51:5d:6d:b0:eb:ed:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Jul 23 15:00:43 2026 GMT
Not After : Jul 24 15:00:43 2026 GMT
Subject: CN=456b8d77278074259b1e81039f7c8aac061aa650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:68:27:81:d6:e5:84:1a:03:45:92:40:d9:
58:5d:ed:c6:9d:cd:c3:14:c8:e4:79:80:a5:f2:a5:
68:11:d8:3c:46:8b:18:f8:33:db:02:e7:62:c0:44:
b8:e6:7a:1d:d0:23:8a:9e:44:86:16:d6:16:cc:45:
cb:8e:0e:4c:de:ca:84:ca:a4:90:b0:a8:2c:2c:7a:
c3:40:1a:e1:da:dd:29:79:4c:01:18:05:67:0c:91:
12:34:34:c4:ec:da:8b:60:2b:a7:be:5a:40:82:cb:
9f:f5:e3:f2:ae:ef:73:a9:58:8c:be:89:b7:3e:cb:
6a:a5:aa:46:85:84:8d:2f:b3:7a:e6:47:16:63:fa:
f8:e6:3f:a7:e7:e6:2a:03:8b:bb:09:07:df:79:b3:
fd:57:a8:ef:d9:42:20:af:c7:09:8b:50:e6:96:3c:
06:d0:f3:8d:e0:db:78:93:30:b5:94:5d:63:4a:14:
55:f9:a5:1a:11:b7:ad:55:5d:49:12:b0:eb:f0:e4:
0a:6d:f1:da:28:78:84:74:70:b8:51:cc:82:72:ce:
74:b4:53:1b:c0:a7:3e:de:62:ef:5b:6d:a5:ce:eb:
f1:af:2e:90:73:5f:3e:59:5d:8a:89:68:a1:de:8b:
87:6c:a5:e9:7a:af:c7:32:c8:1b:cf:71:dc:86:13:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:8D:77:27:80:74:25:9B:1E:81:03:9F:7C:8A:AC:06:1A:A6:50
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a1:7e:cc:90:31:8d:cf:14:d7:7b:a9:cb:b5:bc:11:57:5b:
3b:de:8e:04:eb:07:ae:43:24:1b:20:7e:db:3e:36:2b:92:ba:
4e:cb:c6:af:af:c7:45:d6:38:a0:b3:86:d6:bc:7e:44:c4:d7:
9d:57:86:56:1d:e9:3a:1e:ec:3d:e9:c6:55:43:c6:e7:5c:cb:
98:9e:7d:8a:88:59:40:00:77:0f:dd:9f:d8:17:31:50:df:b5:
ad:75:82:b2:c2:ca:45:c5:13:d6:ab:cd:6a:69:c4:06:76:8f:
6a:17:4f:bb:ce:8a:e5:ff:28:8c:bc:bc:8a:96:ed:c3:c6:33:
02:38:bf:83:84:fe:b5:2c:7d:d3:69:9e:b0:4a:43:32:c7:0a:
a0:05:b6:90:19:93:ff:45:07:c5:3f:9d:40:42:78:90:41:6c:
fe:4c:ee:66:c2:1c:11:c8:74:42:fa:3d:0d:2c:35:1a:bc:5c:
ec:1b:04:2c:d4:02:ac:23:72:e4:58:99:89:a5:02:49:8d:7a:
b7:7a:1f:56:cb:5e:89:bc:dd:8a:8b:be:e2:9f:c1:8b:29:2e:
d6:9a:00:f5:fa:a8:f8:e2:ef:14:a1:64:b1:86:d2:40:95:66:
8c:da:a1:49:46:64:2a:45:cb:d3:ed:de:a9:e7:61:ac:c0:41:
41:36:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:53 2026 by rpki-client