Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: sITolBfCnEG5w1qtFmgkNbAe98rf6lAgphxrBHBqahQ=
Subject key identifier: 17:3A:DB:52:45:F6:F2:27:5D:4C:40:45:A8:CB:6D:90:90:D2:E1:BB
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019D2C611ECE327F41E48835E4E4A8305E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 48
Signing time: Thu 26 Mar 2026 23:00:55 +0000
Manifest this update: Thu 26 Mar 2026 23:00:55 +0000
Manifest next update: Fri 27 Mar 2026 23:00:55 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: rybA5YLq89j2fcf/9QreuhhJgobTK8ylga1RzktwLIA=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:1e:ce:32:7f:41:e4:88:35:e4:e4:a8:30:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Mar 26 23:00:55 2026 GMT
Not After : Mar 27 23:00:55 2026 GMT
Subject: CN=173adb5245f6f2275d4c4045a8cb6d9090d2e1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:b6:a5:9b:b4:d8:82:2f:79:b7:76:d6:5d:
cd:1a:48:b6:e9:ff:0f:8d:d2:3d:fc:83:0d:45:c8:
f8:91:b3:eb:ca:7b:7e:ba:d9:72:99:d2:38:ef:a6:
e6:b1:0f:6f:bc:08:b5:5d:84:32:62:1a:3d:5a:ed:
2e:cc:e8:5c:0a:57:7d:a1:d4:e3:3e:9f:d4:db:0c:
3f:a0:62:72:11:86:7c:bd:1d:09:11:a0:48:ae:90:
40:2b:f6:74:56:5a:ac:fd:02:d8:c3:c6:d1:98:7c:
d1:6a:00:35:6f:3b:76:46:d4:eb:a0:be:6e:f1:59:
af:df:13:e4:54:8c:78:f9:34:2a:8a:ec:94:33:62:
b0:01:81:57:fd:24:89:cd:45:09:a8:e6:ec:6a:a6:
d2:ee:18:ff:33:13:39:50:48:03:05:73:bc:bb:b2:
c8:1d:c5:b8:67:3c:c6:38:92:7a:bd:dc:79:1e:db:
6e:93:00:04:fc:3e:e9:17:73:69:26:06:d0:f2:d1:
ac:93:48:13:ac:22:4a:23:c9:f3:f2:c8:a1:8f:e7:
3f:e7:27:3d:7d:c5:39:76:83:c6:2b:3b:a6:85:4a:
f4:94:c1:5a:1a:16:a8:9b:b3:77:c3:40:c9:48:ec:
94:a3:7a:a2:9e:ad:e0:78:3b:17:20:2c:3a:24:f1:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:DB:52:45:F6:F2:27:5D:4C:40:45:A8:CB:6D:90:90:D2:E1:BB
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4f:d3:6a:28:ee:fc:d3:41:ab:15:6e:59:cd:44:df:9c:d9:
9f:da:ff:a5:47:3f:3f:af:75:2a:08:05:89:be:e6:7d:04:a7:
0d:54:da:56:56:25:be:26:48:f2:11:a4:bb:20:cc:77:ab:e1:
16:d0:8d:8f:10:d2:e2:3f:46:32:c6:7d:82:54:de:6f:8e:af:
61:96:19:88:a6:f5:5e:5c:eb:e4:b2:b1:cf:7f:3b:b3:33:13:
26:2d:77:5d:6c:1b:25:f5:d1:7c:92:51:51:d0:8f:d1:41:9e:
45:a9:ca:c6:71:3a:dd:53:3f:60:9c:ca:a8:4f:32:1f:38:a2:
ad:fb:a5:e8:af:ed:3b:d3:3e:13:59:44:1d:86:88:a3:4b:76:
03:b1:01:ef:e2:0c:a0:26:47:f0:82:77:13:cb:ad:2e:f3:c7:
ca:f4:7c:98:b9:ab:9e:80:3d:d0:b2:c1:e9:16:8c:9d:2f:c2:
be:d3:8f:e5:f2:f7:44:f8:f1:a1:4f:f9:27:1d:97:7a:9a:50:
16:26:d0:14:7a:19:3b:ab:d5:f6:b0:73:be:a8:7a:d6:a1:41:
43:56:f2:3f:8f:2e:33:1b:8d:65:4d:d0:35:fa:c7:7a:15:1b:
05:c3:a6:25:bd:c4:8e:db:28:a7:5f:51:28:7d:bd:61:b2:91:
3c:23:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:01 2026 by rpki-client