Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: 2ivi1HH89eDGuxBgkFcf/tuDK5OzHj0UtouPau3QfCI=
Subject key identifier: 98:09:DB:45:0D:0E:2D:26:A1:50:F5:CF:F3:78:BA:DD:18:0A:A3:22
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019D265F2402C01E2F6DA219ED636A064E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: cVlURNqZQAh6Qe1KHamU9SvF4u8.roa (hash: GimlEEISLfZZspdQqTlAmRyOG3nJltXybDu3f42C8MQ=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: 4hMckUTAhz7cqlIUOECV3riyRyv1RP4Cs6OFmV3LRpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:24:02:c0:1e:2f:6d:a2:19:ed:63:6a:06:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=9809db450d0e2d26a150f5cff378badd180aa322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:23:37:4a:09:77:71:4d:4b:40:4d:d6:e9:
bf:60:8f:6a:d4:2a:3a:18:75:be:05:4e:9a:9c:29:
5d:4b:da:c9:9a:b3:7e:08:e4:da:b9:9d:63:72:2b:
0c:02:7c:f2:d6:65:67:55:1b:5c:8c:9f:8d:88:fe:
b7:60:aa:b7:8d:bc:d2:ae:01:35:c6:79:a5:1f:0c:
e4:8d:e8:5c:69:5e:8e:bc:06:a0:ab:1a:a3:52:1c:
09:35:f1:76:6c:f4:4b:c9:75:0d:90:65:4a:7d:62:
20:8b:4a:20:c8:71:64:54:f9:2b:f4:70:1a:aa:ee:
5a:27:56:7b:c0:79:07:cc:31:ba:8b:28:74:e9:1b:
86:c5:57:d3:db:c0:97:4e:7c:6a:09:a8:e3:5d:b8:
ed:6a:62:59:69:47:3a:2a:bf:3a:85:45:2c:6a:bc:
dd:3b:80:f1:03:6e:ee:36:b9:78:a7:d6:aa:d6:d2:
41:71:da:1e:21:8e:f1:b1:f7:90:36:4f:7e:4c:fb:
c6:d4:ff:25:37:03:a1:30:4c:61:33:ec:13:93:4b:
f6:2b:bb:17:5b:fd:e4:20:bf:a1:43:f5:80:88:7a:
cc:92:d9:4e:d4:b2:a3:c2:b9:09:bc:eb:54:6b:06:
f7:a5:7e:e6:33:63:97:73:c9:e3:03:e0:a1:27:cc:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:DB:45:0D:0E:2D:26:A1:50:F5:CF:F3:78:BA:DD:18:0A:A3:22
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e8:2b:f7:80:3f:a6:86:69:e6:a3:7b:eb:fd:df:71:e6:1c:
94:91:36:7c:9c:48:14:6d:b3:36:b3:99:43:f8:9c:32:f9:ec:
66:3d:be:a9:8f:62:95:bd:c7:9f:7e:b6:7d:6e:f8:9d:db:75:
f7:f8:60:19:c1:66:51:aa:47:b8:fd:83:44:64:a7:92:b8:7a:
83:d2:84:2a:3a:d7:7b:b9:7d:6c:86:c8:63:5d:f7:71:02:a6:
3d:36:16:ba:83:7b:9d:53:8d:ac:5f:5c:b5:ff:4a:c0:e6:45:
eb:12:39:9d:bd:9c:fb:e6:b1:a9:64:db:86:b2:65:07:ce:15:
7a:08:b3:ff:20:25:34:e0:b1:06:a6:b9:fe:91:67:c6:20:c7:
e9:93:05:5c:6e:68:84:3f:76:18:ea:84:a9:8f:09:42:ec:5a:
4d:21:50:3e:4e:29:cc:01:f9:15:dd:02:94:c2:3e:e4:2c:9c:
ea:dd:96:d7:43:bb:0c:64:9a:5d:b2:76:e0:da:13:7c:39:c3:
b5:15:ac:49:76:0f:aa:9b:de:da:b7:87:b9:67:20:03:34:27:
ea:33:bf:fa:25:5f:ba:da:b7:1e:04:8d:8c:ea:0c:f3:6b:c0:
5f:6e:ab:cd:e8:0c:48:dd:aa:78:96:47:5d:1c:11:db:24:8a:
5b:82:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:11 2026 by rpki-client