Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: g/DbKW+BHJmJ1gaoMHxU2LIUeEL95DFQqEskHckU/Qo=
Subject key identifier: A8:BE:D6:DE:24:22:97:DF:4D:24:80:8C:1B:8B:C3:B2:5C:02:0A:F5
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 01A1DD27239E54B240B0075FDD08ACB472B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 12BA
Signing time: Sun 15 Nov 2026 03:01:32 +0000
Manifest this update: Sun 15 Nov 2026 03:01:32 +0000
Manifest next update: Mon 16 Nov 2026 03:01:32 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: xcFt+RYjRd25ylH2quSuF/Ul4VJAc69X5+No9FdHbL8=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:23:9e:54:b2:40:b0:07:5f:dd:08:ac:b4:72:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Nov 15 03:01:32 2026 GMT
Not After : Nov 16 03:01:32 2026 GMT
Subject: CN=a8bed6de242297df4d24808c1b8bc3b25c020af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:12:f8:d6:6e:40:b0:f0:39:96:99:df:ef:
54:50:14:e3:f5:af:80:b5:3f:98:0f:e9:7a:0e:77:
da:ac:81:ec:5a:a9:70:f7:2f:6a:85:d9:33:88:06:
ca:a7:36:c4:cf:4b:a5:20:29:b7:d8:f0:b1:a2:33:
31:0e:24:f5:2d:e7:de:5e:41:70:a1:d5:8e:95:b2:
fa:c0:b5:44:16:6d:f9:07:aa:bf:14:d8:17:9f:25:
47:cc:d9:75:e9:20:e5:29:10:70:8b:13:60:c7:40:
fa:39:00:85:11:6b:ff:d9:51:22:95:bb:bb:f5:be:
64:51:1f:13:d5:1a:5f:1e:e8:fb:05:bf:87:33:29:
a1:3c:ae:74:57:5b:01:73:e0:dd:47:d7:74:b6:48:
a4:ab:3a:1d:9a:a9:0e:2b:d4:fb:39:b9:25:b8:2a:
3c:e9:9a:11:84:c7:fb:fa:48:a2:34:6e:2c:6f:5f:
ed:7f:a2:1a:66:67:0c:7b:71:3b:5d:19:cf:a4:67:
04:a8:6c:e1:8b:8b:6d:52:c9:9c:4a:83:57:bf:11:
d3:df:cb:aa:b3:4c:1d:66:86:d4:60:ba:11:ec:86:
c5:42:9e:15:de:70:d9:f5:b4:f0:33:90:87:eb:07:
45:52:ce:61:a1:f1:0c:fa:1c:90:19:08:74:4f:1d:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:D6:DE:24:22:97:DF:4D:24:80:8C:1B:8B:C3:B2:5C:02:0A:F5
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:31:c3:67:3a:40:c3:d1:b7:e4:83:9f:43:66:72:17:e9:e4:
64:fb:e4:ba:a3:4e:fc:b4:b4:91:1f:cf:1a:49:9b:e9:98:af:
69:e1:d7:82:67:27:6f:0f:98:cf:33:84:38:5e:6d:b4:63:94:
86:e5:42:40:83:d2:1c:77:b2:66:8d:f6:ca:27:28:02:ec:64:
5b:68:d8:fb:7f:9d:62:9d:51:6d:96:49:a1:4b:a6:79:30:0b:
d4:11:26:70:13:c8:01:91:f9:d9:eb:43:d9:4d:a0:4b:b1:68:
5d:0e:34:f6:04:2e:2e:10:75:7f:0f:b7:6d:9d:80:89:0f:d1:
5f:83:47:5b:34:f6:40:63:c8:e6:0e:03:99:e1:9f:78:09:56:
86:11:c7:2d:1f:67:0c:21:b5:a9:f1:70:02:96:ad:cd:84:8b:
d5:ec:eb:38:63:f3:aa:29:b0:f0:43:6f:b7:d9:e0:23:ae:0c:
9c:cf:f2:1f:50:c8:df:24:ce:2c:c8:43:79:95:83:2d:82:5a:
e8:17:27:a6:da:5c:c1:21:5c:59:fd:ed:1b:b2:08:66:c2:e5:
3b:f4:66:24:74:cd:0e:47:1c:38:da:5e:21:36:2a:36:e4:62:
23:ee:d7:78:3d:bf:6f:5f:3a:d1:aa:15:cc:64:a4:7d:10:7c:
c4:0f:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:56:54 2026 by rpki-client