
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: 8k6IHoX6dh2f3FR/6lLPqaFXp8Xh8DnGtDbJeRLEWYc=
Subject key identifier: 11:0C:D3:72:DF:2A:65:82:E4:1E:8E:49:E6:C9:D1:C1:BC:32:9A:4F
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019D2816F71C0070379B0921C9ED605A7032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 104A
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: 7nqlls8tGkKKz9ztxLsEgIn/h4NdsfMaV6cL88T7j54=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:1c:00:70:37:9b:09:21:c9:ed:60:5a:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=110cd372df2a6582e41e8e49e6c9d1c1bc329a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:53:17:cd:87:69:1c:cc:ba:c9:82:9a:1c:
83:f4:5f:1c:a5:dd:1d:e4:3f:63:de:31:87:f8:05:
a6:43:a4:52:9c:41:61:24:18:bd:01:52:92:71:eb:
ac:c6:dd:62:b1:4c:a1:d3:17:f8:6d:79:87:1d:41:
a6:3d:3b:57:85:84:14:bb:a8:11:a0:08:45:f3:6d:
6a:cd:fc:2a:5b:e2:72:04:af:e9:e7:1c:9b:6b:5e:
41:f0:37:02:b2:e1:14:be:7f:92:bb:9b:44:60:df:
e5:3f:1f:80:44:5b:73:7c:f9:1f:c6:b3:d8:ec:a8:
7c:14:70:ae:ce:3d:68:4b:2c:1a:32:c8:40:ba:e3:
73:39:71:19:82:0e:4e:2d:0f:35:40:7e:91:57:4d:
8b:32:b2:81:c7:b9:02:b6:35:66:ca:af:67:4e:0d:
46:07:5a:27:b6:f5:4f:21:4d:a3:e9:35:4b:7c:7e:
6b:cd:e0:fd:97:d7:75:88:16:5c:e7:d0:1e:33:a0:
60:3a:5d:3e:09:58:65:34:0d:40:91:19:93:8e:6b:
a1:91:46:1e:dc:50:d2:f9:b6:cb:73:38:bb:d1:e4:
dd:39:c3:30:a0:d3:4b:8f:20:0c:56:67:3c:08:20:
46:9f:25:bc:66:7f:dd:77:79:fe:f0:28:3d:ec:ad:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:D3:72:DF:2A:65:82:E4:1E:8E:49:E6:C9:D1:C1:BC:32:9A:4F
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:3c:68:57:93:56:aa:10:4f:38:b1:11:82:b7:04:4e:cb:
65:29:53:0f:2e:33:72:ac:8d:93:20:e4:f7:52:68:d0:99:4f:
6b:4e:1a:e2:e0:52:6b:f6:02:69:6a:f0:2c:e4:c6:fe:86:7f:
ee:9d:b3:93:4f:46:2d:e8:8d:dc:31:11:03:3a:1e:e6:80:70:
ef:56:e2:fd:9c:05:1e:90:b5:a1:3e:e3:02:aa:d5:e7:1a:3d:
32:9a:16:e1:6d:68:fd:3f:b0:a8:9c:0e:ca:54:97:ae:08:0f:
e8:14:58:75:02:79:d5:3c:89:66:8c:d2:62:26:20:57:1f:8a:
67:8a:5c:e4:36:5c:14:be:41:2f:54:75:51:ae:0b:ce:48:a7:
b2:58:57:b4:45:a7:0e:6c:1d:73:02:65:57:09:3b:05:e7:d3:
71:7d:d2:75:68:14:59:09:aa:cf:50:05:e5:bf:ce:52:73:e7:
28:a0:18:6b:6c:0b:68:e4:67:25:dc:eb:9d:16:97:58:41:01:
9b:31:1d:94:ec:60:46:3a:a7:a7:0f:11:c6:b7:e5:da:25:c5:
9e:4b:23:7d:a7:16:b8:1a:86:60:2a:13:73:b4:c6:88:fa:4f:
fc:04:07:a9:48:d3:09:8e:94:6a:db:d8:00:4b:e0:65:89:24:
9f:6a:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:08 2026 by rpki-client