Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: tNoNfLpUm67SGAAFB/+97tkWDIa+m+U0bSI93XXzU68=
Subject key identifier: 59:E4:E1:44:E2:41:4D:11:65:45:6D:08:E9:D8:84:D3:B2:67:7E:56
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019F93927ECFB81E99AFDAD5758BE6F0CD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 0AAE
Signing time: Fri 24 Jul 2026 10:01:18 +0000
Manifest this update: Fri 24 Jul 2026 10:01:18 +0000
Manifest next update: Sat 25 Jul 2026 10:01:18 +0000
Files and hashes: 1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: rpLmUMJ+CbSo6eu1SLSTzkrHp290P99ph36VMFMPcEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:7e:cf:b8:1e:99:af:da:d5:75:8b:e6:f0:cd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Jul 24 10:01:18 2026 GMT
Not After : Jul 25 10:01:18 2026 GMT
Subject: CN=59e4e144e2414d1165456d08e9d884d3b2677e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:65:6e:06:4f:a4:b6:6d:5e:5c:17:40:84:
ce:b2:cf:cb:4b:70:dd:9a:83:e5:43:c0:c1:fc:17:
21:de:f8:80:59:11:1a:2b:80:00:ed:c0:7c:3e:42:
ee:b5:88:20:01:f4:f8:c6:2d:3c:ab:7b:df:f3:42:
b0:a9:4a:97:63:a1:20:ca:4f:e9:78:c0:12:01:b1:
b7:a2:0e:91:25:7b:65:f3:13:48:71:6d:9a:52:f9:
a9:97:f8:7e:70:56:56:67:d6:8e:f8:ea:ad:f4:01:
0b:fd:fc:df:65:d1:79:4e:8c:b8:94:89:69:ad:21:
29:50:16:0d:2e:8e:b0:5c:d9:8c:fd:24:92:fa:c6:
73:f0:fc:6e:b5:9f:d0:c8:8d:5d:2a:b8:ec:8d:43:
f9:2e:ae:d3:0e:a3:ce:07:65:5d:94:a3:0a:9e:32:
05:4a:ac:93:59:7e:f4:78:34:ff:ce:fc:5d:35:24:
a4:6c:55:79:89:ba:13:7e:81:32:fd:04:0d:1e:fc:
a2:8c:5c:8d:0f:4f:f6:df:17:2e:3f:48:c8:f8:fc:
a6:88:0c:58:ea:43:7f:8c:c7:ab:c0:1d:f4:e4:a6:
d3:a1:de:f1:4c:6f:a0:78:af:f6:42:87:9f:95:83:
73:22:d2:ab:07:56:4d:3f:54:8e:3d:a9:09:16:d2:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:E1:44:E2:41:4D:11:65:45:6D:08:E9:D8:84:D3:B2:67:7E:56
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:fb:a5:5b:06:c0:95:40:49:47:75:21:3b:b0:b9:c8:cc:
8d:98:c3:f0:3a:f0:32:71:5e:4f:5d:ad:8f:ec:54:52:3f:57:
64:a4:3d:b1:33:82:75:1c:e6:3d:f8:38:bf:74:18:02:d4:e0:
44:99:5a:d6:1d:5d:83:55:8e:2a:f4:c5:9a:d0:6c:0a:52:43:
27:97:15:e1:58:30:3a:5b:92:d1:97:15:90:89:c6:05:9e:25:
9f:d0:3e:9d:ac:4f:dd:d7:ad:46:1d:5d:c7:0b:83:8d:18:4d:
ae:59:47:7e:52:6c:89:4c:ef:52:81:e5:3f:e2:49:27:4a:11:
71:14:5f:e9:f6:2e:eb:19:67:ba:58:d6:7e:89:c2:89:04:f4:
8d:0e:15:ac:c1:63:61:9a:fd:ad:ee:1f:9a:73:e6:a4:f3:1c:
5a:cf:bc:fd:f9:41:64:2e:7c:81:a0:f4:9f:f0:df:74:7b:17:
f1:7a:07:3a:56:f4:fe:47:db:e3:95:af:34:7c:16:99:f9:2e:
ba:bf:f0:a8:45:3c:c2:1a:06:c3:03:7b:b8:55:ea:65:09:ba:
a8:ef:eb:fd:1f:2d:12:73:57:f0:98:fd:19:a9:ef:21:14:ce:
3d:50:24:fd:bb:56:9c:3e:41:54:cc:4e:aa:ad:b9:81:e2:92:
93:8f:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:58 2026 by rpki-client