Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: Q9kD8r7C3mjXsNn220ua7pKxzV9QKbTDZ5LBvJLyTo0=
Subject key identifier: 6A:31:3F:6A:E8:26:B6:73:62:2C:7F:D2:54:27:35:7E:FA:A1:BD:91
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019D9BF547DB2437CC0B64B88D8EFA6B55E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 15:00:36 +0000
Manifest this update: Fri 17 Apr 2026 15:00:36 +0000
Manifest next update: Sat 18 Apr 2026 15:00:36 +0000
Files and hashes: 1: 4Wrio_4iNnpl1Y6QGrJWPm_-8xA.roa (hash: 6jBbtoStgIk6zifFLk4lujFoBwI6HFMnQNdG0panh3s=)
2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: j7poimDNs+RNnwJkuMT9/zWEcMytWS08Fe3r8QCqOJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:47:db:24:37:cc:0b:64:b8:8d:8e:fa:6b:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Apr 17 15:00:36 2026 GMT
Not After : Apr 18 15:00:36 2026 GMT
Subject: CN=6a313f6ae826b673622c7fd25427357efaa1bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:b5:77:1b:96:12:10:42:97:d7:ec:02:ff:
25:9d:d8:c8:04:bb:fe:4d:d4:a6:cb:95:75:e6:0b:
82:24:7b:4b:1b:b2:c3:45:f5:46:e1:a6:64:2b:1d:
e5:c5:f0:26:d2:d4:31:c5:1b:c4:25:fc:3b:42:05:
bb:0f:2e:30:1d:1b:7f:8b:bc:33:33:60:20:48:9b:
62:45:3e:8e:aa:1d:cd:11:1a:ea:c7:63:ba:03:2a:
be:a3:16:b0:22:63:d0:e0:46:9d:19:4b:83:46:36:
04:da:5b:28:62:04:e3:99:a4:38:1a:fc:f2:55:10:
73:45:01:1a:02:6d:bb:d8:ce:81:e9:bf:b0:1e:b3:
39:db:52:a5:1c:95:f1:9a:0d:dc:5b:18:08:92:6d:
fc:b7:8a:31:70:7c:aa:ab:bb:70:f2:53:ed:df:50:
19:9c:f4:a7:28:61:c5:ec:75:f7:a5:dc:3e:1e:14:
63:78:7a:61:33:34:03:c4:b4:11:58:58:68:93:46:
49:49:9e:f1:a1:c6:d0:40:f3:f0:5e:1e:2f:28:d0:
6a:39:fc:f0:99:cf:de:e3:c5:74:ba:f2:88:3f:bd:
12:3c:9b:26:34:7d:de:80:fe:3d:fc:19:91:ff:bf:
a1:c2:c4:a9:28:28:c7:e9:3c:4a:e4:e9:f6:dd:6a:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:3F:6A:E8:26:B6:73:62:2C:7F:D2:54:27:35:7E:FA:A1:BD:91
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:52:4e:fa:c9:8d:8b:c7:01:3f:fe:b0:ec:af:59:c7:36:3f:
91:ef:9d:dd:07:27:25:d8:b5:3b:59:9d:e2:99:e5:50:23:45:
ee:7f:bf:3f:f6:5f:38:6d:68:f1:fe:a6:51:59:af:b9:99:b5:
34:e7:0b:8b:d2:bf:60:14:1b:22:0e:34:ac:34:75:92:9f:14:
a3:bb:70:7b:9d:2f:a4:c1:44:bd:8d:fe:e4:20:fe:b6:53:00:
34:aa:7b:5c:60:10:43:25:6d:ce:98:2c:9f:9f:6b:c7:f1:1f:
cc:a5:23:0c:9c:10:fd:45:9b:b6:f6:49:b6:87:e0:0b:1a:13:
cc:76:90:8f:34:67:6b:96:2e:ea:96:d5:64:bd:a3:ec:34:db:
9b:15:7e:dd:57:44:ea:02:75:10:0d:8a:35:32:12:6b:a0:ac:
33:6b:e0:12:86:77:9e:0c:94:9e:7f:09:4b:3d:50:bb:c2:4c:
a1:7e:6a:3e:94:ce:46:f2:58:16:50:68:98:b5:4e:c8:b2:51:
48:41:f4:5b:8f:40:81:26:7f:03:26:87:be:be:de:d8:d2:e9:
3f:ad:2f:88:cf:f9:e0:36:b6:54:e5:11:b1:d9:c7:56:96:bc:
e6:7a:a7:f4:54:ec:c7:67:52:46:87:3a:0f:79:d5:4c:21:36:
6d:85:ab:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9UfbJDfMC2S4jY76a1XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjYwNDE3MTUwMDM2WhcNMjYwNDE4MTUwMDM2WjAzMTEwLwYDVQQD
Eyg2YTMxM2Y2YWU4MjZiNjczNjIyYzdmZDI1NDI3MzU3ZWZhYTFiZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr21dxuWEhBCl9fsAv8lndjIBLv+
TdSmy5V15guCJHtLG7LDRfVG4aZkKx3lxfAm0tQxxRvEJfw7QgW7Dy4wHRt/i7wz
M2AgSJtiRT6Oqh3NERrqx2O6Ayq+oxawImPQ4EadGUuDRjYE2lsoYgTjmaQ4Gvzy
VRBzRQEaAm272M6B6b+wHrM521KlHJXxmg3cWxgIkm38t4oxcHyqq7tw8lPt31AZ
nPSnKGHF7HX3pdw+HhRjeHphMzQDxLQRWFhok0ZJSZ7xocbQQPPwXh4vKNBqOfzw
mc/e48V0uvKIP70SPJsmNH3egP49/BmR/7+hwsSpKCjH6TxK5On23WqceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoxP2roJrZzYix/0lQnNX76ob2RMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVJO+smN
i8cBP/6w7K9ZxzY/ke+d3QcnJdi1O1md4pnlUCNF7n+/P/ZfOG1o8f6mUVmvuZm1
NOcLi9K/YBQbIg40rDR1kp8Uo7twe50vpMFEvY3+5CD+tlMANKp7XGAQQyVtzpgs
n59rx/EfzKUjDJwQ/UWbtvZJtofgCxoTzHaQjzRna5Yu6pbVZL2j7DTbmxV+3VdE
6gJ1EA2KNTISa6CsM2vgEoZ3ngyUnn8JSz1Qu8JMoX5qPpTORvJYFlBomLVOyLJR
SEH0W49AgSZ/AyaHvr7e2NLpP60viM/54Da2VOURsdnHVpa85nqn9FTsx2dSRoc6
D3nVTCE2bYWrEA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:16 2026 by rpki-client