Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: p8lDG15/n0IWOs0pj9lUsnbHWu9I+n7hbgml0X7xGrw=
Subject key identifier: 62:C3:EC:9C:B5:A7:87:25:28:5B:2D:81:C2:2D:11:11:4F:89:64:86
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019CAC7E240F948C90071DB4A47FDBF32070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: 4Wrio_4iNnpl1Y6QGrJWPm_-8xA.roa (hash: 6jBbtoStgIk6zifFLk4lujFoBwI6HFMnQNdG0panh3s=)
2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: 1ds1cTmfw8SHvJHbXtT1n77pSSBUaKdeHn9vu2TjIwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:24:0f:94:8c:90:07:1d:b4:a4:7f:db:f3:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=62c3ec9cb5a78725285b2d81c22d11114f896486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:7c:f0:61:0c:76:b6:ec:63:27:e0:df:dc:
1c:fc:3c:57:ce:ee:01:a0:bd:12:00:38:15:0d:b0:
bb:b8:c9:d7:f9:3a:b7:d3:ae:cf:00:a3:64:8a:ae:
9e:d4:99:e4:93:16:1d:95:b2:a5:b3:84:c2:c0:04:
df:d3:d8:22:8c:5e:a9:2e:36:31:13:cc:8a:8d:87:
9e:3f:13:bd:f6:4c:cd:b4:bf:fb:10:65:e4:4d:78:
f9:00:e1:b6:c2:6d:11:10:60:34:df:66:41:af:2b:
67:02:8f:49:06:28:30:fb:7c:0e:85:76:12:06:95:
e3:94:bb:16:3b:1f:a8:02:e9:08:0e:18:5a:6a:a2:
7b:e8:97:f6:a8:cf:4a:2e:62:ec:7b:57:ce:90:aa:
ed:b9:30:33:ff:07:26:b3:5f:25:ce:f2:ee:35:ae:
21:e5:45:1a:a6:e3:9c:03:72:47:24:da:c8:47:32:
1c:69:de:63:d7:2f:39:d9:d3:42:8e:3d:87:ad:1c:
c9:f5:7c:f1:57:16:77:c4:b4:4b:66:d9:4f:e8:c7:
a2:87:46:c1:6f:c2:9e:5e:2c:d0:7b:3c:39:d8:70:
ce:43:c2:99:de:2b:56:02:58:02:23:24:ee:a5:7e:
0f:86:cf:4f:c3:7b:31:13:30:92:3d:0f:03:17:12:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:EC:9C:B5:A7:87:25:28:5B:2D:81:C2:2D:11:11:4F:89:64:86
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:d3:45:0e:20:ae:ed:7a:b4:f0:18:99:61:34:06:6c:48:
4a:6d:f7:4b:81:33:b7:55:ae:e0:e0:15:3e:1f:17:78:c9:7b:
77:b8:1d:88:00:65:d7:c1:75:e7:82:b3:3b:b2:4e:12:66:c7:
cb:d7:4f:f7:e1:1a:66:89:c2:c9:7f:19:11:42:6c:aa:41:74:
aa:f2:29:9b:34:68:2a:54:a9:66:4a:08:db:c6:2d:bd:82:58:
e4:35:e2:86:6e:60:ce:1f:05:68:7b:1c:fb:f0:a7:3a:80:0c:
8b:7a:78:53:da:4c:63:43:a2:db:0b:d2:3b:9b:2b:1c:08:7b:
74:a4:3c:55:38:74:2e:22:99:e0:b5:21:95:23:7b:e4:4d:bd:
1b:0d:2c:da:18:84:48:2d:17:63:3f:14:62:5d:5a:e7:67:a2:
77:fc:4c:78:71:fb:59:3a:67:eb:a1:95:87:66:27:a3:6a:d5:
0b:f0:a3:56:d4:ee:e9:92:a6:c7:71:a9:8e:47:c2:71:43:5a:
15:d8:d4:4f:92:22:87:d4:b2:9c:93:c5:7b:71:b4:bc:d9:7d:
5a:fe:f7:9d:40:1e:7b:50:00:9a:0f:45:48:6e:25:b9:89:3c:
31:c0:61:8f:09:b8:ec:5c:0f:fc:14:fa:ce:b5:22:24:a4:96:
80:7f:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:24 2026 by rpki-client