Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: z6WvftkunD6n2SwXtLxRXgOnSVTpoT8GBkAF0X2m7IY=
Subject key identifier: 44:4F:C5:1C:DF:1F:39:77:02:F0:D1:C4:B5:D4:AD:60:66:C1:8D:9A
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019ED34F3B74699CCD19EB2F63C4BA3C2979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1650
Signing time: Wed 17 Jun 2026 02:00:45 +0000
Manifest this update: Wed 17 Jun 2026 02:00:45 +0000
Manifest next update: Thu 18 Jun 2026 02:00:45 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: 4tcZW2nrCkJRKj8di+sQHkUdBE1DGh0Z9v9qMO8ciKQ=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:3b:74:69:9c:cd:19:eb:2f:63:c4:ba:3c:29:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Jun 17 02:00:45 2026 GMT
Not After : Jun 18 02:00:45 2026 GMT
Subject: CN=444fc51cdf1f397702f0d1c4b5d4ad6066c18d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:50:1d:52:df:b3:34:37:33:ea:18:1e:15:
91:ca:d7:02:10:8a:80:7c:8d:41:e8:25:d4:9c:18:
62:6d:dd:f6:ae:66:a5:83:e4:b5:86:84:49:6b:50:
f2:e9:c5:ad:bb:47:57:37:3b:fe:24:45:eb:6c:28:
24:7d:aa:6f:74:cb:fd:60:7e:a1:1e:9d:7f:1d:7e:
64:ad:40:5f:99:eb:43:60:25:c1:62:93:e2:87:67:
e4:2a:7c:03:5e:f6:35:28:9a:0e:df:07:5f:d5:63:
74:e0:cb:e8:13:b9:b7:5b:30:08:fc:70:7f:ff:5a:
99:c7:9b:97:3d:dd:37:c0:fd:db:de:8b:d1:22:f8:
04:01:a7:a0:6a:e4:5d:c7:92:cd:aa:52:5c:19:81:
0f:56:9a:fe:37:e5:a5:db:28:99:56:a4:4c:0e:a1:
1e:ea:11:2c:7d:df:18:5c:3f:62:59:4f:48:40:6f:
bd:71:94:0e:1a:df:09:d3:c5:6e:ee:ad:d8:c2:90:
c7:8a:45:89:2d:9f:51:e3:a0:b1:c0:49:e3:56:d2:
b0:7b:79:e7:a6:12:16:02:69:22:03:56:56:f4:0f:
a1:97:18:04:b9:aa:8e:f6:a6:f9:e5:8d:3a:09:fd:
5a:ab:b3:2b:e6:44:ae:d8:7a:6c:8e:a9:2e:68:2c:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4F:C5:1C:DF:1F:39:77:02:F0:D1:C4:B5:D4:AD:60:66:C1:8D:9A
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:c2:ca:b1:a9:23:be:c2:14:8b:ce:36:b3:c8:66:5d:3c:
69:96:12:98:aa:a8:6c:e6:53:93:fb:96:08:45:7d:d7:b5:6c:
54:ab:ca:81:82:43:98:b5:7c:40:0e:89:6f:e3:15:7e:56:72:
4e:14:24:e9:39:b2:a8:96:8b:aa:c4:85:47:6f:6b:d9:78:bd:
ae:12:33:a1:2b:85:85:87:b0:7a:7c:61:33:14:07:99:38:6c:
60:ac:4d:87:68:bd:3f:bf:e8:ff:a1:a6:0a:1e:60:b3:46:58:
f6:b6:db:8c:86:a0:b5:08:75:94:b9:70:73:77:2b:38:f1:17:
c9:86:df:dd:e5:c7:10:2a:93:e0:ba:ca:81:9d:4e:42:eb:7c:
25:2d:da:5a:74:68:b7:7d:89:5c:19:56:c5:a4:df:35:f2:4f:
23:58:9b:ea:24:9b:cd:a4:07:75:cd:d4:db:9a:4c:81:d5:dc:
9f:01:4d:7b:ce:53:98:c5:ad:d7:e0:5e:7a:2a:9d:bd:84:22:
25:54:28:6e:0a:50:5e:cd:10:47:e0:b6:17:f4:5e:37:5e:7a:
fa:0c:7c:27:03:97:37:7d:2b:b5:91:19:ff:40:84:0b:f8:9b:
5c:ac:18:99:b2:88:88:e4:7e:dc:d6:3d:18:34:47:48:ff:30:
13:dd:af:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TTzt0aZzNGesvY8S6PCl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjYwNjE3MDIwMDQ1WhcNMjYwNjE4MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg0NDRmYzUxY2RmMWYzOTc3MDJmMGQxYzRiNWQ0YWQ2MDY2YzE4ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61QHVLfszQ3M+oYHhWRytcCEIqA
fI1B6CXUnBhibd32rmalg+S1hoRJa1Dy6cWtu0dXNzv+JEXrbCgkfapvdMv9YH6h
Hp1/HX5krUBfmetDYCXBYpPih2fkKnwDXvY1KJoO3wdf1WN04MvoE7m3WzAI/HB/
/1qZx5uXPd03wP3b3ovRIvgEAaegauRdx5LNqlJcGYEPVpr+N+Wl2yiZVqRMDqEe
6hEsfd8YXD9iWU9IQG+9cZQOGt8J08Vu7q3YwpDHikWJLZ9R46CxwEnjVtKwe3nn
phIWAmkiA1ZW9A+hlxgEuaqO9qb55Y06Cf1aq7Mr5kSu2HpsjqkuaCxHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERPxRzfHzl3AvDRxLXUrWBmwY2aMB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFnCyrGp
I77CFIvONrPIZl08aZYSmKqobOZTk/uWCEV917VsVKvKgYJDmLV8QA6Jb+MVflZy
ThQk6TmyqJaLqsSFR29r2Xi9rhIzoSuFhYewenxhMxQHmThsYKxNh2i9P7/o/6Gm
Ch5gs0ZY9rbbjIagtQh1lLlwc3crOPEXyYbf3eXHECqT4LrKgZ1OQut8JS3aWnRo
t32JXBlWxaTfNfJPI1ib6iSbzaQHdc3U25pMgdXcnwFNe85TmMWt1+BeeiqdvYQi
JVQobgpQXs0QR+C2F/ReN156+gx8JwOXN30rtZEZ/0CEC/ibXKwYmbKIiOR+3NY9
GDRHSP8wE92vkw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:56:14 2026 by rpki-client