Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: vXX/snUiP7lOCYA9t+XE/Yhe4vKIxHAs308L7q11uIg=
Subject key identifier: FA:E8:29:AD:BD:A5:33:4C:EC:BA:DA:F9:24:52:6C:BB:68:93:BE:E4
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019D9C636200F98594F262610DA584C51E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 15AF
Signing time: Fri 17 Apr 2026 17:00:51 +0000
Manifest this update: Fri 17 Apr 2026 17:00:51 +0000
Manifest next update: Sat 18 Apr 2026 17:00:51 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: Vh+DAdkch9gkEKfbuBCiGZd97u5vEUP58B/tt7Q+UL8=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:62:00:f9:85:94:f2:62:61:0d:a5:84:c5:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Apr 17 17:00:51 2026 GMT
Not After : Apr 18 17:00:51 2026 GMT
Subject: CN=fae829adbda5334cecbadaf924526cbb6893bee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:fa:6a:8d:11:50:69:70:e0:7d:f2:32:67:
5f:74:16:ce:8f:bf:58:bf:af:34:5d:2d:76:0b:9c:
8c:9b:ae:ea:f0:7f:fb:3f:69:3d:5f:e4:62:e8:db:
63:1e:19:b1:1d:19:a2:8f:20:af:01:e3:8f:1e:05:
6a:14:d0:20:7a:ba:78:23:7c:fe:5f:1c:29:94:5a:
6d:98:e2:5f:cb:95:f6:3f:0c:80:e4:d1:81:69:6c:
05:e4:1e:88:e5:de:a8:ac:e7:c3:7d:d6:bf:6c:6c:
89:35:26:7b:7d:1a:ee:58:e6:4e:1d:83:29:ac:dd:
2e:ab:35:b7:da:79:58:7e:e4:41:61:84:be:70:ce:
76:01:16:d9:5f:e8:77:a6:ce:7c:e4:52:9e:a2:b5:
8e:ef:6c:b9:27:e5:11:6c:ab:92:68:09:ba:c8:95:
bc:83:2f:23:0a:6e:84:39:a3:67:4a:25:a0:35:50:
0d:2a:24:09:f9:2b:1a:28:a3:ad:2f:9b:ae:4b:ec:
ad:97:a5:f9:76:20:96:4a:11:81:da:14:dc:b9:ef:
b4:bc:0e:c9:80:02:cc:ba:70:99:cb:3d:a4:e8:32:
f8:2d:a3:e8:42:98:b9:64:3d:b5:3b:fd:ad:3c:8f:
bb:99:b9:02:e8:c4:88:9a:fd:98:52:80:2a:73:b2:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:29:AD:BD:A5:33:4C:EC:BA:DA:F9:24:52:6C:BB:68:93:BE:E4
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:e2:31:a8:17:57:22:85:d6:a4:ee:24:15:15:33:1f:c0:
3e:87:bd:07:46:fa:a8:88:e7:5f:b5:40:b4:a0:44:f0:2f:d5:
0a:b0:4f:12:f6:17:8b:ce:e5:67:b5:2c:bf:12:99:32:93:6c:
a0:6a:b9:81:6a:ff:24:a9:7d:ed:04:1c:63:66:3f:46:93:ab:
0c:8d:04:de:82:ea:1f:0e:84:32:8e:46:e4:f3:9a:89:24:d1:
2f:19:51:f1:54:b3:b5:c3:9c:3b:3c:ca:6b:3c:8a:07:90:38:
ba:33:4a:ef:a2:79:8e:ea:5c:9b:3c:e5:47:f9:b1:7c:04:2f:
4e:79:f0:e1:b0:e8:e2:ef:d7:f5:93:3c:95:c9:1b:64:20:ba:
81:6a:27:d2:0c:ce:e4:3c:8e:9c:f3:dc:5e:02:7d:43:20:28:
11:ef:48:31:f6:8e:29:3c:46:15:57:94:36:eb:e9:2d:72:e5:
01:6d:00:93:e7:be:93:a3:32:30:44:26:c0:ce:06:f4:7b:9a:
c0:bb:f1:cc:22:b1:b3:95:c7:d9:d5:41:6d:b9:36:b9:8b:3a:
dc:cc:2c:f1:54:d3:74:e1:d7:9b:33:5e:8e:f8:5d:15:a2:15:
f9:fc:05:f1:59:fc:3e:1a:17:f9:45:57:e9:bb:8e:33:13:84:
2a:f6:7b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY2IA+YWU8mJhDaWExR5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjYwNDE3MTcwMDUxWhcNMjYwNDE4MTcwMDUxWjAzMTEwLwYDVQQD
EyhmYWU4MjlhZGJkYTUzMzRjZWNiYWRhZjkyNDUyNmNiYjY4OTNiZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QD6ao0RUGlw4H3yMmdfdBbOj79Y
v680XS12C5yMm67q8H/7P2k9X+Ri6NtjHhmxHRmijyCvAeOPHgVqFNAgerp4I3z+
XxwplFptmOJfy5X2PwyA5NGBaWwF5B6I5d6orOfDfda/bGyJNSZ7fRruWOZOHYMp
rN0uqzW32nlYfuRBYYS+cM52ARbZX+h3ps585FKeorWO72y5J+URbKuSaAm6yJW8
gy8jCm6EOaNnSiWgNVANKiQJ+SsaKKOtL5uuS+ytl6X5diCWShGB2hTcue+0vA7J
gALMunCZyz2k6DL4LaPoQpi5ZD21O/2tPI+7mbkC6MSImv2YUoAqc7J8bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFProKa29pTNM7Lra+SRSbLtok77kMB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5XiMagX
VyKF1qTuJBUVMx/APoe9B0b6qIjnX7VAtKBE8C/VCrBPEvYXi87lZ7UsvxKZMpNs
oGq5gWr/JKl97QQcY2Y/RpOrDI0E3oLqHw6EMo5G5POaiSTRLxlR8VSztcOcOzzK
azyKB5A4ujNK76J5jupcmzzlR/mxfAQvTnnw4bDo4u/X9ZM8lckbZCC6gWon0gzO
5DyOnPPcXgJ9QyAoEe9IMfaOKTxGFVeUNuvpLXLlAW0Ak+e+k6MyMEQmwM4G9Hua
wLvxzCKxs5XH2dVBbbk2uYs63Mws8VTTdOHXmzNejvhdFaIV+fwF8Vn8PhoX+UVX
6buOMxOEKvZ7VA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:44 2026 by rpki-client