Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: K6HUSIxHOcJ+rT7Rb7PRi0Pk2j1GFiw7WFB6xQKKKa0=
Subject key identifier: 11:38:FE:4B:96:0A:F4:BA:69:07:7E:0E:82:E4:42:9C:50:8B:3F:E7
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019CACEBBC47A99879598889C0E5EFDDF0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1533
Signing time: Mon 02 Mar 2026 05:00:56 +0000
Manifest this update: Mon 02 Mar 2026 05:00:56 +0000
Manifest next update: Tue 03 Mar 2026 05:00:56 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: 1FBmJ/FS91B9QFJpxYxUJa9BSN5r2LnpSxqGKI1T79w=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:bc:47:a9:98:79:59:88:89:c0:e5:ef:dd:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Mar 2 05:00:56 2026 GMT
Not After : Mar 3 05:00:56 2026 GMT
Subject: CN=1138fe4b960af4ba69077e0e82e4429c508b3fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:3b:84:e4:7e:06:42:97:b3:5f:b0:a1:25:
30:ee:c6:e7:a5:bb:c9:06:db:b5:b2:47:df:bd:db:
5a:c6:40:15:2c:a4:26:d5:ee:21:70:39:b7:a5:db:
0a:62:a3:2e:c2:d6:7a:ce:e6:8a:24:6d:b3:99:67:
8e:76:26:27:fa:33:92:74:01:73:74:c7:d0:f9:c9:
72:41:5f:8a:82:a5:7a:4e:68:fd:6d:41:83:b8:fc:
e7:4d:4e:9d:ac:aa:1c:3b:14:8e:b4:2e:95:0b:ff:
86:e6:77:cc:8e:a2:4e:19:7a:61:db:42:b9:78:97:
87:93:58:8a:95:46:1a:5c:79:10:60:4f:4c:c1:6f:
25:8a:73:c9:7b:12:56:ea:90:01:d5:a3:32:08:b3:
c7:c9:d7:7c:13:06:fd:96:7c:46:a7:df:d5:9e:bc:
f6:e5:32:eb:ba:ff:00:8b:97:bb:12:8a:b3:fc:f1:
2f:03:b5:29:d4:47:5f:02:07:c1:d6:50:d4:e7:32:
23:f1:db:af:29:f4:6c:ec:8b:43:c9:40:65:cd:27:
ff:96:3c:86:83:5a:99:ad:d8:ae:98:ed:3c:f9:bb:
22:06:79:cd:3a:d6:f6:c9:77:9e:26:70:de:0e:90:
2e:b4:9b:0c:0b:ba:4f:93:27:8a:e5:ff:e9:0e:7f:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:FE:4B:96:0A:F4:BA:69:07:7E:0E:82:E4:42:9C:50:8B:3F:E7
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:dd:cf:86:98:9c:2a:ec:ba:b2:49:63:05:13:5a:d4:a6:
63:09:db:9c:af:ad:89:55:47:30:ce:7c:3c:a8:0d:8e:e4:e1:
a4:55:d5:28:de:9d:76:a5:eb:96:b2:c2:cc:b0:8f:2b:df:62:
f0:94:07:9b:bd:3b:14:84:25:12:ec:b6:8e:08:da:5f:5c:07:
6a:19:92:fb:fc:4a:97:f7:13:43:1d:1f:16:95:f0:2d:51:fd:
f9:24:59:7d:95:4c:bb:d9:fb:a1:20:b6:59:ca:46:91:1c:5c:
b1:07:04:ef:1b:f4:83:1b:ce:b8:8f:8e:81:7d:d9:8c:39:2f:
0e:bc:dd:35:4c:4f:2a:9e:f4:cf:91:70:1e:08:c2:5e:72:07:
30:a1:26:76:79:f9:f4:48:a6:b6:00:52:85:85:f1:67:aa:af:
69:2e:df:6b:89:27:59:db:ec:8b:90:20:6d:53:d4:3d:ab:f6:
98:c1:01:17:5e:a8:2f:cb:59:2e:f8:c0:f6:fd:e1:2a:57:83:
74:7c:a5:99:84:fa:c8:86:bb:17:ea:9e:b2:ac:e5:78:c4:c8:
97:19:0f:60:f1:ba:6b:6b:41:df:af:f0:c4:a3:84:00:eb:5a:
be:ca:4c:44:6f:e0:59:93:fe:5c:ec:49:f2:0c:7c:53:d2:c1:
a0:10:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:23 2026 by rpki-client