Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: ZjVDfNPqCR6Bf+01QNN46JoROR5NC2Mu3Eb2Vpr0z74=
Subject key identifier: 37:6C:E5:7F:AE:AD:7F:AC:A0:FD:04:45:81:B7:F2:06:92:A3:93:0B
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019D9AAB7CB8009C157C22259F81E2A2D4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0B11
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: dKiSMsNB8FfMBsj1/8lPXaopi+l2jPtJ4m7pClwud48=)
2: nWV2WhqZ994NDP00nWeEB2vRwb0.roa (hash: Cup9ltThtrCZ1UgDAuujOsPqhg/Kcg7e9Ea+9DWDXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7c:b8:00:9c:15:7c:22:25:9f:81:e2:a2:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=376ce57faead7faca0fd044581b7f20692a3930b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:4f:8d:8a:56:53:5b:88:01:44:9d:25:56:
fa:0f:66:c4:20:91:15:cb:7f:49:19:9a:ef:ba:32:
07:10:ef:3d:4a:d8:e8:62:3e:f2:7d:be:ed:e2:15:
e5:66:83:04:9a:06:e8:38:83:9b:54:a3:ae:6a:3a:
2b:5d:8d:fc:7c:f9:ba:b4:32:11:bd:4c:15:43:e3:
97:ee:71:c3:0d:8a:82:de:d8:d1:d2:79:3c:2c:3c:
bd:b3:f8:8c:33:61:63:e8:53:75:c1:e8:e4:3e:fa:
0f:11:d2:25:f3:e7:48:f6:d5:38:27:d3:a9:20:0e:
17:01:d8:86:70:91:0c:71:29:99:af:8f:01:95:50:
8f:ff:12:bc:1a:96:2c:ef:3f:c2:52:67:14:1b:72:
19:69:2b:c9:55:79:90:12:89:be:f8:db:96:f2:ae:
9e:7a:1d:7a:24:70:97:e1:e7:ed:98:e2:b2:a2:52:
5d:45:52:14:ad:20:fc:37:81:f7:d0:c7:92:00:89:
4a:7c:df:02:41:70:2f:f7:c5:40:c5:41:3a:b6:98:
1e:c2:90:2e:cc:01:e7:72:8b:f1:42:5b:bc:2e:23:
63:c2:5e:ff:9e:9b:9c:a6:28:3a:8a:62:a1:10:03:
2f:17:49:6a:06:0e:8b:ee:10:2f:a3:58:58:ab:d9:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:E5:7F:AE:AD:7F:AC:A0:FD:04:45:81:B7:F2:06:92:A3:93:0B
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:7c:1d:b7:a7:79:94:82:4d:97:0a:20:80:9a:40:7d:52:
40:f9:8b:b5:b7:42:71:59:44:9b:2c:d8:8a:b0:51:22:e4:8a:
99:f8:e6:47:6b:ea:ec:0f:66:cf:df:fe:b3:cd:a1:77:a4:57:
a1:d6:2f:fd:62:40:ab:86:2f:6d:7b:6b:00:a2:e5:2d:a1:a4:
48:f5:04:ed:49:d6:23:f5:a8:55:78:1a:04:bc:e2:70:1a:77:
ce:4e:2a:3c:30:41:3f:18:00:bf:38:19:05:eb:dd:2b:19:2c:
8b:fb:35:1f:64:45:6e:64:b1:e5:8f:d2:89:c2:7c:55:59:15:
12:40:85:38:1d:66:08:59:7a:42:6e:be:8a:4a:a7:cf:2c:ed:
fa:32:1a:a5:6c:19:a8:d6:ed:87:b9:b0:d6:cf:83:27:6c:25:
9e:4d:63:bc:70:70:4a:5c:b2:d0:0f:72:cb:61:91:c8:72:56:
78:b1:e8:17:41:0f:01:9b:75:86:7d:03:00:6f:cf:de:8a:7e:
4f:44:5e:55:33:4f:c0:4c:70:f5:e5:c2:d5:5c:b2:c5:ca:db:
f8:ba:9b:4c:13:cc:ac:2a:6c:68:cd:ef:92:44:e7:e3:37:20:
14:6a:38:f0:87:a4:87:9b:b6:bf:30:71:52:52:64:e8:06:8e:
2a:ce:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:39 2026 by rpki-client