Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: /RMmDU+Na0hEkSXHxl+JXJJadPGm8NfrulfMWcJyg5o=
Subject key identifier: 63:4D:1F:A7:2B:AC:4B:12:9C:FF:75:00:B6:7F:99:E7:DF:56:83:57
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019CAA58C5BB7A22E7E761930F99F7728EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0A94
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: 4mgKt3hoGs3iG4a6JMxQlAD+xcIyb/fyrj0EjzkITWM=)
2: ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa (hash: vGSSEZMU1rC38w1BEnBzc1B2fso5PDq2a8Oi71K6PZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c5:bb:7a:22:e7:e7:61:93:0f:99:f7:72:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=634d1fa72bac4b129cff7500b67f99e7df568357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:ca:ed:e5:92:23:56:67:fd:e8:40:2c:2d:
d8:f5:aa:95:d2:7b:93:af:33:cf:0a:40:44:40:09:
cb:82:ae:f9:9d:fa:36:39:96:1c:9a:c3:3a:d6:14:
29:0c:71:ba:98:f4:b0:08:64:0a:e1:72:d1:d0:bb:
ac:32:db:4e:90:da:fc:72:63:c9:d9:93:da:7c:ac:
b9:7c:e7:fe:2d:8a:9c:b2:0c:b5:c9:6d:b2:44:66:
6d:63:9c:b7:f7:dd:d7:31:ad:09:d5:75:ac:8f:54:
bc:3e:ed:ee:c6:19:19:68:36:b3:f6:5f:bc:01:81:
7c:db:e7:0e:3b:7b:60:84:88:72:b9:0b:8f:cd:31:
9b:39:7c:bf:34:b0:9d:5d:27:ac:df:73:c5:c5:68:
9c:2f:33:87:6a:7a:f5:8b:49:30:a1:92:4f:05:52:
85:af:6e:f0:91:57:a2:e3:f0:50:e6:36:bb:1c:73:
f7:ab:ca:b9:94:94:a1:78:d0:18:6e:37:f4:a3:23:
0f:d9:92:60:58:5e:23:2d:24:b4:45:78:55:b8:69:
27:f3:37:29:13:82:e4:9c:40:a9:af:15:ce:b7:01:
06:f4:44:ea:cf:cf:e4:fe:86:24:03:1e:0f:fe:c1:
41:8a:3d:87:9a:8b:93:aa:f1:ea:5e:23:4b:fc:f7:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:1F:A7:2B:AC:4B:12:9C:FF:75:00:B6:7F:99:E7:DF:56:83:57
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:19:fb:2c:e2:9f:c2:88:52:0a:fa:fc:f3:c4:eb:22:dc:09:
37:9e:7c:f4:bf:b4:52:30:de:7e:d2:de:48:08:21:04:e0:ee:
1a:59:0e:74:ec:de:56:a6:e2:15:39:33:56:a1:fd:d8:f9:cf:
67:c4:d8:72:db:7b:77:00:90:c5:d0:5e:c9:79:76:f9:95:3a:
ab:1a:d5:4a:ac:b3:0e:7e:2d:0a:78:75:af:c8:54:cd:a5:0e:
64:af:84:33:7c:c7:41:36:bb:19:3a:61:7f:66:63:9a:7a:7b:
99:ca:15:8f:0a:0e:15:41:5f:b8:8e:2b:3c:15:d6:37:76:5e:
16:97:b8:cd:82:6f:aa:86:8a:7e:de:57:8f:c7:09:1b:7d:d9:
c4:f3:51:b9:46:36:63:27:84:24:06:6e:82:56:5f:ad:3d:2f:
7b:2d:a1:41:b7:c2:1a:f2:d1:12:04:b0:98:ac:ad:a6:80:ce:
8f:a8:ad:f7:c1:72:2f:b2:ce:f9:71:9f:1b:8d:9c:94:d7:b4:
7f:2c:fe:65:82:30:ac:cb:78:cc:52:80:66:f6:40:bb:e1:37:
01:0d:71:f3:17:c1:6b:7d:8e:43:36:bf:21:37:54:42:ef:a3:
3a:9f:0c:97:c1:65:90:30:86:69:9e:51:e4:db:45:5c:33:8c:
e7:c4:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:08 2026 by rpki-client