Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: VZkJ87+uehxrO8b309pnOjM8mcojnXcLtUfbhh74qug=
Subject key identifier: 86:A7:F0:3E:97:F5:74:66:56:2A:E6:7F:3B:2E:D9:C1:B6:CC:07:C0
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019A4E18FA41B7533304AE9E61CC9F6A0A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 032F
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: 1dXlH0R3510i/Y8/zJkiRHxActbsbz6hfkspEJ2U3p4=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fa:41:b7:53:33:04:ae:9e:61:cc:9f:6a:0a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=86a7f03e97f57466562ae67f3b2ed9c1b6cc07c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:7b:bb:05:9c:f3:91:ce:1f:82:74:8e:f0:
1a:9c:a3:0b:f9:15:f9:f8:72:38:2b:f1:13:0e:4a:
a3:37:8f:1c:4a:81:35:23:07:a5:1e:10:7e:20:ae:
61:fd:eb:52:b6:1b:44:37:22:ec:67:f9:54:5d:47:
7a:b2:5e:07:dd:a8:44:ce:50:ea:e2:5a:24:7d:97:
4c:1a:94:2b:a1:5d:20:aa:3a:19:23:0f:40:73:8c:
3f:79:15:60:b8:3f:9e:05:cd:ca:18:23:82:67:9e:
e6:39:eb:5a:b1:be:9d:da:9b:30:4c:0b:2e:e8:84:
89:83:e1:52:2e:a6:9f:e2:0c:e2:12:68:ab:a8:3f:
7c:7a:e2:cc:5a:d2:ef:bc:b6:bb:57:d8:41:18:70:
be:f9:b7:2c:21:2c:fb:ad:3f:4a:e8:91:e0:44:c2:
80:92:b5:28:16:e3:5b:ff:c1:a5:84:e6:9c:25:37:
47:6e:4c:ba:77:37:ea:63:8b:1e:bf:c7:67:10:29:
26:f3:70:45:6e:2c:fb:43:19:c4:a8:0b:98:80:66:
18:93:0b:0b:75:d8:ef:85:dc:b5:25:1c:b1:a8:9f:
b9:77:1e:70:8a:af:7e:79:e6:ed:ff:e9:83:9d:83:
80:fb:af:03:d3:13:ee:31:d2:e0:4c:b2:77:05:6c:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:F0:3E:97:F5:74:66:56:2A:E6:7F:3B:2E:D9:C1:B6:CC:07:C0
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:a1:9d:13:3d:29:ae:b5:1a:29:c1:ed:d0:70:5b:fc:fa:
fd:0b:5b:2e:f4:04:7a:90:af:00:1e:ec:07:ce:4d:cc:bd:48:
89:b8:de:61:75:7b:07:98:1f:66:24:04:20:6a:69:f3:05:3b:
4f:40:68:6f:60:a6:93:30:7c:64:4f:de:a1:45:15:8d:82:a0:
da:99:02:bd:ce:5b:dd:4b:33:b5:22:bb:7d:6e:a5:46:22:37:
c0:e6:27:0d:4a:a6:15:57:93:20:79:37:97:60:03:d3:6c:55:
d2:1a:df:ed:21:53:8b:2f:d7:db:26:29:81:58:f7:d7:68:29:
92:5c:e1:f6:1c:1a:4d:91:fc:95:87:e1:d7:a7:aa:55:02:44:
c2:23:e3:a4:3c:f0:e9:e3:9e:ee:79:ae:f3:68:cd:c4:d2:3d:
f9:2d:74:42:f8:3e:2d:4c:15:9f:3d:01:aa:03:71:57:8a:e7:
ee:d2:ec:28:d9:1c:03:ee:88:0a:d0:af:73:b9:ce:32:99:27:
8b:dc:7f:11:14:0b:e9:12:bf:ae:26:e0:74:44:cc:f9:39:7a:
e7:ce:c3:53:47:36:db:7e:95:b0:6c:89:61:44:44:b3:e6:ed:
77:24:b7:37:fe:ea:c6:2b:26:ec:ba:78:10:bb:ff:a3:ac:76:
30:dd:d7:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPpBt1MzBK6eYcyfagpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2
MjYxMzgwHhcNMjUxMTA0MDkwMDUxWhcNMjUxMTA1MDkwMDUxWjAzMTEwLwYDVQQD
Eyg4NmE3ZjAzZTk3ZjU3NDY2NTYyYWU2N2YzYjJlZDljMWI2Y2MwN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/x7uwWc85HOH4J0jvAanKML+RX5
+HI4K/ETDkqjN48cSoE1IwelHhB+IK5h/etSthtENyLsZ/lUXUd6sl4H3ahEzlDq
4lokfZdMGpQroV0gqjoZIw9Ac4w/eRVguD+eBc3KGCOCZ57mOetasb6d2pswTAsu
6ISJg+FSLqaf4gziEmirqD98euLMWtLvvLa7V9hBGHC++bcsISz7rT9K6JHgRMKA
krUoFuNb/8GlhOacJTdHbky6dzfqY4sev8dnECkm83BFbiz7QxnEqAuYgGYYkwsL
ddjvhdy1JRyxqJ+5dx5wiq9+eebt/+mDnYOA+68D0xPuMdLgTLJ3BWxP4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIan8D6X9XRmVirmfzsu2cG2zAfAMB8GA1UdIwQY
MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt
NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw
LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8qhnRM9
Ka61GinB7dBwW/z6/QtbLvQEepCvAB7sB85NzL1IibjeYXV7B5gfZiQEIGpp8wU7
T0Bob2CmkzB8ZE/eoUUVjYKg2pkCvc5b3UsztSK7fW6lRiI3wOYnDUqmFVeTIHk3
l2AD02xV0hrf7SFTiy/X2yYpgVj312gpklzh9hwaTZH8lYfh16eqVQJEwiPjpDzw
6eOe7nmu82jNxNI9+S10Qvg+LUwVnz0BqgNxV4rn7tLsKNkcA+6ICtCvc7nOMpkn
i9x/ERQL6RK/ribgdETM+Tl6587DU0c2236VsGyJYUREs+btdyS3N/7qxism7Lp4
ELv/o6x2MN3XuA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:03 2025 by rpki-client