Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: kLgt4v8oitRDlc/DIy3C+AivROIJKtQTvWXaCPDEYlI=
Subject key identifier: 81:C6:97:98:2C:39:B2:BA:01:F2:1B:18:5F:1B:58:17:2A:E2:D8:DD
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019D9D3EDCDD7A27CA432F0A164F62BBEE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 04E6
Signing time: Fri 17 Apr 2026 21:00:35 +0000
Manifest this update: Fri 17 Apr 2026 21:00:35 +0000
Manifest next update: Sat 18 Apr 2026 21:00:35 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: TRT9xLiFOh4ifa2HqV13RHjo5dhpOW/wTkN03fNPols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:dc:dd:7a:27:ca:43:2f:0a:16:4f:62:bb:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Apr 17 21:00:35 2026 GMT
Not After : Apr 18 21:00:35 2026 GMT
Subject: CN=81c697982c39b2ba01f21b185f1b58172ae2d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:21:53:38:e5:a6:ba:2f:62:92:b4:7f:21:
d2:51:74:e2:54:a7:cc:a6:8b:f1:7c:6d:b4:a2:d8:
6d:53:cc:b9:81:0e:19:0d:7f:3d:9e:a0:73:4c:65:
a5:ac:b2:1b:5c:03:9a:1a:86:16:a9:cf:62:10:7f:
c6:3b:be:16:3a:c9:70:04:7f:ff:74:1e:e2:e4:78:
60:1e:a3:01:67:8e:31:da:a3:20:90:c4:c9:ab:6d:
25:6e:2f:98:30:30:d7:4f:69:3a:ab:63:2d:c3:38:
77:63:d9:5e:44:af:86:53:64:87:6f:83:aa:d5:0c:
b7:76:4b:e9:36:c0:5c:a6:40:14:7e:e2:03:11:fc:
66:41:66:85:a1:ee:e9:dd:6f:ef:99:4d:ac:ef:97:
cb:72:e4:1f:6a:7e:85:7b:cd:93:42:ad:f0:33:6b:
5f:cc:97:26:a0:6c:08:12:ba:5f:5f:22:fb:59:51:
a5:50:3d:d7:65:ae:3e:e6:06:a4:a1:0a:2d:ab:25:
33:c2:f3:54:d8:19:6c:47:26:bd:c7:72:93:fb:c7:
60:8c:2b:44:f3:ef:1d:00:ff:a5:ee:12:46:58:63:
0e:51:67:32:64:d2:f6:77:f0:d5:c9:0b:10:b6:05:
88:0e:b1:61:ae:01:36:60:d7:b9:06:8f:55:63:26:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:97:98:2C:39:B2:BA:01:F2:1B:18:5F:1B:58:17:2A:E2:D8:DD
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a7:d4:ff:44:c1:0e:6b:6a:b4:6a:48:43:f7:90:90:09:e4:
cd:2d:17:43:4c:ce:bd:4f:8b:3e:0f:d9:b5:1b:91:50:f3:46:
40:13:65:15:3c:ef:e9:8a:fd:45:07:4c:25:21:c9:c5:12:b5:
79:ea:8f:e4:f2:80:2e:27:3a:ca:41:8c:bf:dd:34:2e:22:a9:
fa:ac:00:10:f7:48:9b:27:c9:36:39:ff:76:90:c9:51:aa:74:
62:e9:f6:7a:53:29:e8:92:64:b6:36:d7:29:1a:60:84:e0:7c:
ee:22:71:a7:21:68:68:3b:05:68:c7:f7:ab:e0:17:0d:57:cf:
9b:2b:c4:18:48:3b:b6:59:6c:bd:a3:c2:a9:05:a3:d3:36:9e:
d7:19:5f:88:ac:4d:73:0c:26:1a:ec:65:22:e4:35:2f:7d:81:
c4:5e:d3:45:a8:b9:ce:05:21:76:a9:d7:57:c7:58:10:26:db:
02:dc:9a:16:c5:20:ad:47:54:09:a3:75:49:c4:e7:bf:de:38:
d4:32:ce:a7:15:22:78:2a:de:9f:7f:af:ee:be:a9:5b:84:a0:
68:19:33:b9:54:b1:ac:f5:f6:ac:54:20:cb:87:86:97:93:16:
8a:26:0e:aa:33:c2:f1:45:fa:f2:3a:8e:2c:38:7a:ea:9f:e0:
cc:b6:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:55 2026 by rpki-client