Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: TS2xVEPmQ4qYVQCxXAblN7sEifmGOl4ooEUCIgazPgQ=
Subject key identifier: 1C:74:04:11:14:72:F5:37:CA:71:61:9F:04:71:65:0C:4C:F4:81:53
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019CABD9CF9867610C2FF77D07DDD644D7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 0469
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: nR/6FNi8g2oGAbpk8HYtTevmqeYmlm0CrC0hoRPlEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cf:98:67:61:0c:2f:f7:7d:07:dd:d6:44:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=1c7404111472f537ca71619f0471650c4cf48153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:b2:f2:1a:03:fc:57:79:b7:db:f1:eb:1b:
91:ff:4b:2e:84:2b:99:6d:79:3d:4e:d3:9c:7a:03:
56:a3:4e:81:55:80:07:9b:b8:06:af:09:89:b6:b3:
a6:c3:89:a1:55:1a:8e:b7:cc:dd:f9:f4:3f:5c:52:
8b:4c:99:68:ac:a3:ac:7d:6c:f6:cf:bb:38:16:42:
24:ee:86:34:00:83:e2:a9:f9:62:1e:7f:0f:15:48:
15:0f:89:02:fc:a9:17:9c:29:cc:aa:1a:2b:2e:db:
b3:83:16:45:34:33:30:f2:a5:35:a7:7e:8a:40:c5:
9c:59:16:8c:9d:60:ac:b3:f0:da:ea:86:57:d7:46:
39:2f:b7:5b:56:e2:db:ac:ee:4d:cd:05:55:64:44:
24:95:e4:48:36:16:bf:99:28:62:79:19:0e:06:a4:
bb:b6:cd:e4:ea:72:3c:fd:d5:5a:2e:6e:dd:57:ee:
93:a1:8c:bf:8d:22:9b:5a:7d:03:06:e3:fd:32:50:
a0:8a:90:8a:d8:47:f8:b5:19:f6:93:10:55:d6:1e:
84:c7:c8:de:fc:9c:ac:b6:f2:fe:16:d8:53:40:4c:
72:56:5c:69:d4:1a:5b:60:db:fa:a7:c2:f6:91:37:
e0:d3:7b:7c:06:5b:12:9f:3d:d7:58:97:8d:64:cc:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:04:11:14:72:F5:37:CA:71:61:9F:04:71:65:0C:4C:F4:81:53
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:e5:03:b4:c6:38:dc:60:5e:2a:d3:49:95:9f:f6:ca:ef:
38:42:69:bb:d1:a2:a0:2d:ee:4d:0e:17:9e:8b:42:99:ad:d3:
6d:7b:48:08:fd:36:f2:f0:30:9b:74:50:a6:80:59:be:9d:90:
b4:f3:ec:9b:05:53:38:e4:62:f9:40:5a:cd:53:db:b1:e0:39:
f3:5a:21:b4:3f:a2:85:01:09:f1:6f:73:8e:1f:2f:71:de:0b:
28:da:80:79:1c:5e:80:6d:31:ea:9c:f3:f8:24:3b:58:a6:db:
48:2d:cb:b8:5f:67:b7:8f:97:9d:f6:56:12:0b:51:10:c5:78:
ae:3b:8c:9e:86:66:74:11:f9:7b:fc:30:68:b7:2f:a8:13:d1:
e2:23:59:89:be:00:b9:f1:66:e5:04:63:00:39:32:27:26:30:
18:d3:e7:2e:68:5d:9e:fe:e8:4d:30:51:48:5b:66:4c:1b:08:
a9:fc:d2:82:93:8e:c4:b5:26:36:74:d0:da:0e:c4:01:5f:6d:
f1:95:62:85:e3:b6:5e:24:af:54:b5:fc:a6:8c:15:2f:6e:7a:
87:37:de:7e:4b:a4:84:8c:f2:80:58:67:5e:ee:87:43:d8:5a:
45:e1:1c:73:bc:50:eb:33:2d:02:25:70:94:8f:11:2c:5e:89:
e9:41:6a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2c+YZ2EML/d9B93WRNfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2
MjYxMzgwHhcNMjYwMzAyMDAwMTQ0WhcNMjYwMzAzMDAwMTQ0WjAzMTEwLwYDVQQD
EygxYzc0MDQxMTE0NzJmNTM3Y2E3MTYxOWYwNDcxNjUwYzRjZjQ4MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFyy8hoD/Fd5t9vx6xuR/0suhCuZ
bXk9TtOcegNWo06BVYAHm7gGrwmJtrOmw4mhVRqOt8zd+fQ/XFKLTJlorKOsfWz2
z7s4FkIk7oY0AIPiqfliHn8PFUgVD4kC/KkXnCnMqhorLtuzgxZFNDMw8qU1p36K
QMWcWRaMnWCss/Da6oZX10Y5L7dbVuLbrO5NzQVVZEQkleRINha/mShieRkOBqS7
ts3k6nI8/dVaLm7dV+6ToYy/jSKbWn0DBuP9MlCgipCK2Ef4tRn2kxBV1h6Ex8je
/JystvL+FthTQExyVlxp1BpbYNv6p8L2kTfg03t8BlsSnz3XWJeNZMwVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx0BBEUcvU3ynFhnwRxZQxM9IFTMB8GA1UdIwQY
MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt
NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw
LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYTlA7TG
ONxgXirTSZWf9srvOEJpu9GioC3uTQ4XnotCma3TbXtICP028vAwm3RQpoBZvp2Q
tPPsmwVTOORi+UBazVPbseA581ohtD+ihQEJ8W9zjh8vcd4LKNqAeRxegG0x6pzz
+CQ7WKbbSC3LuF9nt4+XnfZWEgtREMV4rjuMnoZmdBH5e/wwaLcvqBPR4iNZib4A
ufFm5QRjADkyJyYwGNPnLmhdnv7oTTBRSFtmTBsIqfzSgpOOxLUmNnTQ2g7EAV9t
8ZViheO2XiSvVLX8powVL256hzfefkukhIzygFhnXu6HQ9haReEcc7xQ6zMtAiVw
lI8RLF6J6UFq/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:45 2026 by rpki-client