Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: LUyAw4Iai0IfiZzTmWvzmUlVYBrCHRFxvcrZtba6O7A=
Subject key identifier: 8A:E2:F3:45:61:48:7D:A0:17:5E:1F:06:59:26:10:9F:F6:38:5F:D5
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019EC0DBC3F4276A480E742572A582744024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 057D
Signing time: Sat 13 Jun 2026 12:01:28 +0000
Manifest this update: Sat 13 Jun 2026 12:01:28 +0000
Manifest next update: Sun 14 Jun 2026 12:01:28 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: u+ADmaWlklR/hLeQZUBub5IQbFe33Zy1+HpHxsIz+tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:c3:f4:27:6a:48:0e:74:25:72:a5:82:74:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Jun 13 12:01:28 2026 GMT
Not After : Jun 14 12:01:28 2026 GMT
Subject: CN=8ae2f34561487da0175e1f065926109ff6385fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:9d:e7:0f:f4:1c:02:2a:8f:e2:c2:36:af:
89:ac:7a:64:7c:5c:e6:32:c9:f6:b4:b4:25:c8:e6:
3a:08:a0:39:a7:df:7b:19:1f:77:6a:e8:06:e0:75:
47:30:da:12:d1:07:42:d3:dc:04:27:ec:0c:25:f7:
8f:35:79:7f:8a:e8:52:3d:f6:33:d3:cd:63:34:2d:
7f:2c:a4:fe:fc:21:73:0d:e8:99:19:43:8b:02:c8:
22:b2:ef:46:7f:86:da:7c:6f:1a:17:88:0c:f8:f1:
a8:8e:1d:af:ce:71:a6:72:2b:95:a2:0a:9e:19:df:
57:87:f6:89:b6:9c:a3:c3:9d:de:e5:19:86:bf:4d:
65:f3:42:b5:27:6b:01:98:0d:23:97:19:6e:4e:47:
c6:e8:ba:79:52:be:36:cf:b3:cf:04:f8:43:1c:1c:
a2:1c:f4:5c:7a:6a:73:ea:6c:1c:f4:17:51:75:9e:
28:45:b3:d3:27:b8:93:ee:1c:c3:15:ad:e7:6f:6c:
c5:45:7c:fd:62:55:91:d3:c4:e1:bb:21:dd:11:4a:
b6:9a:75:d2:ea:47:af:b0:d4:ab:f9:0d:e3:fe:91:
39:2d:9a:e7:70:8d:26:b8:79:e3:0e:be:1f:8e:9b:
0b:57:f0:46:66:80:a3:8f:ea:f5:36:74:ea:5d:9a:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:F3:45:61:48:7D:A0:17:5E:1F:06:59:26:10:9F:F6:38:5F:D5
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8e:a5:89:1d:f1:b5:8b:4b:43:c4:27:58:72:93:e6:a1:35:
ec:cb:05:2a:97:ed:93:60:f6:56:37:82:a7:95:66:3b:e4:df:
58:17:d9:98:27:17:75:44:14:2b:2e:fd:ba:88:09:1f:1a:1f:
e5:c0:15:df:dc:2f:1e:89:8b:5b:bf:71:8e:b9:a2:f7:bf:cb:
e5:77:eb:34:f8:79:88:0e:00:39:a2:4e:58:ad:8c:cc:90:b7:
ed:1e:84:c1:55:98:bc:ee:41:cd:58:c8:20:ec:83:a1:0e:34:
f4:50:fb:90:9a:91:2b:22:78:fc:c9:8f:19:01:06:21:59:aa:
a5:dc:9e:36:a2:68:f9:c7:19:80:e3:e7:30:d9:d7:df:e4:6c:
09:0e:09:8b:eb:c9:1a:8c:ed:63:8f:99:17:61:86:29:a4:50:
a7:4f:52:41:48:05:50:3b:b1:6f:f4:a9:02:31:e9:6b:84:1b:
53:bb:56:b0:2e:dc:ee:ae:bd:52:05:53:82:03:a6:85:43:a6:
34:a0:bd:33:3b:9c:b7:71:1d:3b:65:35:92:7f:86:bf:df:6b:
4a:e9:9e:53:02:c1:74:d8:78:5f:b1:f6:e8:1f:3c:c7:f0:b1:
d8:51:16:9d:8f:27:2e:e8:08:10:5b:61:95:90:a2:2e:86:93:
52:c6:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:18:22 2026 by rpki-client