Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: uKZPTJ8GDQCQd+vNShulsXVGuhZG1C/lgdYOMwGtl9A=
Subject key identifier: 28:48:D2:6B:91:7D:7A:4E:68:1B:B8:E0:C4:B7:93:F1:7D:49:94:81
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019FAC76E6CC1E409C8549C38B81DFABD3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 05F7
Signing time: Wed 29 Jul 2026 06:01:41 +0000
Manifest this update: Wed 29 Jul 2026 06:01:41 +0000
Manifest next update: Thu 30 Jul 2026 06:01:41 +0000
Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=)
2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: UYYrsFRmZoeOwxNkf8K63ENVGtZ/OEnxWWCO63IjKps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e6:cc:1e:40:9c:85:49:c3:8b:81:df:ab:d3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Jul 29 06:01:41 2026 GMT
Not After : Jul 30 06:01:41 2026 GMT
Subject: CN=2848d26b917d7a4e681bb8e0c4b793f17d499481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:58:98:70:f0:54:4d:37:ac:c5:78:af:24:
7a:47:e9:72:b6:fd:47:01:4d:a6:a4:df:64:84:f5:
9a:2c:13:90:3c:e3:90:6e:23:b8:f1:d2:35:c2:69:
dd:43:c9:1e:db:63:6a:da:f4:42:67:e6:2f:1e:94:
24:7c:39:31:7e:8c:e7:ef:a4:b4:4e:81:23:ed:c7:
b0:d3:15:a8:46:30:a8:e6:b6:65:4b:b3:e3:3f:27:
f9:24:00:0d:9a:e6:b4:45:92:ee:01:e7:d5:41:30:
62:f3:23:aa:07:80:22:27:60:41:ac:fa:44:3d:69:
90:65:4b:11:c1:da:97:30:49:a0:76:69:d0:8d:06:
da:25:05:48:de:94:50:aa:20:e6:ac:e7:67:70:44:
07:2c:c8:8c:36:a7:ea:31:5b:42:64:52:38:8e:dc:
4f:aa:19:29:5d:b0:46:5f:06:62:0e:61:29:dd:25:
76:1b:ef:2b:09:47:bd:44:6e:42:64:b8:a1:4b:8a:
00:7b:d0:52:19:63:d0:00:93:5e:55:8f:df:63:08:
f4:0b:c1:10:1d:f0:b2:e5:e2:29:42:2c:ac:04:6a:
66:ad:91:f4:97:f5:36:2f:c2:f3:d9:db:a7:29:7b:
cb:73:7b:92:19:35:5d:31:b6:63:92:62:cc:33:2a:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:D2:6B:91:7D:7A:4E:68:1B:B8:E0:C4:B7:93:F1:7D:49:94:81
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:45:ed:0e:8b:88:f7:9b:f6:5b:60:66:92:aa:cb:31:c2:
bd:23:f2:9e:d2:9c:88:9f:e3:5a:81:58:7c:69:cd:84:76:41:
6b:d9:cb:73:c8:57:fd:1c:c6:62:ca:b1:e4:53:4e:1e:81:9d:
59:75:77:3d:36:3a:f3:06:f6:ea:06:6c:ef:09:d8:b6:b7:6f:
5f:88:e5:c4:cc:d3:1d:bd:42:3e:5b:76:b5:66:e9:1f:55:7e:
43:d2:0c:2a:e5:dd:b7:1c:8f:90:36:cd:6d:fd:69:73:84:b4:
7c:24:5f:db:97:a4:8a:c4:74:34:3c:40:23:1f:f9:c2:36:5c:
a5:00:c4:45:19:ac:cd:a0:56:95:f6:50:68:8f:3f:7d:98:56:
ff:66:89:1a:a2:77:f2:3d:20:b3:18:72:2b:66:1b:cc:77:cf:
8e:c4:b3:4e:51:65:d6:1d:83:a0:e2:69:b8:28:a6:bc:19:d8:
69:52:5b:b9:f6:ec:1c:9e:ab:58:c2:99:41:81:2d:e3:08:ec:
23:0e:b1:71:e7:0d:4c:07:00:ad:c9:1c:c3:e5:35:0e:ed:82:
19:65:84:5c:9d:6f:b8:ca:04:3e:fe:a9:c7:92:42:0f:9b:14:
66:55:60:a2:2a:f3:81:ae:62:39:fc:eb:ac:4c:ca:f4:f0:8a:
0a:89:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:03:42 2026 by rpki-client