Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: /w6aLIweOTSejdW9cep8pbUgS0Rr2LPZSwnOHMnqOGk=
Subject key identifier: E8:48:43:7C:66:FA:58:20:67:5B:91:8A:45:14:E9:B5:AB:AB:85:43
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019D9A7526BC3BC0172367FD2E61BEEE3014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: iv2Ft6yW4W+cn3jnHsrDwwXyycmxtTlMFlabljYdZpU=)
2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:26:bc:3b:c0:17:23:67:fd:2e:61:be:ee:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=e848437c66fa5820675b918a4514e9b5abab8543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:e1:e3:14:68:79:d3:e1:3c:ae:15:c5:1b:
5b:44:30:71:91:d9:f2:55:49:36:3a:f1:8a:6c:28:
e4:46:5d:67:65:59:36:c9:9f:38:68:ab:a9:1a:c3:
3d:ad:ff:73:bf:06:84:70:f7:c0:ab:ac:d4:86:02:
b4:77:e9:b4:3a:21:0e:a6:51:b9:11:3a:9d:c6:ec:
e5:71:03:7f:06:08:ea:5d:7d:73:3b:8f:a5:45:b2:
dc:6f:ae:22:9a:80:ed:5e:6b:29:32:16:63:97:4f:
02:ac:40:65:4f:c6:54:ba:e9:20:cf:c8:f8:16:69:
99:de:d0:16:a0:c8:a8:61:a8:cf:e6:87:2d:68:f7:
d7:80:45:e3:09:36:d3:74:94:61:65:ad:90:42:f5:
20:c2:35:c7:36:4d:a0:26:19:25:7f:5e:0c:e2:9f:
7c:0c:63:8c:b7:fc:29:c8:4e:a8:a7:cd:ff:62:50:
2f:92:7f:ec:73:b8:14:70:b8:e0:55:d4:f7:9b:2c:
46:50:6f:45:c0:a6:90:e2:1e:d9:b6:74:b3:23:54:
aa:aa:ac:4f:f6:9a:3a:46:01:1d:33:0d:e1:fd:90:
a8:a5:72:b6:55:db:45:9e:c6:e2:fd:09:fb:5d:81:
8a:a1:98:6b:5a:6b:8a:4c:b8:9a:b9:c4:af:67:f1:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:43:7C:66:FA:58:20:67:5B:91:8A:45:14:E9:B5:AB:AB:85:43
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:36:e1:70:45:71:01:d3:95:f8:e8:2b:03:2e:46:32:18:65:
58:16:d9:f2:19:3b:64:1b:15:b8:c9:25:c4:56:4d:bb:2c:96:
ee:1b:d4:7b:86:24:5c:9f:f9:8f:6a:eb:ab:17:8b:dc:0c:e4:
4a:a7:d4:6a:09:20:bf:2e:43:a7:2a:de:31:46:76:39:e8:ab:
fd:e9:aa:52:a0:83:26:f0:f9:6f:c5:8a:eb:86:2e:2b:95:5e:
af:cf:ed:9e:b1:dd:df:f0:53:37:d1:4f:0f:40:77:12:0f:c5:
a0:01:3b:ce:fc:c6:55:bd:56:06:23:74:56:c6:8b:54:7a:5c:
9a:ba:d5:0f:60:b5:af:0b:2d:d3:e6:e5:b6:40:4b:a7:91:ec:
a3:13:23:c0:f6:35:6e:95:9d:02:d9:96:64:32:04:2b:b5:ab:
cd:58:1b:26:18:85:ca:57:19:8a:0e:bd:12:51:4e:8f:46:b7:
b7:68:ba:37:af:b1:28:d2:49:22:4a:b0:46:dc:ec:68:b7:8f:
44:64:61:6a:21:eb:e5:ac:90:ee:91:67:56:c1:88:6d:37:59:
43:15:71:65:eb:c9:b0:ff:02:3c:b1:7c:d5:39:d7:99:e9:e6:
b6:db:d5:a2:8b:63:4e:13:b7:cc:86:11:70:94:16:8e:da:49:
21:fd:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:18 2026 by rpki-client