Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: uq5dj40qM5PeDt8cMk4pWXOTdaqten4QQwVLBI3g5UU=
Subject key identifier: 83:E3:86:6B:0D:68:1B:9A:79:79:C2:F6:02:1B:7F:82:33:E9:A9:E3
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01A0C47C585DE73B3EF17E5F35FCB563ABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1963
Signing time: Mon 21 Sep 2026 15:01:18 +0000
Manifest this update: Mon 21 Sep 2026 15:01:18 +0000
Manifest next update: Tue 22 Sep 2026 15:01:18 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: H6N3YoV2xUwdue4fGta8We3f11drEus3CQSXvnmgXXY=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:58:5d:e7:3b:3e:f1:7e:5f:35:fc:b5:63:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Sep 21 15:01:18 2026 GMT
Not After : Sep 22 15:01:18 2026 GMT
Subject: CN=83e3866b0d681b9a7979c2f6021b7f8233e9a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:bc:6f:ce:49:b3:35:7e:ad:e0:22:03:95:
9c:3c:1d:53:48:b2:e5:2c:b9:9b:dd:c6:37:24:07:
77:80:5d:65:a8:9e:ca:7f:36:1e:81:5d:f1:d7:90:
32:c2:3b:55:8a:b6:63:0f:a5:02:4a:74:f5:58:81:
e3:92:4e:8d:57:ff:8e:0a:6d:fc:4a:c2:a9:36:47:
3e:cb:61:bf:8e:14:67:50:1e:ea:f8:fc:b2:1d:ab:
6f:59:3a:4c:54:2d:84:d5:6b:85:37:5d:40:2f:3f:
f0:2d:2c:94:75:d1:1f:39:c9:42:8f:7f:99:62:d8:
1f:31:ff:10:f2:3b:39:60:d8:a3:b1:14:a4:3c:5d:
52:63:a4:6c:9f:59:70:de:06:7e:20:07:c8:3a:43:
05:04:0d:0f:4f:af:ff:80:53:18:e0:0e:5c:0c:7c:
70:d9:01:38:15:b5:b8:61:08:49:7d:ee:48:c1:dc:
87:6b:90:77:71:03:59:01:ed:89:f7:7c:66:0c:9b:
7e:07:ae:cb:e0:4f:68:c8:34:c0:c9:df:20:d3:56:
a7:13:e6:58:25:ce:89:af:74:5b:dd:67:c1:39:9d:
53:e8:81:6e:a1:dc:48:1d:a8:20:0b:29:1e:23:62:
cb:77:94:ef:8f:3e:36:02:64:00:d7:36:09:04:89:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:86:6B:0D:68:1B:9A:79:79:C2:F6:02:1B:7F:82:33:E9:A9:E3
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:a4:87:28:f5:1f:54:b3:66:b0:5b:5c:aa:c4:ab:b3:a8:
71:97:e0:ed:4b:d1:c8:60:48:e9:ae:0a:75:61:3e:e8:f5:1d:
12:50:31:e9:25:1f:63:99:26:14:29:a8:d6:a9:20:ad:d3:d7:
8e:d6:1a:f2:4e:97:76:32:0e:a5:67:50:2b:35:3b:6b:63:3d:
88:a1:bb:c6:48:5c:90:fc:37:9e:2b:78:cc:da:02:11:13:9f:
53:02:b5:2c:77:9e:63:6b:87:8d:c9:d7:65:aa:ad:41:e9:f7:
74:c3:39:dc:f8:59:71:5e:39:cd:ae:b4:05:91:63:10:dc:fb:
d5:e2:a7:69:86:0e:0a:41:ef:bc:79:78:08:ed:93:2a:81:ba:
11:d5:61:d4:30:b4:c4:42:fe:8f:7b:dd:0c:51:03:5b:14:dd:
0c:12:30:98:72:84:9a:5c:28:cd:f3:05:41:62:98:d7:c8:e4:
55:3c:3f:d0:d2:6a:26:4a:9a:bd:eb:6b:07:27:38:97:a4:f9:
16:95:ab:62:d7:2f:ae:fd:bc:b1:c3:48:3c:05:08:7b:75:64:
48:e2:b4:33:55:b5:80:41:90:c0:b2:59:86:10:52:4d:a4:1d:
43:41:cc:3d:b9:33:e8:30:6c:7a:79:48:ed:9b:7b:98:98:44:
42:b5:67:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfFhd5zs+8X5fNfy1Y6uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjYwOTIxMTUwMTE4WhcNMjYwOTIyMTUwMTE4WjAzMTEwLwYDVQQD
Eyg4M2UzODY2YjBkNjgxYjlhNzk3OWMyZjYwMjFiN2Y4MjMzZTlhOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywm8b85JszV+reAiA5WcPB1TSLLl
LLmb3cY3JAd3gF1lqJ7KfzYegV3x15AywjtVirZjD6UCSnT1WIHjkk6NV/+OCm38
SsKpNkc+y2G/jhRnUB7q+PyyHatvWTpMVC2E1WuFN11ALz/wLSyUddEfOclCj3+Z
YtgfMf8Q8js5YNijsRSkPF1SY6Rsn1lw3gZ+IAfIOkMFBA0PT6//gFMY4A5cDHxw
2QE4FbW4YQhJfe5IwdyHa5B3cQNZAe2J93xmDJt+B67L4E9oyDTAyd8g01anE+ZY
Jc6Jr3Rb3WfBOZ1T6IFuodxIHaggCykeI2LLd5Tvjz42AmQA1zYJBInbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPjhmsNaBuaeXnC9gIbf4Iz6anjMB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxSkhyj1
H1SzZrBbXKrEq7OocZfg7UvRyGBI6a4KdWE+6PUdElAx6SUfY5kmFCmo1qkgrdPX
jtYa8k6XdjIOpWdQKzU7a2M9iKG7xkhckPw3nit4zNoCEROfUwK1LHeeY2uHjcnX
ZaqtQen3dMM53PhZcV45za60BZFjENz71eKnaYYOCkHvvHl4CO2TKoG6EdVh1DC0
xEL+j3vdDFEDWxTdDBIwmHKEmlwozfMFQWKY18jkVTw/0NJqJkqavetrByc4l6T5
FpWrYtcvrv28scNIPAUIe3VkSOK0M1W1gEGQwLJZhhBSTaQdQ0HMPbkz6DBsenlI
7Zt7mJhEQrVnAQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:57 2026 by rpki-client