Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: qvd8Xh9HbwfWETyzjeIUnjQ5PHHL0TMZ0DcW6NGI9Lg=
Subject key identifier: F7:3F:E8:34:7E:C3:EE:9C:CF:FC:D0:19:C8:9D:75:2C:29:33:86:C7
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019FAC76DC738AD7DAE1C730B36E80DF7545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 18D2
Signing time: Wed 29 Jul 2026 06:01:38 +0000
Manifest this update: Wed 29 Jul 2026 06:01:38 +0000
Manifest next update: Thu 30 Jul 2026 06:01:38 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: 9Y0YVLap8yFQJ7ZZOVfc8JqMw4Cuf5N/nd+qGCGgxIY=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:dc:73:8a:d7:da:e1:c7:30:b3:6e:80:df:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jul 29 06:01:38 2026 GMT
Not After : Jul 30 06:01:38 2026 GMT
Subject: CN=f73fe8347ec3ee9ccffcd019c89d752c293386c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:da:15:97:04:1f:f4:09:b7:8e:bc:cf:15:
25:00:11:37:4b:e1:40:d1:fd:d9:46:b8:f2:fa:36:
91:80:8f:68:ac:70:d5:00:68:6b:fe:f6:78:62:29:
8b:7f:fa:8f:fb:74:ff:a5:bc:d5:41:b4:06:aa:aa:
97:9d:0a:b5:fd:dd:df:3c:28:e5:78:65:ff:dc:bb:
a1:23:b9:cb:86:6d:0c:11:0f:d8:7a:8c:ec:b9:85:
ba:9f:2e:79:a7:5e:d2:6c:c1:96:f1:42:f7:fc:df:
f3:48:3f:3f:a9:e1:4e:ac:f5:7c:e4:bd:42:01:d4:
1f:3f:98:d5:6b:3d:d8:24:bb:8c:5d:c7:ed:5c:ed:
9b:fe:33:42:70:9a:dd:2d:a5:39:51:e3:e1:63:c6:
8e:87:ce:a3:94:ca:73:ce:13:08:42:32:d8:6b:46:
0a:f0:0c:06:b6:2f:d3:6e:33:1c:13:75:c5:03:4e:
f1:b4:fc:26:38:9d:09:46:78:34:e9:97:e9:f0:eb:
9c:3f:b0:20:ce:bc:0f:6e:95:e8:07:55:e4:e1:06:
c7:af:ce:7f:0a:c1:8b:f1:ee:59:76:23:97:01:b5:
0e:3a:9b:a3:c3:d8:42:c3:c0:15:3e:b7:6d:41:21:
a3:61:4c:42:05:ec:86:ef:45:7e:13:28:ab:55:df:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:E8:34:7E:C3:EE:9C:CF:FC:D0:19:C8:9D:75:2C:29:33:86:C7
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:59:7b:58:44:24:f5:65:12:a4:cb:cc:52:9d:ac:5b:92:
59:5d:ec:eb:d6:ea:75:06:65:c2:dc:fb:8e:c9:49:6c:de:10:
63:08:32:59:c9:14:c2:62:21:1d:56:96:a3:c6:03:f0:fa:0b:
8c:e9:3a:e6:19:2a:87:0f:e2:3f:d1:56:1a:73:d2:b6:75:ee:
a0:0a:9b:65:1b:40:0d:2d:5f:55:43:7d:4b:37:87:d9:2c:6c:
ed:4c:91:b7:62:2d:38:54:6d:15:b1:4c:eb:4d:48:20:0e:14:
87:a7:bf:f4:31:7d:98:4f:66:86:dd:b3:5a:3b:c0:02:e3:79:
11:0b:56:a2:83:e2:d6:c9:7a:77:78:a7:48:74:85:f9:a2:22:
d4:4e:e2:3e:70:4c:4b:79:b7:18:56:b5:1f:3a:ec:18:bf:70:
78:64:4a:f1:f1:bd:d1:9a:37:1a:87:88:49:9c:dd:cc:de:32:
13:c5:69:35:1a:8f:b2:f2:ed:92:ff:a1:10:41:8b:ed:f9:52:
a8:f2:fe:12:76:21:b7:16:80:86:cf:d8:fa:ca:a3:c0:00:28:
a6:98:80:c8:44:13:fd:f3:d8:4e:26:6b:ce:32:05:49:17:da:
f2:28:b4:5a:e0:f1:9e:55:13:43:c1:bd:5a:fa:b8:eb:da:7f:
47:fc:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:56 2026 by rpki-client