Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: xxB0s6HOKjSn9PdVwhp69/DMh0SIYDJ05HwtBHOoKvY=
Subject key identifier: FE:C5:99:D3:83:35:F9:CF:3D:CE:57:87:65:23:D5:00:CA:DA:6C:1B
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019CABD93CDD9C86A7ED0CA29A2869E34879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1744
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: KZyOVyyxqQG7VZHNXw5lGYrnAXWnlFpDSg7nmi1zCg8=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3c:dd:9c:86:a7:ed:0c:a2:9a:28:69:e3:48:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=fec599d38335f9cf3dce57876523d500cada6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:f3:66:ba:59:45:cb:9c:cc:61:3b:b2:e9:
be:ca:b6:4b:95:5b:20:28:44:9b:37:40:31:e4:4f:
c5:fb:64:90:56:78:22:b6:ec:9e:62:41:01:2d:af:
41:a6:47:99:69:65:cc:d1:aa:ef:7f:0c:11:ec:f1:
4e:c7:db:af:57:cc:e9:09:a5:ef:39:ae:76:af:0c:
cd:f1:1e:6f:e6:02:3d:f1:42:d8:af:b6:e8:16:b7:
e9:0e:f4:15:c2:8e:81:1a:32:af:90:38:1e:9e:8e:
ae:d8:1b:b6:06:37:d6:6c:ff:1c:5b:e9:a5:d6:d2:
05:55:4d:42:3c:d3:93:81:9e:34:9b:9e:35:e4:16:
5c:31:8c:fb:be:7c:22:17:3c:b4:90:5e:32:e3:bc:
27:82:48:23:d6:78:2e:0c:e4:97:63:e7:7d:f3:a8:
09:a0:c2:13:67:20:eb:1a:69:6e:a0:1f:a3:23:50:
e3:bc:02:b2:04:ca:dd:e2:a6:48:9a:b4:f2:dd:aa:
1e:51:cf:95:ba:0c:f0:65:40:61:30:00:b1:6a:9d:
b5:d6:95:b8:0e:c6:4c:df:9c:01:17:19:e2:dc:0a:
50:6c:3f:62:94:92:0b:e7:a1:5c:e5:94:47:e4:0c:
c4:fc:26:a7:2f:d0:dd:84:6c:65:10:2d:9b:bd:bd:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:99:D3:83:35:F9:CF:3D:CE:57:87:65:23:D5:00:CA:DA:6C:1B
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:84:9b:2c:16:9f:0d:c7:32:79:ab:0e:cd:3e:d8:93:a6:
b4:33:eb:6d:16:f6:93:a7:ed:14:ab:32:67:fc:b3:9a:16:9b:
f5:30:e3:af:a0:42:ad:72:8d:26:f1:e3:62:55:e1:3c:40:5a:
bb:c2:e9:4c:e3:37:c1:f7:b0:8e:a3:4b:dd:a4:a3:86:04:37:
b7:7f:09:47:3e:27:99:34:f3:71:f6:fa:fb:9a:38:97:f1:65:
87:32:27:b3:f9:cd:75:4c:a7:36:4e:ff:f4:ce:57:b1:71:02:
15:c6:9a:7b:21:b3:84:f2:3b:1c:c4:25:c6:11:fa:25:5a:a6:
c4:a8:c4:10:ab:11:cf:17:b8:50:05:8c:0b:40:0b:dc:a8:a5:
d0:88:01:e8:fa:bb:da:96:30:39:92:bc:43:ef:38:4f:0f:ea:
8e:4d:48:78:bc:3a:7d:1b:e2:82:29:53:93:0b:65:60:9c:73:
c9:fd:4f:cb:ab:dc:0a:c4:c6:9e:06:4b:9a:b5:5b:40:26:54:
0e:3e:db:10:f6:2e:af:62:04:91:bf:99:fe:85:34:80:6d:e7:
d9:77:e4:76:58:2f:f0:f0:4f:5a:a0:3d:6b:7b:ab:37:ee:fd:
04:51:50:09:dc:59:e8:7f:da:34:b0:9e:a3:28:68:00:12:db:
dd:45:e2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:02 2026 by rpki-client