Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: eyUHIqExg0Fv3ABkO92v3XzEQsR5Ld5tJWJj3MpzRro=
Subject key identifier: 19:D2:3A:F9:0B:36:11:88:5F:37:98:4A:80:BE:42:17:06:42:9F:C1
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019DA30AF7B65D98BE6F0437836830BB7BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 17C4
Signing time: Sun 19 Apr 2026 00:01:38 +0000
Manifest this update: Sun 19 Apr 2026 00:01:38 +0000
Manifest next update: Mon 20 Apr 2026 00:01:38 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: 63e/4aFdNdghjG/JnN57Siv5rQ0yk+HrQqGpGma3MJw=)
2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:f7:b6:5d:98:be:6f:04:37:83:68:30:bb:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Apr 19 00:01:38 2026 GMT
Not After : Apr 20 00:01:38 2026 GMT
Subject: CN=19d23af90b3611885f37984a80be421706429fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:27:85:a2:f3:e7:7f:45:cf:24:e0:90:e5:
20:94:51:32:b4:e8:fa:0b:76:12:36:5b:4e:e6:dd:
f3:b1:c1:f1:5c:c0:7e:68:d5:fe:96:d3:0c:4b:61:
fb:88:f8:c1:dc:3e:77:89:e6:53:e7:b5:cf:be:fd:
f5:9b:4f:5f:f6:3d:83:9f:81:8e:3d:2e:dd:f9:59:
4f:02:7e:e6:d5:8a:ce:d2:21:94:45:d3:96:5e:19:
61:4b:0c:40:55:49:d8:5c:36:03:33:09:75:db:36:
30:f5:6b:f6:26:ef:05:66:28:da:2e:a1:91:f8:99:
0f:93:1a:22:6c:35:ba:30:08:86:22:9b:d6:c5:0c:
14:e4:cf:34:cb:ac:ba:90:0b:e7:43:3d:9e:09:76:
1c:db:ff:06:44:3c:d9:4b:c6:74:25:2e:dd:f3:aa:
1f:50:2b:1c:df:a6:2b:cd:a6:99:fe:6d:2c:f2:99:
b6:53:6d:4c:15:8e:5a:6b:2a:cd:44:9d:43:aa:e3:
e6:a1:f9:fc:b9:f2:d1:e6:31:6a:2f:71:68:39:36:
26:00:cf:7d:f6:cb:8d:b0:21:70:f0:3e:3d:3e:c7:
35:d3:8e:1a:2b:95:89:c1:4e:9d:97:13:c0:b1:2d:
2d:17:42:71:58:6a:b8:35:ca:dc:de:fe:7f:dc:c7:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D2:3A:F9:0B:36:11:88:5F:37:98:4A:80:BE:42:17:06:42:9F:C1
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:4c:4a:c5:23:3a:64:47:79:5a:27:19:0f:4d:ce:76:7b:
61:a2:33:34:84:e1:92:bf:26:02:2c:aa:60:cb:a6:46:68:1b:
9b:bc:d1:a2:a1:26:f5:56:15:54:d3:ef:6b:50:bf:f1:21:0d:
49:c6:66:bc:16:83:37:fd:91:f1:0f:7b:02:27:d4:fe:d2:42:
c5:7e:14:d6:01:56:35:f0:63:29:7d:a0:c0:0f:03:74:d6:36:
57:2a:ca:31:0e:96:e6:e9:a8:96:63:24:0c:6a:d6:e8:de:b8:
31:35:f3:6c:da:4e:44:ba:de:58:0b:08:bd:35:b3:2a:06:81:
d5:70:8e:a7:a9:01:d8:6b:cd:a7:fe:a5:35:41:e7:32:86:9b:
b9:dd:c0:f5:58:e9:a9:da:d4:43:bb:72:a2:5f:86:e1:63:be:
49:b3:62:fd:ed:05:82:6f:6c:b9:7e:7d:a6:02:15:b9:48:56:
43:19:fc:6c:9f:49:f4:70:2f:e9:e8:ff:af:23:a9:22:03:dd:
5c:96:bd:d4:cd:30:99:d4:ea:00:ee:b8:fb:f3:fb:61:2f:03:
4d:46:f6:65:cd:cd:d0:cc:71:02:98:f5:c8:23:05:33:e9:2d:
6d:4d:53:60:7a:06:92:be:f5:54:90:f2:af:34:5d:89:4c:9e:
e9:ea:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:47 2026 by rpki-client