Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: neryklB7hf88VDYU4LxaxYGQMRJu1IcswIgfer6MENA=
Subject key identifier: 72:C9:52:6F:EA:84:FB:D6:82:28:4D:E0:17:90:D3:6C:20:BC:36:72
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01A12F21B9BD41EF33A82B8083038FAA2554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 08BB
Signing time: Mon 12 Oct 2026 08:01:41 +0000
Manifest this update: Mon 12 Oct 2026 08:01:41 +0000
Manifest next update: Tue 13 Oct 2026 08:01:41 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: opL3sFt5cY9zWKxhZurRHeNglNOP6y8ttAdv8fuxkks=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:b9:bd:41:ef:33:a8:2b:80:83:03:8f:aa:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Oct 12 08:01:41 2026 GMT
Not After : Oct 13 08:01:41 2026 GMT
Subject: CN=72c9526fea84fbd682284de01790d36c20bc3672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:2f:7e:ab:cf:4e:aa:76:10:e6:ac:f3:eb:
6d:11:45:be:2f:7c:b9:34:74:fd:8e:85:f9:ba:e9:
ce:6a:e9:f9:bf:6d:7b:64:4c:d9:40:cc:1f:ce:b6:
28:50:9e:c2:6e:fa:6a:60:36:9c:7e:1c:2b:13:79:
cb:c6:7f:7c:7d:0b:3f:03:48:85:dc:fa:d1:9b:00:
70:0c:91:f0:ea:7a:9a:e5:31:cb:b3:a7:48:2c:18:
0f:07:f7:91:c0:55:77:ba:ce:a8:5c:08:84:20:d4:
c3:0d:26:83:31:4c:cd:bc:83:40:a5:98:9a:32:09:
39:51:87:90:8f:4f:53:2a:45:49:2b:ac:ae:d2:15:
14:a7:5e:d7:b6:c2:f8:0e:e5:2b:f3:44:f1:a4:ef:
9d:b6:74:9d:11:77:fe:c3:ec:01:7e:dc:65:00:66:
6e:16:af:43:aa:2d:0f:e0:0c:7b:69:c8:2b:c4:55:
4c:da:e6:18:e9:97:72:1e:1f:43:19:e6:87:c2:5d:
2c:dd:d7:4e:cf:99:c3:49:15:31:9d:83:31:94:cd:
2c:f7:99:3b:21:6d:e5:2a:bf:19:d7:d3:11:b3:93:
de:7f:0f:bd:69:e4:14:fb:c6:f5:17:d7:98:6d:2b:
2e:65:18:ef:e8:dc:26:b2:b7:be:3b:8f:c5:a1:e0:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:52:6F:EA:84:FB:D6:82:28:4D:E0:17:90:D3:6C:20:BC:36:72
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1b:f7:28:80:89:ad:dd:94:ae:25:bb:b6:69:88:81:d7:ec:
2b:3d:9d:e1:a3:9a:41:5b:cb:1c:7a:62:6a:e9:61:97:96:0e:
7a:fb:dc:a2:7a:35:17:4f:e6:5a:3a:53:4e:44:09:ae:7a:8d:
6a:12:2e:db:79:13:6b:c9:f4:3c:c9:8c:91:1f:90:15:90:a6:
9e:a6:a0:1c:48:61:7b:25:70:cd:9e:0a:03:bf:b7:a3:78:1d:
0b:6f:1e:5d:09:fd:82:f3:6f:a8:ea:be:c8:d5:59:9c:18:63:
a1:1d:de:d1:9e:4b:c6:dc:db:e6:0e:0e:8e:32:73:df:55:6b:
7e:bb:b3:43:48:d4:be:2c:d4:c9:6e:5f:bb:99:52:c4:82:bd:
05:d9:4c:43:1f:db:44:4c:5c:d1:8e:13:d9:c7:b7:d3:b0:fb:
06:44:2e:25:d4:93:b4:e4:35:d2:08:09:17:6d:d1:35:2f:ee:
bd:2f:8a:85:07:87:4e:6e:22:15:b4:d6:fc:03:00:cd:4c:10:
f7:7e:05:66:6b:b0:ef:33:21:e0:ce:ac:be:75:38:33:75:2c:
22:6a:4b:3b:0e:41:b2:53:ce:b5:92:21:02:ba:45:30:c9:a0:
ec:c7:d7:18:36:70:69:24:1d:bd:a0:94:57:8d:08:c7:16:b3:
cf:76:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:52:50 2026 by rpki-client