Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: Ur8+WBO9pR0zkbTQ+AB54oKrPyXPOpte6Kqs2osnIE0=
Subject key identifier: 01:AD:6B:84:AA:B6:3F:18:B0:50:85:AB:48:71:A4:CD:8C:09:49:66
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019ED499BF51915D6D7F03AB7F77F09145AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 0830
Signing time: Wed 17 Jun 2026 08:01:45 +0000
Manifest this update: Wed 17 Jun 2026 08:01:45 +0000
Manifest next update: Thu 18 Jun 2026 08:01:45 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: rA4yZNVtg3f2PXiFTTtyy2BHpVMrIStv2NYYFusqVQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:bf:51:91:5d:6d:7f:03:ab:7f:77:f0:91:45:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Jun 17 08:01:45 2026 GMT
Not After : Jun 18 08:01:45 2026 GMT
Subject: CN=01ad6b84aab63f18b05085ab4871a4cd8c094966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:e4:48:ca:1b:21:4d:47:5f:7e:18:f0:52:
f0:47:fe:ca:28:53:e6:32:e9:ae:5b:e6:f5:13:5b:
b6:1b:76:e8:27:30:41:42:47:71:7b:d8:86:0a:ab:
2d:f3:ed:d6:d9:0d:31:ac:19:cf:5b:00:ed:d2:e3:
d2:4f:29:7a:26:63:bb:c0:f3:7d:56:9c:f4:13:c8:
c7:e4:e5:db:f8:e5:5a:23:3d:d0:4f:50:07:3e:78:
94:47:b9:1f:30:72:cc:fd:28:35:d5:74:87:25:5d:
53:dc:bd:3f:3d:25:81:dd:09:76:b3:cf:a0:6e:2b:
8d:99:e3:09:bb:bb:e5:5d:36:79:c8:bf:82:7c:de:
ab:19:2a:6d:5a:01:31:50:b8:b0:8f:60:5e:f9:d6:
71:d9:6e:5b:c4:b0:ea:09:b2:83:12:8d:ea:e8:b3:
ef:10:17:aa:56:a8:e1:13:1f:71:f7:aa:8c:98:7d:
8f:04:84:70:34:b5:c9:79:74:df:97:7a:41:af:9e:
5d:5b:b0:5e:21:13:9d:84:df:63:2e:85:c7:30:49:
eb:8f:55:42:40:d9:86:8e:99:49:a6:25:b4:33:a8:
e8:bd:15:3a:0e:e2:68:a7:51:40:df:3f:85:cc:8b:
8b:8b:ca:a6:26:8e:f4:41:08:56:69:a1:3a:a6:94:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:6B:84:AA:B6:3F:18:B0:50:85:AB:48:71:A4:CD:8C:09:49:66
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a5:9e:7f:41:70:4e:cc:70:f4:19:87:67:6d:df:38:61:65:
64:71:ad:b5:5f:4b:9c:df:00:6b:31:c8:ca:49:6e:5f:9e:a9:
be:e1:81:90:f9:01:5d:6e:98:8f:58:b1:36:c7:7c:4d:5a:7c:
bf:14:f6:58:2d:5a:b6:54:0f:a8:cd:ce:12:9c:45:99:64:c5:
cd:63:4a:a1:2d:e8:29:bb:9b:0f:ca:a3:8b:79:2d:ca:e5:47:
3c:00:53:b8:c7:86:e5:9a:f4:89:01:60:b3:01:0f:99:5f:9f:
bb:cc:ae:e2:1c:9b:c5:25:48:e1:4c:51:dc:2d:73:3e:33:5c:
f1:06:00:31:e7:ac:ab:41:60:7e:64:40:6b:09:54:81:db:4a:
bb:42:53:75:e0:05:bb:9a:cf:ef:22:31:7e:45:e0:fb:16:c6:
79:6b:8a:7a:3d:81:d4:c9:36:e1:5b:47:63:f0:28:3d:d2:1c:
59:cd:f4:f1:b8:db:4b:d2:d4:f8:6c:5d:45:aa:45:4b:bf:ff:
d7:00:1c:60:3a:c3:db:2a:b2:a1:94:b2:eb:d5:9c:56:90:7b:
53:a1:c7:c6:a8:97:a0:be:35:54:8a:73:03:28:e4:b1:a4:59:
9c:24:98:0b:fb:10:3f:dc:0d:ed:2a:b0:e7:de:72:23:b3:c9:
95:9a:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:10 2026 by rpki-client