Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: S3NsL8DrCfLBnp+iVi5OroZTCFLEhABNctnmKQ9lXi8=
Subject key identifier: DF:A6:49:E0:4A:23:25:26:FC:84:6D:3B:46:88:6C:4D:0B:C7:CF:B1
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019CAA5867AFBB4FF12127B7032E3E63154C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 0711
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: HoMjbERYx+pKYg8UWzZYK0Rq/le2/Td3amBtssULDwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:67:af:bb:4f:f1:21:27:b7:03:2e:3e:63:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=dfa649e04a232526fc846d3b46886c4d0bc7cfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:2f:35:2f:28:33:55:45:bf:a6:57:b7:d3:
ad:d5:4a:88:21:20:da:25:7e:e5:17:3a:a3:9a:a4:
6f:19:75:13:0f:d3:08:ff:25:5a:61:58:aa:bc:bc:
4b:e9:d5:a1:85:b4:ee:74:70:cf:7a:2d:24:65:c5:
05:5e:42:07:7a:01:4b:db:85:4f:7e:56:4a:da:95:
2b:fa:3d:fb:b4:0b:3c:57:0a:bb:31:92:f6:0f:74:
30:95:df:08:61:b8:2a:37:82:58:c7:3b:09:84:46:
d0:09:10:ae:22:a1:0f:ad:c6:d3:09:7e:8e:7c:4b:
cf:8e:2c:27:fd:47:2c:f6:cb:c0:48:3c:ae:9f:5d:
2a:0f:4c:61:a1:12:e9:f9:c2:bc:36:76:34:03:92:
7a:d0:a6:db:c1:fe:33:cf:b7:33:09:9b:c0:f1:1d:
ce:95:8a:8a:ba:f0:b4:4e:d8:db:ff:a6:59:ab:6b:
72:e2:ca:a4:fc:40:43:ae:19:fe:fc:a0:cb:63:f3:
b1:4b:d7:bf:3e:e2:17:9a:9f:23:ae:69:c4:6a:70:
85:5c:c9:63:1b:86:74:e6:4d:f4:d0:ba:06:bb:60:
86:46:c9:59:9b:85:43:86:3e:79:42:ce:10:41:97:
8d:15:9d:29:13:bf:98:16:11:ed:c0:a2:08:c7:f8:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:49:E0:4A:23:25:26:FC:84:6D:3B:46:88:6C:4D:0B:C7:CF:B1
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:d2:38:57:a2:c3:4c:1c:c7:e0:6b:75:fe:19:61:66:a0:
fb:40:8c:8d:2e:7a:f0:5a:ac:a2:64:84:a0:1e:af:18:8f:b4:
cc:f4:c0:98:27:95:a3:5b:a7:35:8a:ad:d3:e7:d3:71:a0:16:
17:fb:8d:ee:85:8f:60:d7:70:05:9e:a0:6c:21:c1:a4:b0:72:
52:bc:2f:e8:e7:2f:8a:98:0a:97:9a:00:41:20:b7:98:ee:ee:
8d:68:d9:b0:b2:b2:25:70:92:0b:83:1e:39:4a:66:1f:5b:4e:
9f:5f:ea:fd:1b:a1:97:b9:77:de:06:54:d4:c3:f8:99:19:4c:
c1:d5:bd:75:50:72:c9:89:8c:79:c6:55:58:51:05:0b:3d:a9:
53:7c:8c:d6:41:67:1b:98:54:41:3b:da:95:1d:d9:59:79:18:
ff:55:95:7a:00:3d:ca:6d:77:36:ee:69:a7:70:0e:b8:9d:c9:
0b:2e:38:03:54:e3:5f:01:12:91:6f:e0:3b:e3:66:58:9f:a9:
b0:36:e0:5a:e3:e2:f6:72:20:bd:e7:32:c9:5d:36:08:a7:a4:
44:fc:d7:71:dd:9e:6f:d7:58:a9:8b:c3:5d:c0:22:33:e4:20:
f5:a4:d6:2d:c5:21:5a:2d:68:ec:cf:02:af:da:00:ad:f4:9c:
6d:9e:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:45 2026 by rpki-client