Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: KFqcD1XM0JJ7e4C4vENOtc4St6vK82Ro3SAxqcG53O4=
Subject key identifier: F3:FB:F7:37:BF:49:7B:15:A4:7A:29:73:E9:FE:D5:3D:FB:AB:5D:0B
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019D97E20987A5D89D9F44FF7120DF103B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 078C
Signing time: Thu 16 Apr 2026 20:01:06 +0000
Manifest this update: Thu 16 Apr 2026 20:01:06 +0000
Manifest next update: Fri 17 Apr 2026 20:01:06 +0000
Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=)
2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: 9UAReYuJTN9YAjORzAVK3C4WsHvk+lgCxjhLvxD2rO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:09:87:a5:d8:9d:9f:44:ff:71:20:df:10:3b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Apr 16 20:01:06 2026 GMT
Not After : Apr 17 20:01:06 2026 GMT
Subject: CN=f3fbf737bf497b15a47a2973e9fed53dfbab5d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:4f:8c:a2:2f:a9:f4:61:80:06:0f:5c:07:
23:10:4a:1b:f7:49:d6:ff:2a:dc:d0:4c:1b:6f:a5:
c3:c6:69:35:44:8f:34:ce:c9:f5:bc:f2:a2:62:94:
48:6c:c2:bb:c9:63:88:55:2e:37:21:8e:10:80:1c:
b0:fc:92:43:0a:d4:78:97:b7:63:d3:a2:b5:3d:08:
f5:7d:ee:71:14:51:42:e3:94:d9:4f:c9:bd:bb:f5:
7e:b8:b6:07:1d:bf:de:7d:d2:1b:69:b1:dc:98:8e:
a4:94:6a:fe:a9:6b:de:54:1a:42:cd:7a:4f:26:c6:
af:c3:10:72:87:bd:40:04:1c:24:83:5e:a6:a5:6a:
c2:3c:f5:5e:10:8c:7b:0a:84:f7:a9:65:61:c6:84:
02:5f:58:b4:62:d1:15:78:6c:e9:dc:1b:fd:8f:9d:
7e:97:67:b9:cd:47:db:5d:ec:25:e2:b5:2f:8e:2d:
ec:93:e8:a7:4a:b4:80:87:3e:64:b8:8d:d0:a0:76:
fe:6d:b9:d9:07:3f:1a:96:31:c2:33:13:06:de:ce:
8a:1c:43:05:ac:b3:ef:af:7b:f7:48:fd:b7:bb:69:
99:c1:16:f7:68:7f:e8:97:50:a3:b0:06:08:f2:2a:
5b:7f:cc:20:d3:ed:1b:f8:5d:24:58:b0:5b:e4:99:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:F7:37:BF:49:7B:15:A4:7A:29:73:E9:FE:D5:3D:FB:AB:5D:0B
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:62:2f:b5:15:88:92:fc:89:11:dd:8d:b2:2a:f3:f5:e1:99:
6f:1d:50:08:96:73:c2:9b:d2:be:b1:fd:d6:9d:ef:51:60:2b:
88:b7:9a:76:81:ab:ac:f6:07:9a:c0:3d:9c:58:ce:99:78:42:
b4:f3:d5:67:2a:88:79:3c:54:5c:76:81:65:c9:54:10:c0:dc:
18:71:5f:46:c0:92:f6:f3:2c:71:45:57:e0:9f:97:03:98:3a:
0b:68:d3:f0:4f:89:ba:6f:56:71:c3:47:c5:50:b7:e2:04:d6:
13:50:fd:da:6a:f6:33:ef:63:11:05:d3:c9:b9:d6:6a:91:1e:
a0:4b:c7:10:4c:bb:16:44:e6:ca:19:c1:b5:07:2e:a6:ac:6d:
01:72:6e:b9:f1:ac:c1:7e:4c:68:5a:b3:c0:2e:af:6b:40:a4:
87:47:75:c2:d5:1f:01:30:80:10:1f:02:6b:75:88:1f:4c:16:
b0:e8:27:c7:b5:3c:d4:42:0f:db:73:0b:07:0e:af:2d:07:40:
e0:34:cc:1d:82:8b:a6:40:37:e1:2d:76:e0:8b:b5:45:84:1f:
95:9e:dc:d0:6e:1c:d7:07:11:e8:4a:0e:0e:36:d2:9a:f9:56:
b6:1f:da:d9:eb:8d:99:37:8d:c3:47:56:8a:10:84:0d:3e:77:
cb:c5:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:22 2026 by rpki-client