
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: yAvGdCrFvXm7p6Wxqa3hfNMXwqEzB0/LB0IWKXAXnJk=
Subject key identifier: E7:D7:C6:56:9B:5E:21:EF:D5:6F:CC:3A:3E:7E:8C:6F:7E:34:91:DE
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019D9E1B2A67E6FC7DC128486ABE4CB82B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1605
Signing time: Sat 18 Apr 2026 01:01:13 +0000
Manifest this update: Sat 18 Apr 2026 01:01:13 +0000
Manifest next update: Sun 19 Apr 2026 01:01:13 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: e6thGz8vLrhHMsTWdai+EHDoUjcS5Xoh+8KRyF0iOY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:2a:67:e6:fc:7d:c1:28:48:6a:be:4c:b8:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Apr 18 01:01:13 2026 GMT
Not After : Apr 19 01:01:13 2026 GMT
Subject: CN=e7d7c6569b5e21efd56fcc3a3e7e8c6f7e3491de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:89:67:19:93:55:ee:85:74:de:f0:24:2f:
68:87:d6:dd:42:6a:51:8f:3e:85:0d:8b:7f:4e:42:
d5:b6:a6:33:f2:9e:6b:66:fc:1d:fc:27:a9:5d:36:
fd:93:fa:fe:77:58:77:e2:d3:0d:40:66:e5:0e:4c:
e2:9e:8d:ea:ad:5b:d2:ec:8b:26:01:72:8d:10:31:
04:b7:c9:26:c6:bc:87:ed:d9:9c:06:4d:e1:4c:eb:
18:5e:64:8c:72:99:65:13:64:5e:5d:1d:34:ed:46:
d1:b6:46:bf:bb:dc:2a:ed:78:85:e1:b6:21:04:38:
5a:4e:eb:66:f0:19:d0:91:38:51:89:da:cd:88:04:
5d:f8:8c:26:2e:86:0d:09:b8:eb:62:43:87:d8:15:
bc:e9:10:b7:9c:3b:90:47:e2:ab:82:25:ca:30:81:
65:85:9b:d9:c9:45:24:ad:65:14:32:da:17:43:ac:
5f:23:38:29:71:02:37:5d:95:88:d2:6f:75:75:30:
3f:d4:dd:3e:f7:ef:c3:a9:e2:66:ec:04:27:2f:9c:
53:a8:e9:a6:0c:65:b0:9d:f0:66:fd:45:1d:51:96:
e4:d8:a5:62:e6:67:28:c2:8d:0d:92:eb:ef:a6:81:
7f:85:e0:ea:e6:62:15:c0:2e:b4:e4:75:5e:46:c8:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:C6:56:9B:5E:21:EF:D5:6F:CC:3A:3E:7E:8C:6F:7E:34:91:DE
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d0:91:69:80:a4:a2:dd:8b:1c:bc:e5:37:13:9b:a8:c5:76:
e4:e0:06:3a:b6:f2:3d:ae:2e:0c:17:37:c9:4e:a4:ad:9a:21:
07:ba:e7:72:d3:d6:c2:62:89:31:cb:35:5b:4f:fa:dd:10:61:
cd:c5:59:73:7f:3e:dc:2c:da:af:a3:d8:f8:f6:93:9f:4e:e0:
c4:e1:9b:0c:91:e5:10:6c:91:d2:15:57:f1:a3:ba:8a:36:cc:
af:12:a6:27:b8:b4:91:b3:8b:ec:f3:fa:ba:fc:df:96:15:00:
86:d3:08:7c:5d:f4:2e:35:c8:f1:31:07:4d:a9:af:17:10:ec:
ac:a5:40:1e:2c:3c:76:3e:71:86:88:3a:40:26:5b:2c:ec:73:
8d:33:52:e5:20:28:96:be:5b:62:9e:05:29:e0:a8:7a:65:09:
71:c1:7d:ec:be:01:6e:bf:2a:ac:18:59:83:77:f1:99:c1:88:
00:4a:e5:af:9f:4c:33:0b:e4:d2:32:da:8a:88:bc:b5:1f:90:
16:76:db:ca:5f:d1:0c:c5:49:67:87:df:ed:a9:5e:ef:9f:23:
59:24:35:81:ce:54:6a:d5:6a:19:7e:62:28:1e:2e:a8:de:ad:
a5:d0:66:bd:08:2f:7b:58:f8:8b:ec:e0:65:98:1d:bf:54:b5:
e9:ef:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:31 2026 by rpki-client