Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: W3JWpKKC8K2IxK4TqYsHJmXEctEBIJKGWGGGuEOGWpM=
Subject key identifier: 86:DE:04:1C:85:BC:7C:EB:AB:9F:4A:13:99:64:EA:F0:0D:75:C6:CF
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019FAD51681A9B9EB33F9E934C46327628D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1716
Signing time: Wed 29 Jul 2026 10:00:20 +0000
Manifest this update: Wed 29 Jul 2026 10:00:20 +0000
Manifest next update: Thu 30 Jul 2026 10:00:20 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: bXQEbYE7TtMHo2EkaAPRcpD7iOt0Qma/McODql6V1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:68:1a:9b:9e:b3:3f:9e:93:4c:46:32:76:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jul 29 10:00:20 2026 GMT
Not After : Jul 30 10:00:20 2026 GMT
Subject: CN=86de041c85bc7cebab9f4a139964eaf00d75c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:bd:d7:8a:52:2d:fa:9e:3d:7c:9a:ac:89:
05:98:96:76:9f:83:22:5a:e2:a9:ba:29:4b:a2:22:
2c:35:6b:37:ec:c8:80:35:04:c8:01:9a:35:e0:a4:
df:1b:7a:ee:e7:1d:5d:19:8d:c9:44:15:98:64:d1:
98:6d:bb:69:6b:22:fd:bb:17:7b:65:2f:2b:d4:24:
90:47:ee:50:81:3f:9f:88:d7:88:57:a3:b7:90:d6:
04:16:e2:63:0f:a2:69:9f:92:64:1e:1e:16:97:60:
94:b5:71:87:4a:e8:dd:8e:2f:a1:08:74:9e:14:ce:
89:66:de:d4:08:28:50:b3:4e:88:6a:0c:df:a3:cd:
67:9c:1c:4d:e0:08:b6:34:71:d3:38:26:4c:fc:b2:
7c:41:0b:4c:1d:78:88:99:fb:35:da:86:87:79:41:
44:77:a7:f4:6c:93:06:06:90:1b:ff:cf:d6:29:68:
b1:a9:50:59:5a:ec:87:01:e4:cd:49:c4:7e:45:e2:
a7:20:cd:e2:f5:00:2a:c9:17:e2:73:37:88:32:15:
6a:ba:f1:f5:90:c9:02:9a:11:9f:9f:da:04:e9:09:
3f:e9:98:cc:08:b0:29:0f:94:04:7c:2e:74:da:3d:
2a:db:62:f7:cc:7f:83:7d:4f:22:9c:29:fb:52:ae:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:04:1C:85:BC:7C:EB:AB:9F:4A:13:99:64:EA:F0:0D:75:C6:CF
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:0d:02:5f:20:6b:df:9b:b4:2b:ea:aa:cf:77:08:4b:e8:
e3:13:f3:23:f1:bf:df:04:39:de:e0:1c:a4:d9:e5:5c:0a:c5:
86:60:3d:e0:b6:a0:77:4d:69:9e:44:77:98:14:59:59:ee:a5:
fc:60:0b:5b:9b:d2:22:9a:c4:e1:44:7b:7f:52:6c:f9:bc:e0:
dd:51:0d:39:2e:1d:12:c1:fe:3e:a1:07:f6:59:ae:92:45:f4:
3e:73:55:5a:5a:4b:7b:2f:cd:4e:cd:27:c8:9b:c7:49:c3:3d:
26:56:18:bd:86:68:a8:6b:7b:02:5f:5a:93:6c:2e:dc:4d:41:
99:bb:0e:23:26:ae:35:ad:2c:63:e5:86:5a:00:44:bd:21:0a:
13:7c:5c:7c:f4:53:15:5f:49:4e:84:a0:c4:37:5a:ee:a2:25:
97:2d:33:28:c2:19:24:88:7f:a0:a6:08:cd:aa:f2:aa:34:65:
5c:92:b7:77:57:d4:0b:37:00:b1:a3:6e:f4:de:a5:6d:74:b3:
62:51:59:f4:23:98:af:13:cb:15:bc:0b:6a:28:c5:10:e6:8d:
74:6b:12:4d:58:73:a7:6f:ec:e0:15:2f:a5:4f:dd:2c:89:70:
c3:ab:2b:ec:40:ce:24:4b:88:a0:9a:8f:c9:00:cc:ec:b5:b9:
99:a5:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:41:47 2026 by rpki-client