Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: s86H0mMxrZNmym3Jj3R2Qr20hn1GaU35t9a30jyc/ws=
Subject key identifier: 87:49:D5:EF:91:9D:80:82:E7:E4:F0:FF:32:1C:2E:73:27:6F:8B:4C
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019CACB4F40FA2B2A8527BCF327B1B0E2006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 04:01:05 +0000
Manifest this update: Mon 02 Mar 2026 04:01:05 +0000
Manifest next update: Tue 03 Mar 2026 04:01:05 +0000
Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: uFt0vO00weBAZk8FgUUHY9AIM2lgqXDUrBl96ZvtLmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f4:0f:a2:b2:a8:52:7b:cf:32:7b:1b:0e:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Mar 2 04:01:05 2026 GMT
Not After : Mar 3 04:01:05 2026 GMT
Subject: CN=8749d5ef919d8082e7e4f0ff321c2e73276f8b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:ee:4a:47:b4:f1:52:9c:75:39:b5:dc:91:
26:30:2c:30:b1:7b:9b:c1:0c:e5:a7:8a:ab:12:fe:
6b:1b:2e:80:81:af:6c:8a:54:7c:48:aa:1a:ae:89:
4a:df:ad:5b:b1:bd:22:ca:5a:7f:eb:b3:4f:18:92:
ed:2b:a5:55:cc:e9:cf:41:a7:9a:15:92:f8:37:76:
40:3e:76:cd:78:1c:de:d9:f8:b1:30:39:9d:b6:fb:
60:47:ce:af:5b:87:3d:5e:84:3a:8d:d4:26:42:10:
9f:51:b1:90:57:72:a5:15:d1:69:9d:c6:ac:66:2d:
3a:b2:38:64:ad:44:fc:6a:77:6a:03:d7:e1:66:8d:
32:1f:89:71:62:d4:30:d4:2c:12:6b:fa:58:e4:b2:
05:1d:a3:28:05:ff:bc:35:c2:1f:b4:14:40:3d:da:
e7:14:e3:a8:f7:ef:7e:c4:4a:07:23:01:a4:f3:04:
2f:3e:d3:b7:0c:cd:c3:74:62:a9:84:76:c1:b2:37:
45:f3:97:a0:19:e4:7a:57:c4:be:a2:90:f9:f4:68:
82:db:3a:72:00:c6:c4:1a:20:57:6d:c4:42:ee:26:
03:4b:95:d7:4b:84:de:22:b1:3d:dc:f1:ce:06:88:
b5:3a:72:70:a7:45:48:d5:12:9c:a3:f5:86:80:ae:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:49:D5:EF:91:9D:80:82:E7:E4:F0:FF:32:1C:2E:73:27:6F:8B:4C
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:77:42:87:4b:e1:03:7d:e2:24:c4:b0:c1:bd:e5:88:8b:
33:a0:15:61:ba:42:29:fe:cd:0b:1b:fa:11:df:92:b5:3a:cd:
d0:36:e7:99:41:62:7f:25:62:db:ae:dc:a5:ad:a4:a8:f2:87:
fc:0f:96:b8:de:87:02:09:ab:51:78:e0:2a:9b:fb:49:63:85:
09:57:19:c4:99:54:2d:6a:42:34:32:30:4b:6b:5d:58:f7:2e:
47:1f:08:db:0c:2b:f8:1f:24:2c:34:7b:9b:ed:22:0c:3e:41:
93:e9:33:90:8b:d0:88:6f:24:ae:d2:1d:21:13:c4:75:86:32:
b8:9f:07:42:76:0e:0f:21:34:07:10:63:74:f7:5a:30:fb:68:
8d:92:a7:bf:80:64:53:33:ec:1b:40:5c:d9:a7:e8:3d:49:f8:
9f:c1:73:7d:01:00:5f:0e:ee:84:f6:f3:c6:34:38:3b:a3:8e:
48:91:b6:81:97:c7:78:31:3d:7b:d2:c9:f5:ad:ed:06:9b:79:
01:3e:8a:13:1c:54:a0:c4:e2:32:65:8e:a2:6e:d1:fb:4f:a5:
c1:fb:cc:72:c0:0e:e6:a4:2a:3c:a9:b9:25:3e:ae:a7:c7:44:
2f:d8:23:af:47:0f:ac:0b:8c:c8:c4:d8:8e:c9:da:d1:e3:76:
3e:83:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:23 2026 by rpki-client