Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: 4gHGiWFBgRrnAOAFT8EnSCEWTqq3it0P1EkxuwY3ZcM=
Subject key identifier: 5F:87:7E:33:D2:5D:F1:DF:48:4C:7D:8A:D5:34:28:71:22:50:28:BA
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01A0D426903F943FA088252B47DEBC78657D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 0622
Signing time: Thu 24 Sep 2026 16:01:32 +0000
Manifest this update: Thu 24 Sep 2026 16:01:32 +0000
Manifest next update: Fri 25 Sep 2026 16:01:32 +0000
Files and hashes: 1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: i1hpJjISzEJL9UR9ybDQNUp3oDIvqKA7213VGbbi3CQ=)
2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:90:3f:94:3f:a0:88:25:2b:47:de:bc:78:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Sep 24 16:01:32 2026 GMT
Not After : Sep 25 16:01:32 2026 GMT
Subject: CN=5f877e33d25df1df484c7d8ad5342871225028ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:26:23:8b:ec:8b:fe:93:f4:26:02:e8:0b:
a8:a5:2f:47:7b:de:d3:71:e9:d8:bc:02:78:44:da:
c7:36:67:ff:4f:e8:ec:12:a7:d8:36:c1:11:e6:b4:
b5:eb:be:32:5c:7e:58:1c:ee:3b:5d:0c:40:95:ff:
2e:f0:0c:3e:b2:74:c1:82:88:52:d9:6a:03:8f:8c:
78:85:64:f1:e2:44:19:ca:1b:9e:44:8d:96:cd:24:
30:cd:da:a1:cb:fb:e0:af:e5:ea:23:e7:3f:61:ea:
65:bf:89:c1:43:92:70:fb:ba:00:2b:27:fe:d1:df:
01:3a:10:a5:af:a2:80:c7:f1:89:33:c3:a2:58:a8:
1f:22:32:64:c8:c5:81:87:24:62:87:28:6e:71:52:
74:d1:1c:c1:11:2a:52:80:f2:9e:c5:06:21:26:2e:
02:1c:d2:8e:32:f6:2d:84:bf:6c:b3:25:a2:fc:91:
ef:59:70:84:37:ba:5d:5a:68:be:87:4e:07:06:7d:
6a:08:84:49:02:da:af:a9:70:5b:b5:06:71:93:d6:
93:dd:63:59:7b:ba:e1:d9:d9:2d:0f:74:d5:d0:80:
bc:75:e6:6e:4b:a8:42:86:e4:75:6b:27:55:d0:e7:
a4:ba:d9:48:4b:5c:c7:e1:e2:33:ac:10:dc:b0:8a:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:7E:33:D2:5D:F1:DF:48:4C:7D:8A:D5:34:28:71:22:50:28:BA
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3e:f1:c4:60:63:a7:43:7a:5d:e4:36:b5:27:ea:2e:e2:cc:
9a:15:20:20:18:81:cb:18:67:5b:40:17:fe:3f:cf:3b:89:41:
9c:2a:20:47:85:3e:d6:7a:dd:eb:19:67:ee:80:5f:0e:e2:5c:
1c:90:41:cd:7c:da:ad:bb:dc:ad:0a:08:0b:28:8e:22:8b:87:
5e:d1:db:bc:1c:2a:bd:fe:25:8d:e7:72:a6:49:ef:06:67:49:
1e:68:f2:8b:00:59:26:ef:27:55:a5:24:31:2e:a8:92:11:b7:
2a:d8:10:2f:80:68:3a:8f:51:31:2e:7b:29:6e:5e:86:b2:25:
df:f3:fc:32:95:44:76:b4:d9:f8:11:49:0a:74:f9:8f:73:31:
37:9c:18:f4:81:5c:d8:a3:58:47:5a:4c:ab:19:88:93:a2:d3:
aa:f1:70:fa:21:fc:b4:91:19:38:a9:5d:15:5c:a4:56:29:7c:
4a:49:e3:ce:86:a5:60:90:14:b4:70:ce:e4:53:e6:6f:ca:30:
17:6a:3e:30:db:11:c9:f2:f7:cb:61:32:8a:e2:08:4f:9e:75:
7b:de:1a:d7:84:a2:ba:67:f8:50:2c:b2:5d:2d:2c:79:6e:3f:
fd:a3:b8:2d:ae:60:9a:64:f4:0a:20:69:b1:9d:74:7c:e2:53:
04:98:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:24:08 2026 by rpki-client