Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File: HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier: 8HDsDiwGVio3OUXCKt61qpsuWYrTnTeLjy84WxhLDng=
Subject key identifier: 98:41:25:0E:FF:8A:A7:8A:49:1C:EA:FA:A5:49:0A:DA:7C:3A:58:12
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer: /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial: 019CAA8FB482C156D97F5923C27A2094B24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:10 +0000
Manifest this update: Sun 01 Mar 2026 18:01:10 +0000
Manifest next update: Mon 02 Mar 2026 18:01:10 +0000
Files and hashes: 1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: v4XS0L/BVETgQYwI69ZQWQUKaak4ej4NRFV6K7atavY=)
2: a0cVwY782bVLctNvuUYwvwuDYXc.roa (hash: 3BEBxuA8q6f/xOJc9Z5fI70F8QjqsLEuZxOTHMXzCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b4:82:c1:56:d9:7f:59:23:c2:7a:20:94:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Validity
Not Before: Mar 1 18:01:10 2026 GMT
Not After : Mar 2 18:01:10 2026 GMT
Subject: CN=9841250eff8aa78a491ceafaa5490ada7c3a5812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:53:e3:a4:52:96:97:c9:ad:47:5f:c1:d4:
e3:99:3c:be:01:9a:1a:d8:ec:78:3a:98:97:67:66:
eb:aa:b2:19:bc:31:ca:a4:9a:36:ed:70:33:82:b1:
00:36:c4:ef:35:85:9f:c7:c1:af:30:ae:de:51:df:
5b:80:82:0b:cd:31:bb:de:d0:9f:44:94:24:67:85:
ad:e4:70:0d:54:60:19:15:50:92:77:6e:9d:18:75:
ea:38:75:ca:98:0e:29:95:1b:ca:71:d7:50:ca:03:
a4:93:36:e2:56:62:0b:6b:a9:9f:84:4e:b0:33:14:
13:ad:f1:5c:e2:fd:54:e2:3e:a0:55:28:f6:bd:f1:
e8:eb:37:e1:17:c1:d8:48:42:19:37:c7:10:a4:07:
ea:14:76:f8:76:38:d3:64:23:0c:7a:d0:6c:aa:37:
0f:db:ab:01:60:06:c0:85:9d:ed:2c:d9:1f:a3:cc:
e7:a5:e2:47:95:d6:28:4f:a9:61:1b:45:bd:c6:4e:
4c:72:99:4d:3f:fe:76:92:9d:ba:b8:ba:65:49:bf:
8e:39:b8:b5:57:3b:ac:5c:a7:b0:24:c8:03:47:91:
1c:b8:9e:4e:10:7b:96:26:b5:61:8b:a9:1b:24:5c:
b1:e8:d0:27:32:c9:f8:c7:b1:6d:2a:21:8a:3b:73:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:25:0E:FF:8A:A7:8A:49:1C:EA:FA:A5:49:0A:DA:7C:3A:58:12
X509v3 Authority Key Identifier:
keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:8d:62:75:7f:4a:8d:37:d5:16:bc:3b:ae:0b:34:6e:2d:
fb:11:1b:a4:22:c9:81:13:2e:8d:05:9f:e8:95:65:d2:57:90:
74:94:75:91:53:c5:26:f6:27:99:45:74:74:6f:bd:dd:18:4d:
25:b9:ce:0f:f4:21:0e:eb:c4:10:40:12:4a:8e:96:7f:64:27:
27:64:c5:41:4a:02:e6:88:6c:0a:6c:e6:be:57:d6:38:51:9d:
4a:5d:af:9e:78:70:41:9a:aa:aa:40:9a:83:40:9e:4a:74:71:
20:82:34:54:2f:80:08:b2:ed:f6:b6:dd:3a:4a:18:4e:08:d6:
83:10:f5:76:40:71:d3:b7:fb:b6:22:0b:6f:62:78:fe:df:79:
cb:af:e6:2b:52:7f:50:ce:ca:20:70:b0:ec:91:42:f4:4a:7f:
d3:21:a2:8e:11:57:ba:ed:15:de:30:bb:79:3c:e1:72:88:9c:
e6:27:71:73:94:da:2a:2a:bf:00:e1:ba:a6:ba:14:e0:61:c2:
6e:85:f3:86:54:37:21:3e:eb:23:eb:2d:a8:75:43:a6:89:11:
bd:f7:36:18:ea:81:8d:53:39:8e:fe:75:2a:9d:9b:57:0e:e8:
34:06:be:1c:79:d8:24:19:73:01:44:6b:08:28:7e:de:0a:26:
7d:31:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:14 2026 by rpki-client