Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: 4WDOKkVhmDuMpxPuXZTlmPqX+dZWdaQVYlux+59dbJ0=
Subject key identifier: 14:69:32:46:7E:56:84:29:07:F2:3B:D7:A5:4A:4A:11:E1:09:8F:1A
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 01A0CE23802B3E4427D56DC0B4211DFE81CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 0681
Signing time: Wed 23 Sep 2026 12:00:28 +0000
Manifest this update: Wed 23 Sep 2026 12:00:28 +0000
Manifest next update: Thu 24 Sep 2026 12:00:28 +0000
Files and hashes: 1: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (hash: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=)
2: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: Tz+3E6OY0MjfxJINr+TpKU32CT1Q6t23GsNmMgkoMRk=)
3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:80:2b:3e:44:27:d5:6d:c0:b4:21:1d:fe:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Sep 23 12:00:28 2026 GMT
Not After : Sep 24 12:00:28 2026 GMT
Subject: CN=146932467e56842907f23bd7a54a4a11e1098f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:d1:4f:b5:fe:d9:94:98:6f:19:44:37:94:
59:31:45:00:d6:cd:c7:a3:d0:95:1b:37:29:fb:b6:
0e:bd:95:56:f7:8b:42:78:da:34:70:ca:e0:fe:70:
54:19:ed:21:5b:b0:0a:f6:76:bd:0e:82:17:41:7f:
27:d7:f6:9b:d1:ed:fb:5b:55:24:04:26:be:ce:37:
35:9d:13:c0:ce:4e:18:07:2b:8e:75:96:d2:31:c7:
07:c0:35:19:4a:dd:ec:50:34:ad:53:df:6b:1f:f5:
6c:a0:8e:3f:c1:b2:ee:14:50:34:79:8d:c5:17:5d:
95:14:aa:5e:5e:1f:64:26:ad:39:ed:e3:51:3e:0c:
46:bd:98:3a:c4:c1:33:28:bd:bd:b6:d3:02:62:b8:
18:d1:3a:0e:97:3d:ef:ca:1d:25:29:29:93:ed:3c:
89:2d:60:a3:d9:a2:e3:d4:2f:a7:40:a6:cd:37:38:
9f:53:9b:71:19:29:35:ab:46:47:a9:78:0b:f1:b4:
7e:ef:6a:c2:ea:3f:de:0c:cf:11:4d:5b:12:96:40:
51:62:2d:1a:e6:dd:4d:87:3f:eb:13:88:d1:a5:b5:
29:1f:5a:87:6e:48:6a:5a:74:4a:da:54:2c:bd:40:
a5:5e:dc:31:28:14:bc:67:c3:fa:b7:ac:22:fe:b1:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:32:46:7E:56:84:29:07:F2:3B:D7:A5:4A:4A:11:E1:09:8F:1A
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ad:29:4e:dd:19:72:4d:41:6a:b8:c4:fe:3c:a3:b7:1b:59:
74:ce:44:d1:a1:f6:f3:3f:99:c3:02:c7:37:36:f7:72:59:0c:
eb:9e:bb:8b:51:db:3a:b1:4c:11:58:a6:a9:45:fa:94:f6:79:
88:4d:7a:16:16:54:c1:d4:ce:b8:52:4a:1f:92:bb:2a:ae:d7:
82:40:41:f1:43:03:ad:7b:61:09:ea:02:a7:36:d3:53:2d:32:
01:3f:b4:e4:f7:a5:d9:e0:74:0e:fb:42:6f:16:3c:be:08:1f:
5f:f4:51:64:c1:a9:04:53:d2:f6:a1:9e:16:e8:f9:ab:8b:32:
71:9f:7d:f3:75:f2:71:af:29:d4:33:53:8b:a6:9b:d0:a7:58:
6c:2f:e6:56:f1:b1:f8:e4:0b:4e:b2:06:d7:c8:aa:83:38:0a:
de:1a:8b:6c:50:f6:3d:2b:48:72:d9:15:63:a1:69:b0:98:8e:
e5:77:c4:8e:cf:9a:ee:8f:e2:35:c8:e7:4b:3e:a8:4e:ff:f9:
d2:f9:97:90:ff:dc:db:3e:91:57:13:df:c2:6a:9e:66:2d:32:
02:7f:4d:dd:18:e4:8d:9f:62:14:1b:e0:6a:6d:5e:b3:0d:60:
b8:88:aa:ed:34:c1:fb:53:c2:a9:31:55:9f:10:45:cb:3c:df:
1d:7e:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:09:44 2026 by rpki-client