Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: 0n7EODEb8ShbtYlbNLm/pKvViKqKe8oD3Mb6sIMDPqY=
Subject key identifier: D9:74:31:FB:31:D8:DA:26:5D:57:99:EB:71:88:38:76:F4:E3:09:E1
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019D9A06CDE7A5085089C274795F67EAEA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0721
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: D0fGHqBH2TjjwdnMjjANvNab2RFQKl0+i6Vwic7lPt0=)
2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:cd:e7:a5:08:50:89:c2:74:79:5f:67:ea:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=d97431fb31d8da265d5799eb71883876f4e309e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:85:6a:ee:37:7d:4a:fe:07:f2:6c:b4:7a:
ff:19:71:0d:d6:cc:60:cc:d0:47:60:bc:38:43:e0:
15:38:ac:17:43:3e:54:21:41:2e:69:20:3e:7c:7b:
ba:58:c0:7e:80:4f:3e:e7:88:0a:0e:36:c2:ca:5b:
42:64:b3:0f:1f:b3:3c:8d:16:c3:20:b0:50:4a:b8:
8e:80:61:34:b1:2d:17:43:9f:12:f1:78:eb:41:41:
e4:6f:ad:3e:06:c4:8c:69:72:4a:0c:04:91:7f:c8:
f3:4e:30:1a:04:4d:5c:46:d9:45:c6:f9:04:d0:19:
ec:7e:fd:bb:fe:6b:33:8a:82:b7:50:ce:3c:27:88:
94:ca:4b:1c:b5:7f:35:98:a5:27:d8:66:f6:f3:85:
0d:2e:71:38:78:0c:00:84:a4:11:0c:bf:ea:e8:83:
d8:84:7e:63:be:1e:22:a3:56:96:3d:fb:ea:a2:9d:
95:bc:2f:05:13:c3:0c:6b:5e:68:56:b8:45:5f:45:
bb:55:3e:0d:c7:b2:7f:b1:b2:38:42:bd:54:51:2b:
f9:c0:9e:57:14:3c:cc:3a:2f:88:e6:51:b2:c9:38:
6b:b8:41:47:c6:e4:e8:87:ae:b4:c8:98:00:50:4d:
68:7c:1b:bc:c5:78:0a:08:4b:72:9e:71:67:eb:c7:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:31:FB:31:D8:DA:26:5D:57:99:EB:71:88:38:76:F4:E3:09:E1
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:d1:ff:d5:e6:39:a4:fc:a2:7d:ef:8d:74:90:5f:8d:bd:
b2:5f:88:ea:01:55:2b:a3:79:3d:c1:da:cd:09:f0:a1:af:75:
10:de:62:ed:d0:b2:82:fa:9e:b7:63:f9:4b:46:8d:ab:9d:7e:
26:3a:44:2a:55:6c:b9:88:ae:40:15:d1:cb:d0:6a:99:7a:58:
9e:e8:93:eb:29:65:c3:d8:79:64:65:7c:2b:14:b7:b4:3f:1b:
3c:d2:72:4e:75:c1:bf:ac:93:ca:ea:90:c9:3f:e0:df:df:73:
ea:12:42:ce:e1:63:95:fe:8d:ed:fb:28:9c:a5:eb:25:3b:ff:
28:05:3a:b3:19:19:b4:28:42:8b:b2:a7:66:65:de:8e:ca:6a:
50:4a:08:69:b2:4c:45:cc:6c:5a:d6:2f:be:46:c6:c8:56:0b:
3d:8f:0a:c4:4f:e9:63:51:06:bf:29:50:b6:12:a0:7e:76:ec:
f5:63:22:0e:48:a6:c4:04:2c:b7:07:b1:77:54:ae:67:e5:56:
5b:ef:2a:9b:0b:9b:f4:d1:99:9b:ad:47:73:ed:52:e9:7e:77:
4c:be:22:50:b0:48:d0:a6:15:0b:4f:32:e3:07:fd:a6:15:64:
ee:d5:45:2f:db:bc:8e:de:8c:b2:79:d9:e2:92:d0:13:8c:2d:
33:3d:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:31 2026 by rpki-client