Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: NzV9LPq3IbP7L5IbuXC+tHuZE0iC2b5q9uqvs8CEWoo=
Subject key identifier: DC:27:9F:15:30:89:C1:50:1E:72:54:15:D4:29:39:63:4D:3A:17:45
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01A10AA7481DB525C59D7B1270C379292B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 10B9
Signing time: Mon 05 Oct 2026 06:01:37 +0000
Manifest this update: Mon 05 Oct 2026 06:01:37 +0000
Manifest next update: Tue 06 Oct 2026 06:01:37 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: rRrar3yLWGt27rN4A5UuVXejl2qwOoYbLiBTLJilAXA=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a7:48:1d:b5:25:c5:9d:7b:12:70:c3:79:29:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Oct 5 06:01:37 2026 GMT
Not After : Oct 6 06:01:37 2026 GMT
Subject: CN=dc279f153089c1501e725415d42939634d3a1745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:73:d5:c1:4b:c2:58:de:ef:5c:ac:b7:2b:
84:bd:6e:0f:e6:01:f5:e3:d9:1b:c7:d2:15:60:fd:
a3:b4:f8:17:16:85:23:38:51:56:a6:a8:5c:88:e1:
b0:fc:fa:30:92:e9:d9:45:8d:3a:1b:d8:0b:55:fe:
08:84:91:21:79:7b:dc:ec:bd:f1:36:91:86:87:ce:
fb:4c:e8:3f:d9:fb:ac:cf:be:1f:1d:4f:52:2b:be:
a6:a5:88:f6:9d:20:54:d8:b6:cc:75:1d:bd:61:52:
e0:86:1a:3f:19:50:5f:ce:e1:7f:1d:a9:f2:6c:ec:
4e:e7:da:8b:65:de:b9:a9:4b:af:20:37:e6:6b:57:
1c:70:32:20:30:bb:04:cb:64:87:e9:ab:03:be:19:
28:af:37:d0:e3:97:b0:3f:72:ef:e2:0d:2d:d7:19:
22:83:7c:0d:29:4d:ed:f7:fc:d9:4a:0a:0a:33:64:
80:38:ff:a0:22:d2:fe:6a:47:7a:52:63:8e:99:a8:
1b:4e:be:44:5a:ca:4e:0a:f1:03:19:9c:5d:ef:db:
26:8f:6f:42:92:54:aa:2e:7e:3a:23:ba:99:e6:c5:
f0:2c:5c:19:2a:79:d7:e4:d4:89:64:da:72:4a:3e:
64:7e:72:6f:90:f3:dc:86:e2:30:ec:2b:08:a5:71:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:9F:15:30:89:C1:50:1E:72:54:15:D4:29:39:63:4D:3A:17:45
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:47:45:ee:54:b3:2c:de:81:19:31:f7:3e:bd:0e:91:53:
44:e1:0c:22:91:8b:c7:eb:19:81:8b:f5:9c:74:c1:cb:84:11:
bd:9a:67:ec:a1:a5:f7:62:93:ff:e3:4b:e2:a9:2c:be:65:65:
94:22:89:b5:58:3b:c5:8b:63:58:16:cb:3b:ff:08:20:b2:0a:
6f:0a:6e:cc:4e:ca:f8:0d:7b:4c:7b:ea:1e:00:a9:04:a7:8e:
4a:55:e9:9d:ce:89:98:f6:04:24:fb:ca:60:5a:97:cf:fa:38:
7e:4e:d9:d1:ae:9d:34:bd:4f:81:cf:75:15:b0:e8:d3:7f:ad:
e0:d8:88:ea:af:aa:1d:78:37:08:73:82:cd:52:ff:42:91:80:
7b:de:6c:62:cb:cd:59:91:01:00:cb:e7:4c:7b:8f:88:a1:76:
8f:28:51:f3:4e:3c:7c:4c:08:20:45:d9:0e:fd:0c:81:65:30:
ad:09:04:8b:f9:2e:79:d7:62:43:ff:6d:f2:92:a7:ca:ae:26:
48:47:5d:6f:80:63:50:f9:a9:bb:c7:ae:89:0e:22:d0:77:63:
c1:d9:34:4d:4a:cc:1a:3f:c2:08:e9:79:1c:a3:e7:56:fc:5f:
66:03:7f:ff:5f:ac:0c:8f:5d:21:bb:f2:57:13:03:5e:d3:ca:
63:a2:f7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKp0gdtSXFnXsScMN5KSsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjYxMDA1MDYwMTM3WhcNMjYxMDA2MDYwMTM3WjAzMTEwLwYDVQQD
EyhkYzI3OWYxNTMwODljMTUwMWU3MjU0MTVkNDI5Mzk2MzRkM2ExNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UZz1cFLwlje71ystyuEvW4P5gH1
49kbx9IVYP2jtPgXFoUjOFFWpqhciOGw/PowkunZRY06G9gLVf4IhJEheXvc7L3x
NpGGh877TOg/2fusz74fHU9SK76mpYj2nSBU2LbMdR29YVLghho/GVBfzuF/Hany
bOxO59qLZd65qUuvIDfma1cccDIgMLsEy2SH6asDvhkorzfQ45ewP3Lv4g0t1xki
g3wNKU3t9/zZSgoKM2SAOP+gItL+akd6UmOOmagbTr5EWspOCvEDGZxd79smj29C
klSqLn46I7qZ5sXwLFwZKnnX5NSJZNpySj5kfnJvkPPchuIw7CsIpXHifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwnnxUwicFQHnJUFdQpOWNNOhdFMB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/NHRe5U
syzegRkx9z69DpFTROEMIpGLx+sZgYv1nHTBy4QRvZpn7KGl92KT/+NL4qksvmVl
lCKJtVg7xYtjWBbLO/8IILIKbwpuzE7K+A17THvqHgCpBKeOSlXpnc6JmPYEJPvK
YFqXz/o4fk7Z0a6dNL1Pgc91FbDo03+t4NiI6q+qHXg3CHOCzVL/QpGAe95sYsvN
WZEBAMvnTHuPiKF2jyhR8048fEwIIEXZDv0MgWUwrQkEi/kueddiQ/9t8pKnyq4m
SEddb4BjUPmpu8euiQ4i0Hdjwdk0TUrMGj/CCOl5HKPnVvxfZgN//1+sDI9dIbvy
VxMDXtPKY6L31A==
-----END CERTIFICATE-----
Generated at Mon Oct 5 09:23:09 2026 by rpki-client