Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: Mztz6LZNu/dUJLQETxhIhBBWmTvon1pLDzvZhgkJA/s=
Subject key identifier: 11:D0:56:F1:BC:02:AC:B1:63:F2:C0:BA:E3:3E:DA:5E:56:AB:0B:8D
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01A108B8F621AFC016024A88CAAEBC16F3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 10B8
Signing time: Sun 04 Oct 2026 21:01:41 +0000
Manifest this update: Sun 04 Oct 2026 21:01:41 +0000
Manifest next update: Mon 05 Oct 2026 21:01:41 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: mXXWIkoF3xKvergDjLlqwErZmH3f9kXSTSQNERsEVQI=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:f6:21:af:c0:16:02:4a:88:ca:ae:bc:16:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Oct 4 21:01:41 2026 GMT
Not After : Oct 5 21:01:41 2026 GMT
Subject: CN=11d056f1bc02acb163f2c0bae33eda5e56ab0b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:66:e4:9e:68:c8:0e:62:0c:03:83:98:08:
cf:d1:ca:64:af:1a:9c:41:c9:14:ae:57:d7:12:5c:
03:69:99:6e:2c:c9:73:13:27:07:cd:af:83:e3:d6:
70:51:d5:63:9d:14:33:03:52:b0:9c:01:27:59:50:
c9:2d:97:b8:f0:0e:84:85:47:92:bb:6a:48:13:2d:
60:d5:fd:62:7e:33:88:91:cc:00:29:bb:44:fa:c3:
51:f1:76:9d:3b:ef:38:52:2c:93:15:d8:25:14:01:
2c:78:0c:a1:cd:50:1b:9a:64:3b:a6:44:2e:87:5e:
bd:2d:dd:5e:85:4c:64:1b:4b:71:be:cf:71:2e:37:
88:62:6c:de:66:c7:32:ed:aa:c0:a6:86:9c:8f:c1:
da:ed:61:b5:88:15:d7:77:d1:19:6e:e2:08:66:33:
e0:78:e3:a1:f4:60:55:ba:9c:78:09:16:2c:cc:fd:
05:62:d8:36:c1:ac:80:5a:dc:6f:b1:78:31:9a:21:
7a:80:76:bf:78:f8:82:dd:df:8f:a7:4d:7e:8f:7c:
f7:a6:04:17:07:9c:54:19:ca:02:4a:87:f3:cd:56:
bf:29:f0:24:6c:8a:97:5b:7f:72:68:9e:ba:1b:77:
b5:b2:bd:c1:3a:72:cb:ea:85:bb:44:85:04:b2:4a:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:56:F1:BC:02:AC:B1:63:F2:C0:BA:E3:3E:DA:5E:56:AB:0B:8D
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fc:2b:d2:21:30:90:df:9f:73:cb:1f:eb:d6:2b:c9:c9:21:
f0:c3:88:27:fc:09:f6:fe:a7:fe:70:ba:dd:13:c8:b5:89:3a:
9f:fb:39:17:41:0e:18:8e:0b:05:a0:e2:40:4a:92:8c:c2:df:
90:aa:5a:9c:2c:fa:b4:a1:6b:44:e0:97:87:37:2f:c9:84:d4:
dd:fb:66:b2:66:cf:91:cf:8d:b4:40:1f:a7:0f:81:64:da:89:
92:55:f1:94:09:bd:be:3d:bf:fb:bb:75:c8:62:d1:a0:3b:81:
af:dc:c9:0c:38:63:0e:e9:01:aa:2b:21:9c:86:00:1f:56:9c:
40:91:80:26:7d:fe:0b:2d:ae:67:09:bb:f3:47:61:93:52:3b:
4d:d3:08:32:82:5d:71:82:8d:e7:10:bb:96:63:eb:67:8d:4f:
73:d8:a2:af:78:ff:2c:7a:27:21:da:86:34:fa:82:f1:f3:ef:
e4:03:a4:53:e4:6a:a8:22:c3:c0:34:29:eb:62:18:a0:d6:03:
0b:43:bf:93:f0:c8:f6:e3:97:ff:8b:63:d8:5c:05:69:c5:d0:
a0:d9:35:93:ef:3a:12:0c:ce:f2:9d:35:bc:f1:9b:b2:1f:a2:
0c:4c:79:41:5f:d4:01:16:2d:48:6b:46:c8:7b:33:eb:66:02:
22:de:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:58:43 2026 by rpki-client