
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: 8A2FBNxLso6kYN3XDVR8hIW04SmPnyFr85bo2FjM/Vc=
Subject key identifier: 08:5C:DF:CD:25:61:91:D4:C0:07:B0:F8:61:F1:EA:54:A1:AA:76:87
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019EC36E1D77F5551AA959079FF519A2F246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0F8B
Signing time: Sun 14 Jun 2026 00:00:34 +0000
Manifest this update: Sun 14 Jun 2026 00:00:34 +0000
Manifest next update: Mon 15 Jun 2026 00:00:34 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: tfk+5SRtKdi2h/wyM0EIez/NhyFO2gW5yuMCB4VNFz4=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:1d:77:f5:55:1a:a9:59:07:9f:f5:19:a2:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jun 14 00:00:34 2026 GMT
Not After : Jun 15 00:00:34 2026 GMT
Subject: CN=085cdfcd256191d4c007b0f861f1ea54a1aa7687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:0d:43:20:78:93:fa:a0:4b:9b:d5:1c:0e:
6c:7e:74:21:1d:2b:f5:34:5b:b1:c5:39:64:5c:7e:
67:33:96:97:55:19:8f:cb:e9:d6:a6:95:d7:26:e5:
51:9c:62:dd:3e:32:63:1d:21:7b:71:52:47:ca:bf:
4f:0d:ac:93:10:15:2c:aa:93:27:c3:c4:3c:f1:4d:
2b:a8:13:e8:14:e4:b1:bf:02:f3:c2:e8:c6:59:0b:
9a:e2:30:b8:64:5b:6f:dc:3c:5e:36:38:40:0a:58:
e9:8c:b1:b3:59:69:66:86:78:03:e4:ae:9c:19:49:
c4:c3:43:ca:5c:b1:76:25:f2:d3:4c:0d:a3:49:3d:
65:2f:40:ce:42:21:e4:d8:0f:78:15:a0:02:f8:de:
67:f5:b5:6a:62:3a:7e:8a:58:74:2d:8d:cf:21:12:
8b:ee:db:1f:72:40:26:b6:8d:54:5f:f0:91:15:a0:
67:2b:3d:5f:9e:80:cb:0b:f1:09:91:34:ab:5a:ba:
92:ae:0e:dc:75:96:9f:66:44:0d:fd:89:9f:9e:8f:
5b:03:d7:5f:48:21:30:ff:f4:b8:8a:1d:d7:dd:56:
95:29:2a:b2:40:bc:ad:ab:7f:ad:bf:79:72:4d:7e:
1f:39:e7:5b:dd:ac:1c:b2:71:8a:8a:ca:37:4e:be:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5C:DF:CD:25:61:91:D4:C0:07:B0:F8:61:F1:EA:54:A1:AA:76:87
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d7:2f:ad:3d:5a:00:e9:a6:71:c5:b0:e4:dc:71:29:69:f7:
a3:d2:05:59:e6:34:80:fa:76:bb:ed:7d:f5:6a:57:ff:87:c3:
ac:15:7b:f4:54:5c:45:a6:c7:00:fd:45:df:a2:22:9d:da:a9:
95:d0:15:d6:f8:2d:66:10:27:00:31:0d:2f:78:95:ea:51:f5:
88:99:37:50:52:cf:5b:91:69:9e:a2:61:05:dd:14:42:20:80:
ed:76:14:f9:9c:c6:d3:fd:52:20:fb:60:c7:42:38:a1:ee:66:
5a:f9:c8:63:8c:e6:ed:fc:02:da:fb:62:5b:cc:8d:f4:e6:ad:
a5:ef:ea:c4:42:59:39:42:d5:0a:96:d0:a3:f5:c6:a4:d7:76:
c5:36:eb:91:f9:f4:b8:cb:45:40:05:b0:0a:00:25:eb:2e:80:
be:be:48:4c:76:b0:0b:fd:4c:7d:1a:2c:2a:aa:3e:35:4e:bc:
40:dc:cc:6a:38:58:8b:ac:e6:fd:5d:c8:78:cf:72:08:fd:2c:
01:f9:09:e8:08:a7:00:43:cd:65:42:66:dd:ab:2d:7b:8a:7d:
91:58:1c:9b:f8:4e:62:86:17:af:19:0f:23:d7:a0:97:17:1a:
5d:9e:b8:9f:5c:ec:f4:45:dc:1e:06:b1:30:71:f5:36:2f:2a:
9e:f8:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:25 2026 by rpki-client