Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: xNefdRo+EoLPtx9NGq681w6efPtqZ54gdIi+wuWpo4o=
Subject key identifier: 00:6C:C7:14:D1:B3:40:F0:5E:A2:EB:7A:C4:00:C5:26:49:45:38:79
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019DA3AF1BABE58546DC819CBE6F330CD452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0EF6
Signing time: Sun 19 Apr 2026 03:00:55 +0000
Manifest this update: Sun 19 Apr 2026 03:00:55 +0000
Manifest next update: Mon 20 Apr 2026 03:00:55 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: 6M+f+tQzkSUDUyB9UInmBnB4EAL06JU36tn+QOgBXC0=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:1b:ab:e5:85:46:dc:81:9c:be:6f:33:0c:d4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Apr 19 03:00:55 2026 GMT
Not After : Apr 20 03:00:55 2026 GMT
Subject: CN=006cc714d1b340f05ea2eb7ac400c52649453879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:cc:2a:6a:93:0f:79:56:e0:ad:e1:da:63:
26:c7:3b:eb:6a:d3:67:58:3d:af:69:29:65:72:17:
8d:72:3c:75:79:07:8f:2d:74:03:d2:53:74:07:54:
39:64:ee:46:75:30:92:5b:5f:52:51:9e:a0:01:5b:
14:0c:6b:b8:bf:75:d2:42:3f:1c:c6:d2:0a:f2:fb:
ba:e9:fe:8b:42:48:02:9a:7f:13:be:75:47:e9:b6:
a7:27:11:bc:31:c0:75:d9:9f:fb:af:7b:0f:3b:16:
e0:09:b3:de:dd:03:d1:e6:3b:20:61:3d:5a:33:7d:
c5:9c:5e:dd:e7:8a:a8:85:d4:dc:8a:7d:98:66:44:
c1:e8:9f:63:78:88:c8:aa:4b:be:f7:58:56:96:71:
fc:99:c7:64:f5:0e:20:83:37:5f:fe:65:66:0d:26:
2c:38:ab:51:1f:9d:4c:90:8b:97:c8:09:13:8d:b6:
3b:1f:0c:57:4e:cf:78:84:da:39:cc:0d:fc:bc:96:
2e:18:00:21:e2:69:90:aa:21:81:48:68:bc:f8:53:
d9:84:c4:b7:8a:95:4e:cb:04:7a:04:8a:f3:ae:ae:
ed:f6:8f:01:9f:0b:7c:5d:c2:21:5c:2c:12:e0:b6:
a8:45:0d:5c:3c:da:13:68:15:6f:dc:4f:dc:61:72:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:C7:14:D1:B3:40:F0:5E:A2:EB:7A:C4:00:C5:26:49:45:38:79
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:7c:19:a8:c5:0f:b2:a3:61:ab:fd:1b:66:7b:d9:ca:90:
27:60:6c:78:cf:e3:ce:7e:1c:ba:6e:c7:2f:e4:ff:04:10:4f:
64:6a:4c:e7:4c:99:3a:d0:74:8f:cc:a7:f1:f4:3d:28:3b:e9:
7c:07:c2:f1:56:82:68:bc:b1:44:98:54:86:66:3e:2e:ae:69:
4c:37:06:9a:13:f6:ec:8c:c4:98:fb:34:81:d0:af:76:30:67:
89:24:40:6e:44:df:79:c1:7e:28:3b:24:95:d1:dc:c0:e7:de:
98:9c:c7:2a:2e:1a:9e:28:41:8e:37:b4:03:35:da:ec:26:c1:
fe:dc:7c:e7:c8:35:a1:5d:c2:37:85:7c:3e:6c:f3:b2:64:87:
06:a7:1c:ae:de:12:26:c5:7b:0b:8a:0a:91:9a:d4:77:bd:7f:
f4:a7:78:a0:a9:ac:c9:c6:dd:53:c6:6d:47:26:bd:b5:7a:a4:
c2:f2:6a:5c:7e:39:db:5a:0c:51:5c:c9:0f:3d:8f:a9:b6:1c:
ba:e2:45:d7:f6:20:4b:a0:f0:c8:4b:e5:67:fe:3a:b2:46:a4:
9c:23:d9:9a:ff:1d:b8:95:9b:8b:a9:82:f3:66:17:1c:41:26:
f3:fb:6f:aa:d4:1d:c7:10:6c:4a:e1:7f:64:49:85:eb:cb:75:
f1:fb:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:24 2026 by rpki-client