Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: FLOYGM1BiPHbhC1zuba10j+Q8QJTHOGn8+CNCjhi57w=
Subject key identifier: BC:AA:91:51:33:BF:38:5A:7A:2A:31:AE:94:9A:92:82:B3:57:0A:9A
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019CAA8F82CE5A365447095DBF5DDE0D3E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0E75
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: 17DL+tEId0U9Uic4jlsQfkauEH4zcz26A6abRpt9E7Y=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:82:ce:5a:36:54:47:09:5d:bf:5d:de:0d:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=bcaa915133bf385a7a2a31ae949a9282b3570a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:2c:b9:56:60:3a:ba:e3:ce:ce:82:ab:3b:
f3:f3:0d:c5:45:4f:d3:6c:e1:d0:5e:65:2e:11:3f:
77:78:a0:54:e9:04:f2:1d:d7:ea:02:d1:26:82:d2:
4c:29:63:32:3e:4d:62:af:df:ce:f0:c1:b9:82:c2:
b8:68:95:eb:65:bc:20:64:ed:37:93:2c:55:48:31:
7d:af:f2:5c:8d:22:8b:f2:1d:67:bd:ce:88:af:0a:
e9:ca:e6:82:ad:39:b7:e2:ae:7f:2a:34:31:99:77:
a6:02:d9:4e:de:0a:61:30:64:0d:36:4f:b8:85:4a:
41:13:00:95:82:de:69:2d:0e:b4:1f:5e:65:59:2f:
2a:a5:c3:de:1d:7a:c3:f8:e4:3b:f9:54:ec:17:36:
84:2c:ef:91:63:ac:ad:3c:3c:aa:87:65:9c:e6:8a:
86:d0:5c:f7:c3:6e:1f:0e:e4:13:f1:14:df:09:a6:
32:84:30:fd:19:ca:61:1c:37:2e:ab:52:71:e7:63:
69:be:4d:31:59:f8:c8:12:b5:d9:2d:f3:21:e7:52:
a0:6f:45:a9:95:4c:9e:d6:5a:f5:e8:dc:5c:ba:30:
06:72:56:8d:3c:e9:b0:89:0e:20:1f:59:fd:fe:12:
b3:61:99:f5:61:0e:67:a2:31:17:d0:11:ab:7e:cd:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:91:51:33:BF:38:5A:7A:2A:31:AE:94:9A:92:82:B3:57:0A:9A
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c3:9e:a8:11:31:6c:1f:ad:fc:02:7f:80:4c:bd:1f:0b:6f:
49:25:2e:c6:69:d9:68:77:53:4f:3f:f1:8f:46:b5:1f:72:27:
88:6e:22:ea:05:10:f0:af:4e:bb:8c:c5:3e:6d:cb:fe:ac:8d:
65:ba:c3:36:8e:dc:71:bf:c7:fe:ea:58:63:50:73:32:0b:a8:
13:57:52:d7:38:c1:70:04:27:7f:7b:7c:e7:12:f3:2d:95:43:
31:74:0f:0d:99:c0:04:f1:5b:a8:1d:51:b1:a4:1f:da:1a:73:
c3:d3:be:cb:66:f3:70:d4:00:2a:f1:ab:11:d6:0a:23:db:ef:
34:5b:ca:c0:07:d6:04:eb:71:bc:42:94:d3:fd:2d:72:e4:f5:
77:83:6c:c6:5f:8a:1b:52:18:1c:6d:6b:8e:17:bc:ba:56:0c:
79:2a:f0:e3:ef:d9:04:28:03:96:0a:7d:e6:a2:eb:62:38:c6:
5c:e4:cd:4c:87:42:57:79:97:37:b9:a4:57:ab:56:3c:89:e7:
6e:a4:aa:b6:05:10:f6:ee:e5:80:f6:6a:33:d6:f5:b9:fa:ed:
c2:fb:8f:68:32:ca:dc:f1:80:eb:82:ef:18:ea:d6:34:38:cd:
12:b0:fc:da:fc:b0:d8:79:73:e0:1c:8c:36:0a:d5:c7:5b:46:
d4:04:44:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4LOWjZURwldv13eDT5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjYwMzAxMTgwMDU3WhcNMjYwMzAyMTgwMDU3WjAzMTEwLwYDVQQD
EyhiY2FhOTE1MTMzYmYzODVhN2EyYTMxYWU5NDlhOTI4MmIzNTcwYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFEsuVZgOrrjzs6Cqzvz8w3FRU/T
bOHQXmUuET93eKBU6QTyHdfqAtEmgtJMKWMyPk1ir9/O8MG5gsK4aJXrZbwgZO03
kyxVSDF9r/JcjSKL8h1nvc6IrwrpyuaCrTm34q5/KjQxmXemAtlO3gphMGQNNk+4
hUpBEwCVgt5pLQ60H15lWS8qpcPeHXrD+OQ7+VTsFzaELO+RY6ytPDyqh2Wc5oqG
0Fz3w24fDuQT8RTfCaYyhDD9GcphHDcuq1Jx52Npvk0xWfjIErXZLfMh51Kgb0Wp
lUye1lr16NxcujAGclaNPOmwiQ4gH1n9/hKzYZn1YQ5nojEX0BGrfs0zAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyqkVEzvzhaeioxrpSakoKzVwqaMB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMOeqBEx
bB+t/AJ/gEy9HwtvSSUuxmnZaHdTTz/xj0a1H3IniG4i6gUQ8K9Ou4zFPm3L/qyN
ZbrDNo7ccb/H/upYY1BzMguoE1dS1zjBcAQnf3t85xLzLZVDMXQPDZnABPFbqB1R
saQf2hpzw9O+y2bzcNQAKvGrEdYKI9vvNFvKwAfWBOtxvEKU0/0tcuT1d4Nsxl+K
G1IYHG1rjhe8ulYMeSrw4+/ZBCgDlgp95qLrYjjGXOTNTIdCV3mXN7mkV6tWPInn
bqSqtgUQ9u7lgPZqM9b1ufrtwvuPaDLK3PGA64LvGOrWNDjNErD82vyw2Hlz4ByM
NgrVx1tG1AREFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:22 2026 by rpki-client