Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: PcjQcu9D1u3rio3tQiDO6AQQsC4XN+8S5K8OaRHnRuM=
Subject key identifier: 18:90:68:1A:00:CC:95:B0:B2:58:02:FD:6E:A6:15:7D:06:55:ED:45
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 019FA89953DC5F3D7D395D06BC1E354AFE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 12:00:48 +0000
Manifest this update: Tue 28 Jul 2026 12:00:48 +0000
Manifest next update: Wed 29 Jul 2026 12:00:48 +0000
Files and hashes: 1: 8OTUnfIsOo0HOvnAnxDiliLhxVk.asa (hash: yWmYRKzlchVAVmIXrfu5eKc71tco2zin1I9txnwVrGw=)
2: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: acQJAh9dFeSNe0ZrQ8oU4gGuxzZlvIGsFOhOuSQj4FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:53:dc:5f:3d:7d:39:5d:06:bc:1e:35:4a:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Jul 28 12:00:48 2026 GMT
Not After : Jul 29 12:00:48 2026 GMT
Subject: CN=1890681a00cc95b0b25802fd6ea6157d0655ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:8d:23:b2:5c:bd:2c:bf:2c:0b:f1:2c:3a:
fa:5b:f6:e3:04:cf:19:d4:b5:d8:b4:c5:76:94:47:
d1:1b:e5:4c:9b:cd:b9:32:1e:c3:14:5f:70:b0:a6:
cb:c0:c9:34:0c:e2:b4:6f:77:fb:06:4c:85:62:62:
37:c6:74:e6:d0:10:06:90:ed:d6:6b:99:82:41:fa:
cf:43:14:92:8f:4c:32:86:7a:ed:ac:e3:b0:3b:67:
ce:52:af:82:41:8c:cb:cd:aa:63:c3:a6:ec:51:43:
f2:9c:c3:94:05:87:4f:5f:a2:b9:b0:36:4d:73:92:
d4:be:e2:86:27:3f:fe:5c:26:c4:dc:11:ce:88:4b:
ec:a0:1b:78:2b:7d:e1:51:75:96:3c:0f:91:f7:28:
72:3d:db:29:59:2b:6c:ff:80:4e:fc:b9:86:8d:fd:
e5:fd:c5:82:f7:bd:c1:fc:4b:1c:f5:94:21:b0:e0:
ee:e1:68:7c:4f:35:d1:70:93:2a:65:5a:c8:5b:87:
c9:4f:5a:fb:84:b8:6c:18:89:5f:ad:c6:95:fc:2d:
51:9b:c6:05:2c:bb:46:d0:cb:10:83:82:38:83:b8:
b7:c0:82:04:cc:68:fa:18:93:fd:55:b8:54:e7:b6:
29:3d:20:19:8c:99:14:1e:47:28:54:e6:e2:78:bd:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:68:1A:00:CC:95:B0:B2:58:02:FD:6E:A6:15:7D:06:55:ED:45
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dc:d6:fc:c9:d4:cd:94:98:af:4b:80:54:d4:9b:d7:c0:3a:
02:da:ac:d6:ff:68:3b:d3:cb:3a:dc:07:a6:a4:35:9c:03:79:
13:85:1d:cb:60:c1:91:6f:79:3e:09:e8:70:cb:99:cc:10:0b:
07:6c:95:e9:bf:ed:a1:73:a1:48:a3:0b:d3:8b:d5:ae:fb:0c:
9c:c2:bd:f1:05:40:cf:89:8a:f1:f0:5d:e7:51:f6:e9:39:98:
6e:dc:89:32:ee:20:c3:06:5e:c7:a6:6d:3f:9f:08:eb:ba:26:
b0:90:68:f4:c2:16:5c:0c:bc:a0:34:32:a1:d6:59:4e:98:e0:
06:5b:68:11:4b:9b:fd:24:2b:1e:71:7f:c7:62:77:33:75:7c:
3d:8d:b7:fe:b5:0c:a5:e3:3a:a6:60:58:3d:98:9d:c7:1e:a1:
b6:eb:67:3a:7c:d0:c1:63:d4:bc:2c:51:82:b1:ad:3f:43:68:
bf:b6:e9:be:4e:26:fe:42:a5:8c:e9:69:1f:e3:d5:7d:47:c5:
b0:c6:90:a8:97:ce:bd:a7:7d:c7:c1:f1:c5:f0:66:1f:8e:01:
14:fd:2d:ce:8f:e3:b8:2f:16:fd:a9:dc:18:fa:a6:e6:ae:d3:
ac:59:f9:34:e2:e8:88:4d:b0:7a:35:fe:1b:06:65:f0:9e:ab:
52:d7:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:44:54 2026 by rpki-client