Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: hFMNoNgEdOntqkKRbGBECbwBAhS2cVWYQAe6RB8WKPY=
Subject key identifier: 0E:8C:FA:AA:77:69:6E:02:79:60:9E:94:53:70:DC:24:B3:4F:2D:0F
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019FAB9A9B28C82CF6891191FF462558E14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 0193
Signing time: Wed 29 Jul 2026 02:01:03 +0000
Manifest this update: Wed 29 Jul 2026 02:01:03 +0000
Manifest next update: Thu 30 Jul 2026 02:01:03 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: gkwqoH94mzCadHVhKjGZpEZbkwBIAxQLNuTvyQV+RCA=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:9b:28:c8:2c:f6:89:11:91:ff:46:25:58:e1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Jul 29 02:01:03 2026 GMT
Not After : Jul 30 02:01:03 2026 GMT
Subject: CN=0e8cfaaa77696e0279609e945370dc24b34f2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:08:50:0b:16:c6:10:1b:f8:ff:4c:39:fb:
a6:67:6c:70:96:45:10:11:92:4b:41:2f:3f:90:d1:
3e:dc:57:e8:90:29:57:21:c9:16:46:8e:3a:1c:32:
af:68:ab:51:e6:da:4f:59:69:ce:08:96:c2:93:69:
0f:e6:24:99:bb:c8:97:8b:53:86:6a:89:af:a6:58:
08:55:86:5b:57:e9:07:02:77:11:f5:97:a5:cc:d5:
06:2e:77:e4:7b:46:bb:69:1a:fc:19:d8:dc:84:ab:
ba:14:59:2d:25:fd:9d:53:bb:35:a5:f1:60:d6:59:
23:0d:75:99:40:0d:3c:a3:07:83:e2:89:e3:07:02:
2e:e6:bc:35:2d:b8:d0:c7:6a:5b:e9:82:3a:ae:1f:
3c:c8:d3:5e:ce:cf:56:48:4e:0f:85:89:d7:2d:b3:
31:4b:84:c9:3b:7e:3d:05:1a:5c:5c:a4:de:75:6b:
fb:f5:a1:ba:e2:52:3d:24:b9:8b:72:47:a8:30:d0:
d8:66:0f:03:8a:77:21:29:da:9e:c9:00:26:49:fa:
8d:cd:4f:e8:d4:f5:eb:23:dc:a7:8d:0f:c2:1e:59:
a8:59:a9:3e:e1:df:b2:da:dc:05:61:27:df:6b:44:
ff:a0:77:dc:bf:0b:2b:b6:9b:b3:41:39:2d:14:7c:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8C:FA:AA:77:69:6E:02:79:60:9E:94:53:70:DC:24:B3:4F:2D:0F
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:a2:91:43:17:7a:97:c4:a1:e5:1a:2e:0a:8c:79:14:4f:
55:ba:6d:6b:3e:78:0f:6d:68:3d:3e:6d:69:c7:b0:2b:c2:0c:
47:5f:bd:bb:43:cf:5f:ec:ad:a4:53:ed:bf:f2:20:ee:f3:06:
cc:25:75:9b:42:2f:93:71:e4:b4:46:19:64:d4:e1:e3:ba:31:
f9:05:ec:27:eb:87:ca:0d:27:64:77:9a:35:f2:e1:b8:a5:b5:
e5:46:3a:18:d6:16:41:f4:15:12:1e:37:45:63:96:60:7c:93:
5c:d4:4b:ad:96:53:9c:1c:b9:64:8e:c6:34:1f:67:c3:cc:9b:
44:85:d3:d3:a5:38:dd:39:20:32:a5:84:e8:e2:4a:5c:7f:a3:
b4:1d:ba:b9:38:1b:74:a8:12:76:29:48:ae:52:13:aa:53:11:
62:e5:36:3f:40:e2:4e:52:98:41:75:ec:52:2d:70:24:30:28:
f3:a2:67:89:4c:4b:19:d2:59:df:c1:81:70:3b:db:15:94:da:
d2:69:3b:4e:62:72:9e:ca:55:19:74:ef:09:11:cb:e6:4e:8d:
e6:3f:e6:3c:73:f9:cf:18:84:9a:7a:2d:25:76:65:15:52:20:
28:6a:34:ac:5a:c3:52:d8:a8:a5:93:e4:ea:ed:04:7d:e7:8a:
fb:e6:72:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmpsoyCz2iRGR/0YlWOFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODNlOTEzODZiN2MwMDJhNDdhN2ZhNGY3YjdmZDM1ZmY5
ZTRlMGEwHhcNMjYwNzI5MDIwMTAzWhcNMjYwNzMwMDIwMTAzWjAzMTEwLwYDVQQD
EygwZThjZmFhYTc3Njk2ZTAyNzk2MDllOTQ1MzcwZGMyNGIzNGYyZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZIIUAsWxhAb+P9MOfumZ2xwlkUQ
EZJLQS8/kNE+3FfokClXIckWRo46HDKvaKtR5tpPWWnOCJbCk2kP5iSZu8iXi1OG
aomvplgIVYZbV+kHAncR9ZelzNUGLnfke0a7aRr8GdjchKu6FFktJf2dU7s1pfFg
1lkjDXWZQA08oweD4onjBwIu5rw1LbjQx2pb6YI6rh88yNNezs9WSE4PhYnXLbMx
S4TJO349BRpcXKTedWv79aG64lI9JLmLckeoMNDYZg8DinchKdqeyQAmSfqNzU/o
1PXrI9ynjQ/CHlmoWak+4d+y2twFYSffa0T/oHfcvwsrtpuzQTktFHxFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6M+qp3aW4CeWCelFNw3CSzTy0PMB8GA1UdIwQY
MBaAFIWD6ROGt8ACpHp/pPe3/TX/nk4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hNmRlODctNTUxNy00NjgxLWEyMzYt
MzY4YmMxYmY4M2VhLzEvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hNmRlODctNTUxNy00NjgxLWEyMzYtMzY4YmMxYmY4M2Vh
LzEvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRuikUMX
epfEoeUaLgqMeRRPVbptaz54D21oPT5tacewK8IMR1+9u0PPX+ytpFPtv/Ig7vMG
zCV1m0Ivk3HktEYZZNTh47ox+QXsJ+uHyg0nZHeaNfLhuKW15UY6GNYWQfQVEh43
RWOWYHyTXNRLrZZTnBy5ZI7GNB9nw8ybRIXT06U43TkgMqWE6OJKXH+jtB26uTgb
dKgSdilIrlITqlMRYuU2P0DiTlKYQXXsUi1wJDAo86JniUxLGdJZ38GBcDvbFZTa
0mk7TmJynspVGXTvCRHL5k6N5j/mPHP5zxiEmnotJXZlFVIgKGo0rFrDUtiopZPk
6u0EfeeK++Zyqw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:12 2026 by rpki-client