Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: o5iRiQPy8lV6SCagkc/WMLxaLWei2wwmQ1fnfmTXGIc=
Subject key identifier: 39:C8:35:D1:80:D9:57:59:7A:AE:3B:31:8E:00:61:ED:DD:A6:98:A3
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019D9C63214F45CD4CC4AE3BCDCB4A318BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 82
Signing time: Fri 17 Apr 2026 17:00:35 +0000
Manifest this update: Fri 17 Apr 2026 17:00:35 +0000
Manifest next update: Sat 18 Apr 2026 17:00:35 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: WavQ9aMyYpH1fbjNkCHN9kfhU3IhaJghlx75TUtqdaw=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:21:4f:45:cd:4c:c4:ae:3b:cd:cb:4a:31:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Apr 17 17:00:35 2026 GMT
Not After : Apr 18 17:00:35 2026 GMT
Subject: CN=39c835d180d957597aae3b318e0061eddda698a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:c6:5a:00:80:2f:e6:4b:09:30:c4:a9:b8:
05:dc:06:aa:c0:c4:ea:31:da:91:22:75:db:76:e2:
c7:96:a0:f2:61:f2:75:3f:7d:0b:b4:bc:88:a8:42:
b1:91:61:ca:ec:5b:f0:67:c1:ab:5d:1c:a0:db:77:
95:86:c0:5a:8c:6e:58:5b:7f:cc:28:8b:9d:2b:26:
c0:e5:4e:ff:2c:d8:e8:12:3a:0b:45:61:5a:6d:71:
79:38:05:ea:02:f5:80:42:c8:03:ae:e0:34:7d:22:
35:dc:d5:9a:3a:22:1c:1a:5b:b1:98:2b:97:54:c9:
20:06:5b:22:3d:45:02:0e:6c:3d:fc:f0:a1:2d:6e:
d5:c7:f2:77:ab:2e:56:90:a2:80:1b:9e:47:8c:7b:
d8:dd:8c:72:40:8e:e1:61:e5:bf:b7:c3:f0:b6:6a:
02:24:00:f1:c4:91:4c:d6:6e:8c:b8:3a:0a:4b:69:
d9:d6:ac:b5:a5:e6:f6:13:71:7d:8d:ca:ed:a2:d6:
11:2d:29:5b:9e:a8:42:7f:23:af:e1:63:c4:29:36:
65:d3:d1:1a:01:4c:6e:e1:69:67:4f:b3:11:a7:e9:
42:e5:c7:30:34:e4:a7:41:16:2a:73:6b:31:4b:2a:
d7:f7:ff:69:4b:6d:f9:25:a0:5c:5d:8d:d7:19:14:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:35:D1:80:D9:57:59:7A:AE:3B:31:8E:00:61:ED:DD:A6:98:A3
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:e1:f1:fe:c4:50:da:8c:c2:06:f5:10:9d:c6:c4:79:76:
85:33:c8:90:d1:78:22:21:be:28:2b:2b:26:23:f5:d6:40:d6:
d1:6f:59:7a:6b:c6:74:d6:46:89:3b:75:b3:ac:c7:d1:0b:5c:
d0:f3:96:28:16:db:6b:a4:70:db:bf:c6:e7:ea:10:68:f3:33:
95:71:47:9b:91:23:d0:90:4d:5e:ce:b6:61:13:fa:71:ee:8d:
91:d5:00:d1:8b:de:72:30:76:38:99:2c:17:db:84:0c:eb:31:
ab:63:d2:42:10:f4:53:c7:11:90:ff:3c:59:71:ca:aa:5e:b2:
38:b9:15:c3:1a:be:41:5a:02:33:44:84:49:68:55:df:7b:93:
88:b9:64:59:55:5d:c7:dd:7c:51:40:3a:ea:15:b3:ad:7e:10:
17:01:06:b4:d6:d4:2f:7b:98:99:87:c3:c8:e2:31:d2:d9:d4:
60:ec:d0:81:22:93:69:c1:d8:a7:44:4d:82:71:c3:23:6c:f1:
b1:4b:c5:f1:3b:75:e8:f1:dc:bb:63:a7:0d:24:c8:0f:8d:92:
41:97:2f:64:a5:f4:10:cc:0a:83:59:70:77:3d:b8:e1:8b:64:
f6:f2:a6:f0:27:8d:22:85:19:44:9a:cb:eb:8c:9c:b2:8d:ea:
00:41:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:28 2026 by rpki-client