Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: RVcKFRwhCik+hIcWj1syBRc62sj3c5Ggzw3eODnAbi8=
Subject key identifier: DB:76:6F:D2:AF:9D:D7:6C:BA:B2:92:4F:DA:09:57:76:CD:9A:E8:11
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 01A0C77C934D4478D9F9C3B57C9FA864739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: 0226
Signing time: Tue 22 Sep 2026 05:00:25 +0000
Manifest this update: Tue 22 Sep 2026 05:00:25 +0000
Manifest next update: Wed 23 Sep 2026 05:00:25 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: gJ2jMrrnpV/54TaMYNDUdaKmtR4p44XL77LdnNG8/+4=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:93:4d:44:78:d9:f9:c3:b5:7c:9f:a8:64:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: Sep 22 05:00:25 2026 GMT
Not After : Sep 23 05:00:25 2026 GMT
Subject: CN=db766fd2af9dd76cbab2924fda095776cd9ae811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:b8:01:19:2e:76:fe:fa:4f:10:39:b8:87:
c1:26:86:63:fd:e9:4b:2f:9d:fc:7d:d4:73:33:a7:
4e:05:ae:49:6a:5a:42:f3:d5:e7:1e:e1:7e:77:9f:
bd:78:f5:4d:9b:11:3f:f2:2c:f4:cb:96:4d:eb:94:
8a:9e:b9:d9:0a:05:30:87:b0:2e:ba:8c:09:c8:21:
92:a2:0a:62:84:42:4e:fd:06:7b:a2:f4:65:3d:5d:
49:eb:15:81:bb:28:48:c1:9f:29:1b:8b:fb:65:f3:
42:b5:58:9b:93:30:44:41:33:3b:5a:7a:32:d4:41:
29:e5:0d:ee:84:2d:74:5f:48:99:81:2b:55:9f:79:
28:39:b1:3a:82:57:2b:fb:21:a7:e4:88:f7:f0:ab:
b7:04:08:d3:0c:1d:5b:59:54:df:57:9d:a6:a1:8f:
50:44:7f:11:b2:57:4f:2d:c8:d9:a2:89:be:40:89:
92:84:06:5b:02:0d:d1:10:42:5c:c4:2e:c9:5c:fc:
3f:b4:ae:d3:16:95:70:00:00:2e:ce:fb:8b:57:75:
a2:2d:b0:23:82:30:e9:77:1c:2d:b9:ee:4f:35:37:
af:eb:64:a8:e3:34:f1:9d:09:b6:21:8b:d8:3f:73:
26:42:3b:c2:13:34:d1:c7:32:f9:8a:4a:a3:df:ef:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:6F:D2:AF:9D:D7:6C:BA:B2:92:4F:DA:09:57:76:CD:9A:E8:11
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:bd:e2:a8:16:49:a1:cc:2f:c1:3f:86:cb:bc:94:b8:de:
a8:c6:d8:94:c2:93:dc:d5:d3:11:bd:b1:97:05:de:c2:61:fb:
f1:4e:6d:8a:06:07:5b:b5:95:68:99:db:e6:9a:1b:24:21:5f:
ec:5e:03:0e:47:b3:68:f8:55:15:9a:01:8c:ae:26:39:a1:5e:
15:31:73:ea:5b:b9:e9:f3:19:a1:0f:df:88:2a:72:be:cc:68:
f6:8c:30:9a:04:b5:8d:75:6b:33:7b:52:fc:60:c1:c8:0d:79:
cc:53:05:65:a3:d3:1b:14:4e:c3:44:87:74:85:40:b0:13:cf:
8e:5c:4c:f8:6b:cd:e4:cf:66:a1:9d:9e:e9:64:7d:b6:45:0d:
cb:37:97:fe:aa:d8:d6:fa:37:ba:d7:5c:7c:f2:d3:a5:d6:c3:
5c:58:eb:0a:98:63:f1:b9:70:ad:f6:dc:c0:62:57:dd:02:d4:
2a:bb:93:03:7a:7c:0d:37:15:46:39:82:dd:68:2f:58:a5:fd:
6c:29:84:af:5a:e3:d7:fe:0b:45:b5:4b:c3:9c:e7:bd:ef:b7:
24:55:2d:7b:c6:05:67:5e:d2:41:22:4e:cb:d8:8b:26:74:73:
b4:f4:f7:8e:3a:cc:9c:a9:f8:2d:ae:9b:8e:24:96:24:90:e5:
78:76:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:35:24 2026 by rpki-client