Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: YAb5Z+nmeoFR1gKfwz9QqQtL2PBNJiXYGt9Jy6Rqx8U=
Subject key identifier: 5C:84:8C:7C:A6:74:D5:10:52:26:27:89:11:95:20:84:F5:56:61:13
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019D9A0779BBEF5220EE9AACF2250316608F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 1085
Signing time: Fri 17 Apr 2026 06:01:14 +0000
Manifest this update: Fri 17 Apr 2026 06:01:14 +0000
Manifest next update: Sat 18 Apr 2026 06:01:14 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: DZdxco5vuDdC5slfGOlpF0PZlxpBhFf9rPpI+NjwZZA=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:79:bb:ef:52:20:ee:9a:ac:f2:25:03:16:60:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Apr 17 06:01:14 2026 GMT
Not After : Apr 18 06:01:14 2026 GMT
Subject: CN=5c848c7ca674d5105226278911952084f5566113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:cd:b9:4d:24:90:7a:2f:4e:f3:72:8e:f6:
2d:88:ff:96:e3:f5:1e:60:1d:30:92:07:00:d1:21:
56:50:92:cf:65:7b:f4:bd:f7:88:b4:d8:77:b1:54:
32:9a:c3:8f:ee:64:24:e4:c1:5b:c8:61:36:d8:1c:
21:98:a1:ff:ca:f9:91:47:37:de:7b:d5:31:6d:a0:
00:fd:a7:75:f5:91:a1:2c:4b:70:33:51:e8:9c:d2:
c8:8c:08:c9:75:7a:0e:c5:c7:0f:27:e1:37:e9:0f:
d8:fc:ed:58:0c:b5:f4:5a:a0:d8:1c:32:9b:4b:bf:
a4:8c:fc:12:b1:c0:c0:e2:c4:9a:8a:62:de:cc:73:
06:c3:ed:ed:89:9b:53:40:72:e2:ce:2f:47:2a:ad:
60:78:f2:1d:7f:25:bc:4e:de:2f:27:f7:6f:d7:52:
12:c3:9d:fa:81:ee:01:79:24:40:7a:ab:ea:ce:ca:
33:56:4b:d0:4c:4f:95:f0:9e:2e:40:c1:c3:6b:13:
be:a0:af:cf:00:a2:bc:fa:a2:d6:61:39:78:7c:dd:
b5:32:9d:27:34:90:f1:d6:42:82:fb:63:c5:40:a3:
e6:c2:06:e6:1a:12:88:9c:af:23:71:ce:d2:89:aa:
b3:df:a8:38:5c:5d:f4:76:07:b8:ed:e9:9d:ee:7c:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:8C:7C:A6:74:D5:10:52:26:27:89:11:95:20:84:F5:56:61:13
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:60:44:1d:7e:50:f8:ec:42:fb:36:39:31:7d:47:ef:8f:
15:4b:e4:0b:d9:3e:75:e8:87:2d:68:f4:54:f7:23:36:82:35:
7c:b1:75:8e:c5:16:71:27:7a:6c:6e:cf:7e:0d:e0:4a:26:04:
17:f8:4b:25:5e:20:85:08:f2:91:2c:b9:f6:ed:1c:0a:ff:26:
7f:cf:89:db:a1:6c:33:fd:06:53:4e:01:55:5a:b0:c1:0c:da:
39:c1:98:4a:46:4a:a4:f7:e4:13:fc:35:e2:75:30:bc:15:fd:
a2:0d:04:71:77:bb:7a:18:56:68:8e:75:b9:8c:d3:79:9a:1a:
fe:8b:03:77:40:ab:b8:7a:23:4e:76:e1:c2:83:90:29:b9:40:
d8:43:ac:88:a6:c9:46:23:44:41:c0:f8:d6:85:dc:b6:87:02:
54:f6:e5:b7:23:02:8a:7f:92:a2:de:e4:33:00:10:ed:7b:ea:
f8:4b:51:5c:da:6d:b3:dd:6f:2e:ed:d8:5e:da:cc:3d:80:1f:
70:66:68:cc:c5:d1:03:25:a2:df:79:5c:30:0a:76:aa:18:cc:
86:57:5a:d7:d5:07:89:f9:a4:a0:f3:9f:b2:57:20:d6:f3:7b:
dd:e4:5a:d3:76:04:86:05:a6:18:0e:5a:24:01:72:76:1f:c3:
43:4e:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:57 2026 by rpki-client