Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: djCI30Qi+6AfWTWUvmJB9hChmk7EGqDukEiT5cfmtLo=
Subject key identifier: 30:B3:D5:A6:9C:46:DC:E0:CC:22:EF:75:BE:BA:84:FF:00:E9:C6:6E
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 01A0C52075A5B48BEFD823555C09F575B43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 1229
Signing time: Mon 21 Sep 2026 18:00:33 +0000
Manifest this update: Mon 21 Sep 2026 18:00:33 +0000
Manifest next update: Tue 22 Sep 2026 18:00:33 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: mGs4WrknpceJuBZnlU92FDCmRIsrf8lqEbU0mTfy2RA=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:75:a5:b4:8b:ef:d8:23:55:5c:09:f5:75:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Sep 21 18:00:33 2026 GMT
Not After : Sep 22 18:00:33 2026 GMT
Subject: CN=30b3d5a69c46dce0cc22ef75beba84ff00e9c66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:4a:a9:be:3f:aa:f2:fe:ee:9f:60:ff:48:
47:95:03:4d:ba:b6:ed:75:b2:bb:b5:dc:3a:92:f2:
ff:fc:0d:7c:5e:01:1b:c3:f1:fc:ad:62:20:4b:dd:
8b:91:4f:81:0d:f9:c3:a2:c9:6d:49:97:22:14:d3:
52:5d:41:34:3f:25:ac:8d:2d:cb:2a:9b:29:8e:25:
66:1a:ee:a0:aa:bc:ee:96:c0:2f:6c:3e:aa:92:42:
99:03:c5:45:82:e4:90:06:31:24:00:4d:ba:7b:40:
6e:7c:76:a7:5c:2d:97:95:4b:50:d3:22:a1:66:c8:
08:63:21:90:ae:64:c7:a7:5e:82:55:9f:9d:0e:7f:
84:de:9f:a8:91:61:de:90:fa:9e:a4:89:7b:fd:ee:
4f:bf:e3:17:96:5f:62:c1:e6:08:a7:a7:c3:5c:ee:
ad:09:57:59:d2:b9:2b:41:8a:2f:fe:37:af:bc:22:
67:34:fd:14:3e:9b:94:d4:11:78:14:fe:1d:25:72:
ca:e3:e1:b3:85:6a:9e:03:ad:86:c2:33:42:2c:0d:
a8:8d:fd:ae:1c:c1:fd:bf:8a:64:b1:1e:6e:dc:09:
31:4d:2e:80:c7:a0:aa:a4:9c:65:b9:e9:a3:69:c7:
6f:2a:34:dc:8e:cc:47:6c:e1:13:1a:d1:a1:3d:bf:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:D5:A6:9C:46:DC:E0:CC:22:EF:75:BE:BA:84:FF:00:E9:C6:6E
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:e9:77:8a:5b:94:08:1a:f2:2d:60:9b:bf:33:21:51:86:
ff:2b:ac:56:e9:6e:fe:4d:9a:2e:f2:61:2b:65:52:08:fb:05:
86:c0:5e:a4:2e:66:f8:17:a8:c0:59:a4:d0:86:f0:33:1b:d7:
41:9e:06:18:c4:98:e9:66:3d:ab:ed:33:79:65:cc:04:e4:75:
bd:a5:a8:12:b0:16:ee:74:e9:f1:8f:7e:b8:a4:68:2d:54:97:
1a:98:73:be:7f:3b:b5:bb:53:ee:35:61:a1:3a:94:6e:62:d1:
f2:ed:87:ef:0b:90:c0:3b:b8:3c:ba:dd:16:84:1a:92:2f:2d:
9d:e9:0a:49:8e:07:2d:55:91:25:d1:39:55:43:f9:e8:9e:14:
a5:3d:9f:d3:55:4d:57:40:9b:e5:36:4f:3e:41:07:c0:b6:48:
63:8c:39:b9:48:34:de:a0:08:f2:78:00:37:0d:a7:58:a6:60:
d0:7f:30:e1:43:ef:14:38:6b:e1:af:53:59:68:f7:db:a9:68:
7e:12:7f:7d:99:24:29:b7:59:89:07:4b:2c:b6:d1:c8:c6:6c:
e1:81:a3:a6:ec:fd:70:c2:31:e8:ed:53:6b:b4:1a:a7:b1:3a:
5a:05:dc:a2:de:43:43:c5:c0:21:9f:3b:c3:ee:d2:c9:df:b8:
18:93:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:24:53 2026 by rpki-client