Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: l5Pvc12Bn5lFS1Phk3Mqvm6pgWa9IJOJqzT+Kiq4goI=
Subject key identifier: 81:AE:B6:E4:20:AA:F0:B9:7C:17:69:63:0E:DB:E4:13:7A:FF:20:06
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019CAC7DB96F6DD159C25F528C03BAA594BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 100A
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: ZwIG/FwZ39k9NXjKO778CenkgSv5Pc1x2E9/7oOIaI0=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b9:6f:6d:d1:59:c2:5f:52:8c:03:ba:a5:94:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=81aeb6e420aaf0b97c1769630edbe4137aff2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:4b:be:37:b0:09:84:46:1c:d9:f5:ce:70:
bc:ef:83:81:ab:82:de:44:f8:29:04:91:d7:93:d3:
bc:e8:01:90:a2:02:bf:83:c2:73:b9:0b:dd:3b:89:
15:ab:5e:6c:e6:83:9c:2e:78:b6:82:ef:3b:16:fb:
33:bf:4c:30:1d:5d:ab:1f:1e:71:0f:35:9d:fe:1a:
d8:49:57:bb:ef:57:2f:1e:a7:1b:89:15:c0:b1:36:
39:05:e0:d0:c2:66:75:2c:7b:35:32:a0:b5:37:c5:
d8:dc:90:d1:15:b4:01:cd:7d:9f:51:90:1f:9a:00:
98:8a:79:bb:1b:6d:d9:55:35:d0:d6:7a:01:45:e2:
c4:d4:d4:ff:ce:a6:39:42:62:32:ce:0b:8e:66:bd:
31:53:07:61:72:16:9e:fb:68:1e:e4:07:5d:3c:ad:
36:1c:8c:9a:91:06:f9:cc:80:0a:81:56:94:1e:4e:
92:55:eb:40:69:8b:ba:dd:6d:53:fb:46:b5:fb:5b:
ed:59:9e:43:83:1f:0d:46:37:a7:bb:b9:b8:a7:85:
6a:72:d1:50:67:da:cb:ec:a5:4f:ea:64:2b:7e:93:
a3:cb:df:f3:be:b7:a1:68:b5:8f:fb:3a:c3:36:5a:
40:ec:b5:66:3a:4b:b0:e1:6d:d9:c4:0c:ae:54:ce:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:B6:E4:20:AA:F0:B9:7C:17:69:63:0E:DB:E4:13:7A:FF:20:06
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:45:6e:e6:e0:7f:23:35:b7:a6:c3:c9:eb:9a:84:f0:ec:b4:
4f:ba:c5:23:6e:6e:a1:14:89:62:1d:f6:72:dd:b7:4f:50:c1:
71:77:9d:4d:30:17:cb:c0:35:72:58:ff:11:55:a8:6a:d2:1a:
0e:15:76:17:b7:3b:64:1b:57:a9:28:bb:02:71:cc:25:bf:9f:
84:bf:ed:19:f6:05:fb:cb:b0:80:97:2c:a9:c5:97:1a:e6:d1:
2f:a0:43:ad:96:e8:0f:82:94:8c:df:5d:33:f6:ee:65:a4:d6:
f3:f5:f5:78:98:2b:60:68:39:63:fd:03:4d:02:1d:78:6f:98:
26:99:53:42:af:34:5a:98:15:eb:46:b6:4e:40:60:3f:b4:a2:
a2:cd:c4:1b:3e:6c:8e:d2:c0:97:6c:3d:f7:6b:2e:99:80:40:
08:c9:29:7f:c8:3c:82:db:6b:69:e7:10:b6:3e:b2:ca:a0:24:
fd:66:0d:8e:57:37:7f:0d:1a:61:82:77:9a:93:dc:09:11:18:
aa:bb:7d:0a:6c:ff:e8:f3:a5:c4:ae:61:f2:63:dd:bd:ac:cf:
7a:6e:99:75:c0:79:d5:7d:78:ac:e1:bd:16:24:ee:4c:af:9c:
13:b9:64:b1:18:02:03:67:c4:0d:99:6b:f6:ce:a6:c7:3a:50:
83:ca:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:16 2026 by rpki-client