Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: vmAg0SXZqbBfaCWqGixrDOdp0Rus2AspUwAmsKXrpsM=
Subject key identifier: BA:12:08:8F:D2:92:93:C9:5B:99:D0:D3:81:98:B3:C6:5E:A2:2A:A3
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 01A100231024C30870420D4A396825440EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 0202
Signing time: Sat 03 Oct 2026 05:01:00 +0000
Manifest this update: Sat 03 Oct 2026 05:01:00 +0000
Manifest next update: Sun 04 Oct 2026 05:01:00 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: pbmZZg95juWkvcp1LeDoLUofdRuRF2/xLjJeIfB+s6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:10:24:c3:08:70:42:0d:4a:39:68:25:44:0e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Oct 3 05:01:00 2026 GMT
Not After : Oct 4 05:01:00 2026 GMT
Subject: CN=ba12088fd29293c95b99d0d38198b3c65ea22aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:9e:8a:fa:f4:b3:fb:e1:0a:b4:d8:45:c4:
d3:ff:54:97:0a:da:e3:e8:f0:ad:61:a5:3b:f1:63:
3d:1c:ea:1f:e6:e9:90:f0:ec:12:3d:b9:63:c3:c1:
47:b6:84:66:a7:61:1d:b8:a3:7a:ce:96:ff:34:1c:
35:e2:61:58:2a:8a:c1:f9:ac:89:40:8c:04:1a:8a:
59:60:0d:8e:30:2a:b6:5e:8d:b1:74:14:2c:3a:71:
6b:f4:4a:d3:03:1c:10:eb:a0:d7:9f:17:5c:79:61:
75:89:bb:3f:16:4d:1f:da:2b:6d:11:26:62:dc:9b:
69:9d:5e:d7:99:1c:90:b2:e0:23:e1:e8:cc:81:53:
bf:36:5b:6c:99:a8:ef:53:5f:b0:aa:4b:35:31:91:
19:56:13:46:58:cd:e1:76:62:3a:f3:78:e4:57:5d:
ee:fc:01:8d:4a:71:92:83:64:86:b0:fd:45:c4:34:
a2:e5:92:1a:b0:fc:b5:3e:97:24:fa:f2:7c:dd:4f:
a8:03:bb:f7:6c:a7:f9:4e:f0:de:21:33:4f:85:89:
f2:9c:c2:05:4b:a8:74:bc:ae:c1:c4:d8:be:a2:4a:
30:cf:4d:f1:57:2e:b7:ab:bc:fc:3d:8f:59:6f:5c:
56:ac:b1:e4:7f:48:ee:a6:52:60:3a:a6:13:b1:af:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:08:8F:D2:92:93:C9:5B:99:D0:D3:81:98:B3:C6:5E:A2:2A:A3
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e0:ce:9d:90:62:e6:95:fe:9e:51:6d:0f:2c:d5:63:f4:fd:
84:3f:da:c4:f0:18:62:28:8d:fe:19:1c:81:70:72:de:8c:2d:
34:87:e0:2c:31:2f:69:54:8b:c3:52:da:d8:1f:c6:ea:23:66:
c9:5e:4f:fc:af:ff:b9:3a:4e:11:d6:5f:f4:f2:c9:cb:3f:ce:
32:02:0f:15:bc:b4:ea:f9:1d:c0:52:db:11:28:79:41:c5:8f:
f9:36:46:91:39:c2:8e:50:80:9c:30:9f:6a:9f:43:fe:c5:d2:
f3:bd:a4:bc:26:98:ee:8d:1d:a9:9d:54:0d:21:27:d7:f1:53:
93:a2:de:2c:e7:1b:25:bb:02:cf:a4:ec:47:00:a4:33:82:49:
6a:fe:53:d2:9d:8a:52:fd:38:11:ea:ea:09:e1:7b:82:e7:6f:
b8:7e:49:93:5e:9a:1b:65:91:65:5f:54:23:1f:4c:4a:0f:59:
4d:07:da:6d:d9:ea:ff:d3:d3:5b:bd:26:89:e3:48:28:74:6c:
f4:61:8e:53:da:8f:02:53:90:3b:55:a5:18:0f:13:0a:e9:41:
ce:41:84:17:07:2d:a4:7d:f8:0d:70:85:4b:b9:14:6c:7e:c2:
6d:e5:df:2d:7d:c8:80:84:bc:18:05:99:0a:24:b0:51:a3:98:
6a:a4:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:45:45 2026 by rpki-client