Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: bciQIxHJIRZLlYJ2RnP1PSmXrBTONMwPcZrgu6oyuf8=
Subject key identifier: B6:65:88:13:13:26:C9:72:03:20:C8:24:D2:B5:01:BE:D4:1E:3A:20
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019F95127944506EB6FCCF554127E1E22934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 0146
Signing time: Fri 24 Jul 2026 17:00:43 +0000
Manifest this update: Fri 24 Jul 2026 17:00:43 +0000
Manifest next update: Sat 25 Jul 2026 17:00:43 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: IrsSig8S+oFKPTGtNsQSDA3nGwfaxSRn6CSTUB5cmk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:79:44:50:6e:b6:fc:cf:55:41:27:e1:e2:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Jul 24 17:00:43 2026 GMT
Not After : Jul 25 17:00:43 2026 GMT
Subject: CN=b66588131326c9720320c824d2b501bed41e3a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:40:20:a5:d5:1a:5f:44:a8:f3:fb:97:1c:
5d:0c:62:a4:13:28:86:02:02:27:c1:e6:25:bc:c6:
c7:a9:d9:e2:49:ee:52:ac:6a:a9:69:17:52:c0:47:
13:c9:24:44:41:55:dd:07:a3:8c:f1:29:62:d9:00:
23:9a:41:0e:17:0e:e9:e4:46:d4:e6:9e:ba:34:6b:
1d:b8:26:65:7b:96:dd:98:62:e3:15:cd:59:0a:16:
f0:63:cf:f3:55:8a:88:4e:e3:ed:0a:b0:98:7d:fb:
51:da:62:6b:33:65:66:fd:89:40:81:18:70:ca:cd:
90:69:13:68:a3:ab:31:b2:a3:ea:fa:c2:f5:24:85:
2e:cc:d9:66:40:d2:26:8c:84:b1:d8:ba:c4:3d:f6:
29:89:ea:b2:8e:b5:93:4d:b5:48:12:cb:1a:fb:a0:
bc:54:dd:ea:11:07:0a:b0:c3:95:0a:06:ee:39:bb:
f3:23:57:c5:33:06:75:0d:49:9e:61:48:66:08:c5:
bb:65:83:96:b6:77:55:06:b1:15:88:f1:10:83:57:
92:ce:1c:d6:9d:4b:76:db:cd:eb:f3:44:a5:fb:a1:
a9:fe:07:96:89:80:70:9e:ec:60:a1:3a:28:76:9b:
26:20:a4:e4:eb:29:cc:f5:26:88:24:47:8d:d8:fc:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:88:13:13:26:C9:72:03:20:C8:24:D2:B5:01:BE:D4:1E:3A:20
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:f2:93:cd:28:5c:c2:8a:51:ed:00:58:ae:b4:46:32:4d:
3a:6d:c6:7f:5e:13:e3:9c:02:aa:0b:b9:d5:71:80:87:5d:ad:
22:96:db:48:01:44:d5:11:29:8f:3f:ee:c0:ae:c5:f0:0a:80:
5d:b6:b6:3c:0e:11:72:8f:2b:a3:d9:19:84:d8:7e:ac:2b:97:
89:39:04:8a:17:53:24:2b:fd:fa:67:85:ba:30:8f:ab:bc:0a:
82:25:c9:1b:1a:54:19:74:55:09:6a:80:09:d2:85:d7:11:98:
90:94:a8:3a:19:4f:b3:e3:9e:fb:e6:8c:53:2a:d2:c3:6b:71:
e1:a6:c3:f9:86:a6:78:d7:a6:f3:a8:c5:68:1b:02:3f:c8:2b:
cb:ca:29:b3:60:b2:8d:ee:b6:ab:f6:fa:9a:53:31:9b:a3:d0:
fd:dc:b5:8b:3c:b8:bc:06:da:18:fd:de:0c:b7:f7:15:7e:eb:
6a:3f:8c:2a:b4:e1:af:72:eb:b3:bd:7b:8c:2b:67:37:08:27:
0a:bf:12:79:c5:e4:3a:76:4a:b0:ce:42:37:f5:14:58:c3:e9:
f4:fb:d9:6d:da:bf:08:4d:2e:c8:07:9f:68:ca:d4:7d:28:44:
3f:d2:c6:47:8e:a9:08:76:cd:5a:45:f1:6a:42:43:ec:c3:2b:
fa:f0:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:13 2026 by rpki-client