Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: y1Ix/iP7IpIGmwggj4n/PCHGy6hRHSHYxLm4FYtzesE=
Subject key identifier: F2:13:AB:07:78:B7:B3:6D:91:F7:23:0B:32:48:19:CA:A9:DC:18:D5
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 019F95805ECB4B3EFE6ACB0472ED8EA520B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 071A
Signing time: Fri 24 Jul 2026 19:00:45 +0000
Manifest this update: Fri 24 Jul 2026 19:00:45 +0000
Manifest next update: Sat 25 Jul 2026 19:00:45 +0000
Files and hashes: 1: 9aRTzcNv5guAsQiFnGIvU6cyVjw.roa (hash: yxAswLOvy7NpNtBGcnZYbW1+LR5oOn3Rqal1sA9FoVg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: 0oHQF9rghybqJMtyBj3eC/6/3+ONNkEQoUxuGSTrfe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:5e:cb:4b:3e:fe:6a:cb:04:72:ed:8e:a5:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Jul 24 19:00:45 2026 GMT
Not After : Jul 25 19:00:45 2026 GMT
Subject: CN=f213ab0778b7b36d91f7230b324819caa9dc18d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:a3:e1:ae:45:f0:b3:1e:32:c9:f5:3c:03:
00:6d:a2:83:91:60:5b:a7:9d:06:2c:58:cc:83:d3:
6f:52:dc:24:07:8f:16:99:e9:01:7a:24:eb:45:e3:
f7:d0:5c:3e:24:4f:b3:ad:cf:1e:74:41:aa:39:d1:
15:ea:88:90:40:16:05:d0:cc:5f:6e:ed:84:7f:71:
de:e3:01:92:f9:93:f6:9a:e6:65:ec:11:3c:39:a4:
02:7b:9b:50:1b:da:e4:fb:76:45:d8:a6:55:0c:20:
a4:d4:5b:15:39:34:50:ae:f9:6d:11:49:75:77:3c:
ec:bc:ea:27:02:5f:df:0f:31:c2:96:05:61:78:c0:
36:c1:2f:e1:be:a0:da:9e:17:9d:e5:3c:8c:f2:a6:
37:c9:6e:70:26:02:64:f5:21:bd:d0:2d:a6:cb:21:
3c:b2:f3:a9:a8:ed:88:6b:8f:fa:53:32:40:eb:b2:
3f:34:f3:e4:af:29:3c:0b:33:ae:49:de:6c:78:41:
73:fe:39:da:54:3d:da:9a:4b:8c:a2:9b:f7:e9:5f:
08:8e:33:4c:f0:7f:9c:05:69:26:b2:cd:a1:e4:32:
2e:eb:60:c4:a2:ac:86:32:29:0d:3e:26:f5:8f:95:
ce:0e:d9:c5:1d:57:e8:6e:24:b1:ad:f1:94:30:f2:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:AB:07:78:B7:B3:6D:91:F7:23:0B:32:48:19:CA:A9:DC:18:D5
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:5b:b0:50:47:3a:cd:fa:ba:a0:ed:31:02:6b:5a:24:32:
d0:25:e4:43:ea:ee:50:6c:b9:91:d1:f3:43:18:23:25:92:e0:
24:d3:d5:95:0b:74:59:1b:74:00:c1:3a:60:c1:d9:6d:77:cb:
09:0b:36:d8:5c:5e:13:c9:3f:e2:f6:92:44:04:4f:a1:63:a0:
46:4e:d8:bf:ee:22:58:88:82:ba:ab:c1:f7:aa:39:bf:0f:a1:
c6:4b:e4:55:90:7e:cc:39:7d:a8:b6:66:11:71:36:62:a6:d1:
ea:8d:e0:7c:ad:c6:42:f9:2b:0a:81:01:ae:7b:a7:64:49:2f:
c5:bb:f0:ea:56:a2:fa:ea:b8:90:8c:18:5b:8d:bc:e7:7b:5f:
d4:78:5c:22:a5:dc:0e:97:31:84:43:77:c2:a1:89:9e:a9:72:
63:5e:4a:d6:91:a5:f1:1f:47:e2:e5:c1:4c:d1:c6:3e:b9:73:
f9:3c:53:01:76:e9:ed:62:da:fb:20:a4:45:ca:c2:78:ef:60:
06:df:62:02:de:7c:b9:fd:3b:a2:b5:ac:75:a7:47:1b:ac:93:
0b:5f:0d:f7:43:0c:5c:c1:d4:61:73:2c:b4:ac:9c:32:57:0f:
cb:c3:f3:dd:c7:e0:f8:36:36:17:98:57:f2:f7:4b:9a:17:b8:
ab:49:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:58 2026 by rpki-client