Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: xZdwi5+Tn2EpkNccBHguPuQNyQ6ZuLkKDcJx5HJuqD8=
Subject key identifier: B8:AE:33:4B:39:93:A1:03:FA:A7:29:0A:4B:1D:1B:90:FB:B0:1F:A8
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 019D2A3C2B715C532C0DA6E114D3013D1398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 03F0
Signing time: Thu 26 Mar 2026 13:01:19 +0000
Manifest this update: Thu 26 Mar 2026 13:01:19 +0000
Manifest next update: Fri 27 Mar 2026 13:01:19 +0000
Files and hashes: 1: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: EGzzjIyFTc6+COOgu5QbY6Li4cQ5MZbGBwDPrgeQyWY=)
2: sFH6tWzzYMXYUh7zqttZsCWMvMI.roa (hash: rMgpOgG2cc64wCq+Cnj2ujaXEIMlsqr7PQwXm/GHr1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2b:71:5c:53:2c:0d:a6:e1:14:d3:01:3d:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Mar 26 13:01:19 2026 GMT
Not After : Mar 27 13:01:19 2026 GMT
Subject: CN=b8ae334b3993a103faa7290a4b1d1b90fbb01fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:90:80:b1:a9:55:cd:48:d7:eb:5e:1c:12:
f6:11:36:2e:62:b6:af:4d:7a:ab:0c:12:a1:f2:24:
1c:c7:c6:61:75:20:70:56:fd:83:ff:c4:a1:b0:6b:
e7:ed:78:91:92:29:ce:a6:12:25:c2:ae:c7:88:75:
ca:96:ec:32:65:31:fe:2d:66:9e:4c:80:d1:43:c9:
41:e9:c6:55:d8:b3:4a:83:ea:e1:1d:f4:3f:4a:44:
98:a4:0d:37:7f:aa:a9:e4:0e:8a:09:4d:e0:9f:81:
71:2c:2f:7e:d2:8b:ac:3b:52:ab:37:89:ba:7b:39:
d7:cf:2f:e8:56:7e:62:34:6c:67:29:9e:a9:19:0a:
c2:5f:52:7f:db:6a:37:e2:ce:c3:cc:94:9a:8c:b3:
f3:26:0f:72:de:ed:de:a1:c0:e1:69:02:f4:a2:28:
24:6a:de:e9:ce:3e:81:3f:1f:7c:37:b2:60:d8:fa:
47:9f:06:3f:ca:75:7a:84:c5:2f:f6:04:58:19:c8:
26:18:46:7c:ba:b9:d8:0f:5a:eb:68:51:33:7b:3f:
77:cd:13:0f:b6:ec:9f:0a:c2:11:c4:95:ea:07:79:
8f:1d:40:e6:0f:39:c3:f1:a5:af:61:c2:2a:fb:13:
89:a2:6c:f1:de:eb:9d:2d:a9:7b:07:d9:dc:78:2d:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:33:4B:39:93:A1:03:FA:A7:29:0A:4B:1D:1B:90:FB:B0:1F:A8
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:d4:48:36:1f:62:1a:dd:9f:e3:5f:a0:0a:ed:80:5e:06:
d1:ec:c5:1a:5a:ac:55:b1:1d:82:73:55:6e:41:bc:cd:25:bc:
e4:9a:af:cb:8d:3c:69:27:89:57:07:a0:07:60:a4:68:14:21:
9f:a4:c7:73:10:96:48:62:7d:d5:ea:39:19:d2:ee:a3:3c:02:
38:63:e5:91:0e:43:d1:3f:b8:1c:30:21:33:0d:d3:34:03:48:
53:17:ee:99:b4:6c:e7:b5:1a:77:70:70:88:c6:7f:19:e5:68:
09:87:06:87:ae:c6:40:e3:f9:4d:10:f9:23:f0:f9:6b:d7:9c:
87:2c:62:8e:e3:fb:d1:33:86:01:e1:ce:2f:6d:98:c0:07:2b:
36:b5:b9:6a:d5:51:aa:02:4e:fd:d1:89:dc:6c:12:de:98:83:
14:68:e0:8c:9b:7b:f7:b2:5a:2a:b5:13:6a:28:1b:7c:f3:87:
a4:f8:b4:5c:ec:43:92:26:18:ad:ec:7c:63:39:ce:05:78:73:
d0:0f:8f:35:5b:f1:ec:73:c9:81:33:ab:1e:b6:f2:18:19:08:
d4:8a:6b:a5:17:92:16:bb:70:6b:20:3f:91:aa:2b:60:43:47:
a5:de:13:ce:cb:72:57:69:a7:26:8c:ec:ff:97:2c:cd:83:c9:
d1:08:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:19 2026 by rpki-client