Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: moVzTI/GZ7kpMwlC22HZd8jCyQYd3RyJYolfA40gPtA=
Subject key identifier: CA:9C:20:37:A6:E9:E0:FC:DD:1F:76:7A:47:D8:FB:15:04:DA:03:CE
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019F92B64B884D87D9231E65A51191D68F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 06F6
Signing time: Fri 24 Jul 2026 06:00:48 +0000
Manifest this update: Fri 24 Jul 2026 06:00:48 +0000
Manifest next update: Sat 25 Jul 2026 06:00:48 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: 01VgNRLggyWOrdofEheE6mt+JmszUxNm5oQOsJnVUow=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:4b:88:4d:87:d9:23:1e:65:a5:11:91:d6:8f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Jul 24 06:00:48 2026 GMT
Not After : Jul 25 06:00:48 2026 GMT
Subject: CN=ca9c2037a6e9e0fcdd1f767a47d8fb1504da03ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:67:63:99:0a:f2:b2:74:15:d1:07:d6:a0:
79:f5:f0:e4:2f:52:80:b2:79:a6:ab:24:3a:bb:95:
cb:fb:36:2f:71:23:5f:8c:ee:05:5c:9b:29:71:c5:
d1:03:76:77:14:c1:5f:5d:53:b4:c5:3a:7d:e9:4b:
05:14:1a:44:2d:ee:9e:8c:3b:bd:67:bf:fe:c8:31:
dc:60:c4:3a:89:cb:69:44:79:d8:cd:c9:22:18:4a:
90:63:7a:f2:a9:0f:d1:f6:f6:d9:8f:82:c4:91:45:
10:ae:7d:2a:fd:63:58:3c:e5:c4:88:8b:d9:53:52:
fa:0a:e3:db:69:ba:bb:bf:89:13:25:b5:93:b5:5d:
1f:07:a1:ab:dd:6b:e3:5b:6c:09:6b:ec:d6:27:e7:
e1:c2:b9:f4:45:a3:af:b8:d0:db:a9:19:75:34:79:
71:37:c0:89:d9:d0:73:7a:9a:76:26:df:63:28:8b:
82:3b:29:64:90:da:d4:76:08:c4:7a:f8:f5:e9:ef:
4e:c4:e4:ae:36:41:57:89:c6:61:b3:78:f3:a2:ec:
d6:f5:99:80:80:18:9b:6e:3d:d1:57:2a:dd:73:1a:
b5:2c:d1:2f:75:19:89:0d:07:07:73:3d:08:4d:f2:
1a:c3:49:ce:2c:5d:1d:59:4e:d5:fd:e4:78:39:69:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:20:37:A6:E9:E0:FC:DD:1F:76:7A:47:D8:FB:15:04:DA:03:CE
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e7:80:0d:58:70:16:4a:4a:87:ef:7d:5e:d5:33:1d:f9:d2:
2b:22:6c:d3:a1:3d:e9:5f:04:c2:f4:34:69:4b:dc:fd:6f:d7:
db:45:67:00:2a:a0:6d:e0:93:ec:1f:b9:f8:bc:e5:c9:be:bd:
19:1b:cd:cf:62:d6:b0:ed:f0:43:d7:6b:a6:2f:3c:c9:2f:5a:
97:ed:80:4e:3c:f6:e2:08:4e:a9:b3:e3:55:92:0b:8e:fa:a3:
52:3f:3a:f0:86:84:1c:78:10:1e:14:d0:d3:69:ee:7e:60:99:
e2:15:cb:0a:31:f8:da:10:71:ed:c8:1e:da:bb:17:d2:d5:94:
c5:f0:02:cb:8a:63:fe:68:5e:6c:a0:e7:ab:d4:2d:18:7f:36:
bb:cf:2d:46:f3:c1:08:0a:10:a2:5f:d9:4f:ba:dd:9a:e6:47:
67:a3:d0:7c:8a:bb:d2:3d:20:82:67:8a:dd:91:3e:0c:6c:1c:
77:64:30:13:32:d1:39:b9:b4:3b:07:f3:2e:e7:48:e7:1d:2c:
8a:e2:15:78:d4:c3:6b:38:f9:e2:84:75:f2:2f:8d:b8:10:90:
6d:2b:b2:11:41:39:27:40:b2:06:a3:e7:06:77:ae:2b:a4:e5:
cf:48:33:26:2a:fc:36:df:c8:a3:ee:b4:b9:a5:30:00:29:c1:
3a:ab:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:23 2026 by rpki-client