Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: v0Be8imWiqNEU90IKo5dO1hRHCgIzt4KyFqL9mUZpLk=
Subject key identifier: B8:59:86:86:9A:A7:AE:BB:FF:E6:C5:DC:65:47:B9:1A:53:18:DC:B4
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019E1DFE2C46245BBC9FD994C921521777DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 0635
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: fWnyz+Bg461VuCkA0sIJOUyG8ocOGFR35ukWRd9Hx44=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2c:46:24:5b:bc:9f:d9:94:c9:21:52:17:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=b85986869aa7aebbffe6c5dc6547b91a5318dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:c0:9c:6e:21:ac:f4:fa:c0:f1:c5:36:0f:
17:14:41:d5:fa:da:63:2b:5d:99:56:13:ac:00:13:
31:da:45:98:65:84:9b:29:17:a7:f7:a0:fd:4b:67:
2c:c0:b3:e0:23:ec:ae:d1:62:4a:b1:81:ea:02:ee:
97:01:78:8e:0e:c0:67:bd:f8:9d:e8:a7:10:2a:f3:
c2:f7:eb:93:47:37:d4:34:14:71:41:bc:08:95:96:
29:3b:bc:ea:6a:31:40:cb:32:29:98:2d:17:9f:9d:
49:a9:b3:04:48:21:ca:a8:92:fe:d5:9f:79:6b:b8:
7f:80:c2:00:3c:bc:68:74:48:36:46:cc:1c:8f:6e:
e9:44:a8:d5:60:fd:52:30:f9:e9:af:58:05:79:ab:
2e:e4:eb:bc:46:97:a7:9f:56:73:55:64:3a:a2:60:
9d:31:26:b0:37:75:ec:f9:2e:68:85:c4:ab:97:c6:
57:41:4c:dd:f8:9d:2e:51:f6:3a:6a:ef:e9:54:df:
40:c6:e7:9b:f5:39:1c:60:1d:f2:cf:44:8b:83:52:
8e:a6:53:a4:56:ef:40:b7:17:21:ed:3e:fc:e3:be:
7e:a9:1b:bf:5f:6d:c0:ff:99:11:eb:c6:f2:d5:f0:
a3:3d:8b:5b:59:00:9c:e1:dd:e8:b6:da:ff:cd:1f:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:86:86:9A:A7:AE:BB:FF:E6:C5:DC:65:47:B9:1A:53:18:DC:B4
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cf:80:2f:bc:34:34:86:50:35:2a:f2:9d:49:a0:81:b0:08:
3e:74:b5:2c:a2:a3:10:38:4c:f5:c7:9c:ca:70:78:62:bf:6a:
43:18:b1:51:ea:96:e6:00:28:a4:ce:25:69:7a:1b:0d:69:6e:
57:ba:05:cf:d7:99:10:8d:01:c6:8b:8f:e1:c5:64:af:51:2b:
1f:8d:70:31:40:58:1e:b0:75:0f:66:25:b3:21:34:b0:0d:2b:
c6:30:c5:10:fe:5d:ea:61:f3:df:88:38:5f:fd:6c:b0:91:06:
e5:08:8e:30:10:e1:74:b2:e4:60:82:4a:66:93:b9:51:d8:08:
15:b0:78:ec:4f:a3:dd:24:bf:e5:8f:ed:a6:e8:e6:59:c7:ae:
1c:09:72:e9:55:86:91:a8:57:2c:86:83:7f:a0:47:0a:a2:72:
37:2d:12:7c:91:db:8b:93:cd:1c:93:89:75:04:70:5f:03:9c:
8c:35:c1:8b:a7:34:cf:88:f0:86:08:ea:66:bc:18:75:78:5d:
8e:ec:94:e0:61:89:0a:f4:ac:cb:86:6e:0a:7d:ec:fa:e3:0a:
38:2a:b8:49:33:c5:94:f9:1a:91:19:d7:2e:93:65:4a:42:bd:
6c:18:38:01:7d:19:22:77:69:3b:a5:2b:4b:b9:09:ca:a9:f5:
84:57:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:38 2026 by rpki-client