Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: RxiErIALwNvSztnOfI/CR+SEnFKMLQOj4NZAXO4guQw=
Subject key identifier: 47:91:40:A9:5C:ED:73:A0:6F:74:C0:45:35:30:28:AB:A9:42:42:D7
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 01A0D91728BF0FA0C21759C73BA96C1AB815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 079F
Signing time: Fri 25 Sep 2026 15:02:48 +0000
Manifest this update: Fri 25 Sep 2026 15:02:48 +0000
Manifest next update: Sat 26 Sep 2026 15:02:48 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: lJL/rQtda6UZEKVba47y/RAMXJ5rzwW2U+pi5KaA0XQ=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:28:bf:0f:a0:c2:17:59:c7:3b:a9:6c:1a:b8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Sep 25 15:02:48 2026 GMT
Not After : Sep 26 15:02:48 2026 GMT
Subject: CN=479140a95ced73a06f74c045353028aba94242d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:f8:81:94:3e:2b:3e:b4:35:8d:d1:81:9e:
24:55:83:3d:a7:bb:70:df:a4:41:c9:3d:08:cf:d0:
52:6e:6e:6f:f4:dc:eb:b6:e9:97:ee:27:f0:47:18:
b0:c1:13:a0:8d:80:f4:43:c1:63:73:62:2e:39:3e:
57:1f:5d:90:15:e8:4f:c6:8c:ea:40:d8:e5:ab:bd:
d0:0a:12:dc:7d:72:1c:74:d2:ea:2f:6d:1a:e3:77:
4a:57:90:f7:3a:8d:86:5d:3d:18:2f:16:69:3c:52:
e1:e8:a0:52:62:1a:85:10:2e:ea:b3:b2:6a:a5:98:
1c:02:93:1c:6e:5d:a7:b2:5b:01:3d:8e:03:69:97:
01:47:e4:70:de:5f:ae:2c:71:7e:20:04:42:e0:29:
ca:d7:df:71:e0:55:01:e9:ba:28:a0:4f:9d:ab:70:
0d:53:e8:c8:b4:9a:b4:f6:c3:28:f0:90:96:07:7a:
c9:7e:d0:72:cb:11:0c:97:77:f7:74:bf:94:fc:88:
17:09:9a:64:51:32:53:57:23:a5:b9:02:b1:ea:a4:
d9:9f:c9:37:ba:72:2b:5e:c7:aa:0f:3b:38:2b:19:
99:b7:dd:77:94:d3:02:b8:c4:0c:26:15:57:c2:9e:
eb:2a:4f:04:54:34:e3:50:38:97:35:51:78:bf:f3:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:40:A9:5C:ED:73:A0:6F:74:C0:45:35:30:28:AB:A9:42:42:D7
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:e3:bc:b6:ed:d2:34:54:fe:3c:d4:64:49:3c:f8:fa:6e:
0f:4a:3e:b3:c6:98:24:d3:b0:31:14:f5:d7:9d:06:64:bf:56:
cf:0e:c9:c0:75:18:5b:9c:22:18:ef:a8:12:44:af:96:e2:6f:
0f:ee:ac:57:26:eb:75:04:71:93:45:a5:78:d4:3c:09:f0:2b:
be:b6:3c:d1:fc:78:7b:6a:d0:8a:aa:a8:7a:3c:8e:86:41:be:
d3:3c:d1:03:02:95:f2:22:55:ad:5c:48:94:40:27:fa:e1:53:
77:18:77:a7:a2:b6:64:b0:af:6d:9b:46:6f:ad:60:6f:66:9c:
e6:16:9c:13:05:cd:17:6b:41:c1:2e:74:49:e4:76:e9:a4:39:
e6:39:38:7b:a5:8a:16:fa:63:8a:e2:6f:6b:48:ed:14:e0:d9:
b2:e5:12:81:86:1e:51:d2:f5:f2:17:28:44:27:00:31:39:5e:
13:9a:41:ef:cf:84:e6:03:db:c4:02:e1:da:48:4d:a6:de:37:
29:c7:c0:82:1e:d8:48:92:cd:bc:fd:c1:d0:55:9d:40:e5:6e:
f9:3d:e2:aa:b8:98:5c:e0:35:f1:3b:a2:0b:3b:27:82:68:fa:
c5:be:5c:a6:d3:30:17:64:da:7a:5a:32:b4:9f:4b:3e:c5:ee:
39:fe:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:13 2026 by rpki-client