Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: /t0uGbYEYmFSU7/QYeN7C8870hrjZpM+6bf7NmmBTss=
Subject key identifier: 92:C3:14:B3:1A:9D:49:E9:F3:B5:BF:4F:93:14:53:FA:E9:AA:19:C5
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019D2C98013B1E602394521FF539A86A462E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 05B8
Signing time: Fri 27 Mar 2026 00:00:52 +0000
Manifest this update: Fri 27 Mar 2026 00:00:52 +0000
Manifest next update: Sat 28 Mar 2026 00:00:52 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: dme4EvTd1dGu590IuAZh4qUfqDANM1Zk+8p8wwgW0gQ=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:01:3b:1e:60:23:94:52:1f:f5:39:a8:6a:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Mar 27 00:00:52 2026 GMT
Not After : Mar 28 00:00:52 2026 GMT
Subject: CN=92c314b31a9d49e9f3b5bf4f931453fae9aa19c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:3e:e6:aa:2b:39:7a:b9:7f:88:92:f9:fc:
7c:02:6a:51:57:1f:2d:7b:2d:e2:74:cd:da:2d:dc:
75:9d:48:9c:62:0c:52:d2:59:ef:48:67:64:ce:53:
1f:62:ab:9d:38:ff:97:ea:dc:fd:7e:34:45:91:43:
7f:9d:b9:a5:49:dc:3b:c3:ad:8b:dd:f4:cd:05:e4:
54:fe:8c:64:43:51:aa:f0:9d:09:f8:06:78:bc:22:
0e:db:a1:16:dd:c2:fd:4e:66:41:81:41:71:21:89:
22:74:fa:a7:92:46:e5:31:cb:58:db:65:5f:51:d9:
22:e1:52:04:e6:50:3f:15:06:0d:89:f0:5d:4a:d1:
2b:9e:c5:44:db:23:32:76:54:0e:14:b5:d9:9b:04:
23:28:15:76:93:ad:3c:8d:f0:47:b0:bf:3d:bb:6b:
32:b1:e8:6e:7f:39:53:75:9e:6c:1e:82:55:8d:7d:
60:47:0b:ec:6f:e1:87:19:4e:6c:b0:33:7e:7d:27:
0d:e4:b5:43:c6:ab:2b:08:5c:83:f5:5b:7e:95:52:
85:62:c7:60:f0:b1:bc:ed:5d:40:92:22:b1:8e:08:
eb:f1:a3:8c:b0:5f:55:8c:b2:2a:6b:44:ca:25:fe:
01:29:9b:8b:c6:51:f4:be:8d:93:ae:87:b8:a6:93:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:14:B3:1A:9D:49:E9:F3:B5:BF:4F:93:14:53:FA:E9:AA:19:C5
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:78:71:90:a0:62:48:6b:28:d0:35:ab:a7:8d:0f:0e:e3:
06:c6:95:87:64:c1:29:d8:cc:56:43:e2:e8:f8:03:f6:57:73:
bf:b9:ee:9b:82:20:77:55:ea:5d:45:fe:3c:5f:ef:31:ba:d9:
dd:bd:67:32:81:25:06:8c:de:92:64:dd:1b:20:a8:48:1f:7f:
7b:f5:08:c4:0a:93:5f:a6:dd:b1:78:89:2a:2d:c0:ff:e4:53:
20:57:d5:62:93:64:19:f6:18:2a:f1:b9:f4:67:f1:7e:c9:5e:
fd:71:79:9a:c2:dc:0d:b4:be:9b:ff:76:5e:e7:cc:79:21:b3:
03:d9:20:0b:3a:01:d3:b4:1d:9a:80:80:c3:89:4d:8e:34:94:
e2:2e:a4:1a:65:c0:7b:05:41:1b:a6:5f:de:a3:29:dd:5b:80:
24:52:48:18:04:ab:23:52:5b:58:a2:d0:96:ea:d3:85:ec:ec:
9a:22:11:46:72:31:bf:63:0f:5a:c4:53:a4:2c:75:c2:9f:4e:
ca:bf:c0:f6:b7:dd:39:06:4b:ea:10:01:0b:e2:be:f1:fd:d5:
c7:bf:be:8f:b1:fa:48:fa:91:a5:be:f8:e5:e2:9b:fe:81:78:
e5:52:92:e9:4d:32:d9:f1:75:bb:9e:db:75:0e:e7:43:97:1c:
6b:e6:7e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smAE7HmAjlFIf9TmoakYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw
NDAyNmQwHhcNMjYwMzI3MDAwMDUyWhcNMjYwMzI4MDAwMDUyWjAzMTEwLwYDVQQD
Eyg5MmMzMTRiMzFhOWQ0OWU5ZjNiNWJmNGY5MzE0NTNmYWU5YWExOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5U+5qorOXq5f4iS+fx8AmpRVx8t
ey3idM3aLdx1nUicYgxS0lnvSGdkzlMfYqudOP+X6tz9fjRFkUN/nbmlSdw7w62L
3fTNBeRU/oxkQ1Gq8J0J+AZ4vCIO26EW3cL9TmZBgUFxIYkidPqnkkblMctY22Vf
Udki4VIE5lA/FQYNifBdStErnsVE2yMydlQOFLXZmwQjKBV2k608jfBHsL89u2sy
sehufzlTdZ5sHoJVjX1gRwvsb+GHGU5ssDN+fScN5LVDxqsrCFyD9Vt+lVKFYsdg
8LG87V1AkiKxjgjr8aOMsF9VjLIqa0TKJf4BKZuLxlH0vo2Troe4ppNs1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLDFLManUnp87W/T5MUU/rpqhnFMB8GA1UdIwQY
MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt
MDczZTNiN2FkODUwLzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw
LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/l4cZCg
YkhrKNA1q6eNDw7jBsaVh2TBKdjMVkPi6PgD9ldzv7num4Igd1XqXUX+PF/vMbrZ
3b1nMoElBozekmTdGyCoSB9/e/UIxAqTX6bdsXiJKi3A/+RTIFfVYpNkGfYYKvG5
9Gfxfsle/XF5msLcDbS+m/92XufMeSGzA9kgCzoB07QdmoCAw4lNjjSU4i6kGmXA
ewVBG6Zf3qMp3VuAJFJIGASrI1JbWKLQlurThezsmiIRRnIxv2MPWsRTpCx1wp9O
yr/A9rfdOQZL6hABC+K+8f3Vx7++j7H6SPqRpb745eKb/oF45VKS6U0y2fF1u57b
dQ7nQ5cca+Z+6g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:41 2026 by rpki-client