Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: quIAlEAjPHLvWm/e1SjIw4wDIjB5JwkY9cBYe/TssPI=
Subject key identifier: 2E:DD:4E:88:AD:2E:6C:46:1C:DF:69:C1:D9:35:78:9E:62:53:DE:30
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 01A0D872BBD96533D277CFE3D85D0D8E420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 12:03:12 +0000
Manifest this update: Fri 25 Sep 2026 12:03:12 +0000
Manifest next update: Sat 26 Sep 2026 12:03:12 +0000
Files and hashes: 1: 2nQB2E6BUhwfRdMk7xQATWi9kI0.roa (hash: O2K+jT0p/eGe0P+/wXfc4p3/RWSSlNcPnUldJ8hZwb8=)
2: ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa (hash: i/9UjekMAEXyuNGuXA/iLPrAIaabwapuTorDmhrfiqM=)
3: gRe574DN90lJZ-bbAAqI3B__Ym0.roa (hash: mI4D0v2VpyRqI8+dI4PhrtBe5RLqPKBNt/GXRECvJ9M=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: JThWfh8sMIDJ7QJ3a68dCKjgSR6NEjazoWbqFTy8HSM=)
5: kmgi0y0U1bYAcoirOlv5le_3CJY.roa (hash: kZuMUfLrtvikcC+U07DOQIGo8YvIw/QLR8yELB49vDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:bb:d9:65:33:d2:77:cf:e3:d8:5d:0d:8e:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Sep 25 12:03:12 2026 GMT
Not After : Sep 26 12:03:12 2026 GMT
Subject: CN=2edd4e88ad2e6c461cdf69c1d935789e6253de30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:69:ae:f4:18:b8:1c:85:92:c6:18:e8:75:
80:72:9b:05:67:c9:d3:1f:04:d0:9e:21:46:ef:50:
f2:ca:06:87:e1:a3:8a:8a:b4:ed:68:7d:c5:cf:71:
0a:75:d7:62:59:41:19:5b:fd:ed:a7:03:d2:5a:f4:
d9:bb:77:20:17:99:79:02:b3:ce:8c:66:ef:d1:2a:
22:33:f7:61:e1:de:85:d9:d4:b6:b3:aa:94:19:c5:
fa:92:83:c4:d5:9c:63:db:c4:e5:87:21:53:71:fd:
7d:d8:90:78:39:25:3b:fb:94:c4:63:6f:cc:b7:d9:
49:58:c8:2f:96:ba:9e:b5:10:74:9d:28:0e:09:c5:
9b:5d:6b:67:64:e1:0e:17:e9:c5:e0:b0:f3:15:49:
b1:f2:ba:70:03:82:53:5b:00:b8:1b:4b:17:39:58:
6d:40:ed:5c:d5:a9:d2:9e:f5:6f:0d:bf:0a:6f:4e:
eb:02:ad:50:22:d9:3d:80:47:22:63:cf:40:18:f3:
22:f9:5f:a6:9e:d5:db:77:ed:eb:8c:32:be:34:72:
d0:aa:8d:d7:52:dc:97:62:c0:1a:a2:21:a8:e7:56:
31:7e:d5:50:b2:6e:02:5a:d7:df:0a:0f:7d:22:19:
48:a3:57:7c:a2:7f:97:71:e6:05:65:c2:04:a5:a0:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:4E:88:AD:2E:6C:46:1C:DF:69:C1:D9:35:78:9E:62:53:DE:30
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ee:23:9a:95:3f:5f:c7:fc:52:55:d9:3a:bf:1a:7c:c5:1a:
d4:71:60:7b:d8:27:9e:be:d2:e0:9e:e3:a2:c2:2d:e4:0c:ca:
46:f4:a3:01:8f:d8:5b:20:3b:38:16:f4:d3:17:0f:ec:74:d1:
89:ed:71:9b:84:10:59:ee:f4:b0:67:a4:dd:f9:fd:df:6f:98:
dd:27:04:aa:f9:04:c5:fd:9d:8e:c0:23:df:f3:42:44:fa:26:
ed:51:32:0c:3e:23:1f:30:5c:85:39:ca:14:25:04:97:06:88:
68:7d:73:e0:0f:67:66:ba:c5:cd:4d:82:86:0d:3b:a2:91:52:
f5:02:cc:19:33:61:35:68:ae:4d:58:ee:80:c8:d1:79:35:9e:
6f:79:09:cd:78:be:a5:73:11:61:14:85:2f:6e:6e:d3:82:46:
0d:57:a3:3f:52:2b:ec:0f:39:71:5e:b0:d5:9d:48:cb:15:ed:
be:98:b7:aa:57:90:c4:7d:08:67:6a:d2:27:ae:3e:c4:3d:4b:
9a:2b:16:bf:f9:49:6d:7a:e0:55:ee:15:9d:bf:f6:9e:88:4d:
f4:91:b6:33:ce:f0:26:cf:66:cc:63:55:4b:61:18:d8:30:ed:
4f:3f:36:88:22:52:70:13:e7:41:ea:3d:7d:75:ba:31:70:af:
f0:21:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:22:54 2026 by rpki-client