Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: GeV2ngj1KFDOga0bq0GYU776N2XW12G64jzFBi9oSGU=
Subject key identifier: 58:EE:24:2B:18:B7:B1:B5:72:6F:6C:1A:DA:43:B2:22:61:CE:AD:79
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019D265EF1666E332E682736E2AB9486289D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 06BA
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: JD-fJFwQnYMI64eLzt1EZdO8xZg.roa (hash: SmdG1CgUBFaqBpssn0iz5Ev++iu6coHjX7fE1/FoyJ4=)
2: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: aQjE+nv1pSl2EPTuA4+ri4U5MOvP8n3TGukkbuX2QIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f1:66:6e:33:2e:68:27:36:e2:ab:94:86:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=58ee242b18b7b1b5726f6c1ada43b22261cead79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:fd:c4:5c:1d:36:cf:cd:bb:f0:55:61:6a:
c4:67:2b:19:1a:49:99:20:a9:66:38:6d:7c:84:36:
6d:d4:06:00:76:43:19:61:8d:42:2c:4a:61:ff:0f:
c6:f2:bc:80:0b:a6:a4:7a:10:23:cf:d4:d2:83:ce:
ab:ef:f1:ff:5d:eb:d5:6d:a6:16:96:4c:5d:ca:ba:
3c:91:d0:7d:ed:52:6a:91:ca:23:35:62:28:3f:e4:
65:c2:0b:6f:cc:34:d6:d7:94:54:39:41:62:6a:7c:
b7:a6:0a:b2:7e:de:a3:d3:9b:f9:fe:d7:3b:71:e4:
41:d3:34:4f:5b:cc:88:4c:ae:4d:e9:b3:59:c0:ee:
f1:e1:8e:43:4e:00:80:37:de:1d:b4:17:de:f1:ce:
68:33:00:aa:cc:7a:c5:93:a0:28:74:73:99:fd:78:
a1:33:89:bc:ff:a5:51:18:25:13:63:7c:2a:ab:ff:
3c:e2:e9:56:e9:ad:44:44:0f:e2:10:33:60:ce:62:
cd:d5:74:fe:08:52:9e:9c:15:00:c0:89:eb:7f:31:
c6:81:ad:53:d2:c9:84:42:ce:4b:29:2f:ac:3b:ea:
c7:db:2f:6f:da:c1:02:a9:9e:cd:36:6a:34:51:0e:
87:ea:37:4a:ab:38:2b:35:97:0e:dc:fd:31:ce:ec:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:24:2B:18:B7:B1:B5:72:6F:6C:1A:DA:43:B2:22:61:CE:AD:79
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:b7:8f:71:7d:98:e2:b8:5c:18:01:04:c4:da:15:27:ad:
c7:7b:6f:21:ff:44:a7:37:48:f7:9f:fc:b6:46:bf:7d:a4:c7:
96:5b:91:41:c8:94:7e:94:21:ef:38:72:f2:03:ea:84:ad:a7:
a5:7e:0b:80:98:f1:4e:84:4f:e4:25:54:7c:d3:84:09:03:a2:
e2:8e:bf:4b:71:13:b9:09:98:da:d3:fd:0d:ab:40:0f:8d:06:
1e:d3:e2:43:a1:8b:12:49:15:3b:dc:a6:0f:fb:39:c9:6d:ed:
43:92:13:d8:23:28:c1:13:51:4d:31:42:5a:ed:7e:41:93:4a:
71:4b:32:3f:36:66:e1:cc:f5:5b:2d:aa:4e:80:db:17:c6:f8:
28:c4:8d:32:a1:cb:59:e8:17:3c:43:04:b8:ef:63:0a:a8:6b:
54:e2:38:4c:0e:83:46:e4:ad:29:66:08:91:3e:a3:80:18:2c:
70:d0:71:fc:ba:da:5a:23:24:04:bb:92:8c:be:98:d8:17:de:
7b:ee:7c:1d:79:97:af:46:c0:d6:43:ec:ff:ce:f0:ef:37:e1:
67:78:33:5d:51:5e:10:47:52:5e:c9:5f:a4:16:8d:50:de:b8:
9c:29:54:c7:dd:2e:a4:1d:35:f0:ba:61:8f:9b:ca:f8:20:89:
b0:9c:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:29 2026 by rpki-client