Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: ijxKXRAdl+01MCCa95J4i1IxjL/KVt2/76AjwkM76YU=
Subject key identifier: A8:45:CC:21:6E:D6:3F:C7:D5:CB:6B:98:36:35:0A:A3:EC:DA:27:89
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019D28BB68AF53110A39C306FB75F69CA823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 1837
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: oecBELjDNZDSQkKbR6nh0/0cCprhvIz5H/oXdIxfQhc=)
3: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:68:af:53:11:0a:39:c3:06:fb:75:f6:9c:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=a845cc216ed63fc7d5cb6b9836350aa3ecda2789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4d:ba:5f:c5:53:f8:aa:f9:3b:cf:65:77:63:
d7:9a:15:c2:32:97:ed:1f:58:7a:07:34:94:3f:4d:
3f:96:65:45:57:d5:15:e5:ba:ed:f0:9e:a6:bd:ed:
0c:eb:3c:f4:4e:61:36:85:c2:ae:bd:94:8e:54:b3:
8e:3a:14:01:5d:1a:0d:22:e4:0e:27:e9:70:88:97:
93:37:84:dd:d7:2a:e7:61:07:27:38:49:65:dd:5e:
23:12:d5:e2:50:56:f1:99:ce:03:ed:ea:72:95:65:
7d:ef:b4:8b:ff:be:b4:a8:49:9f:38:ad:db:fa:b9:
84:1d:a9:e4:49:c2:c7:f0:fa:06:fc:4e:e8:80:3e:
1e:5e:4f:4a:87:cc:f0:af:48:f8:89:6c:af:6f:63:
86:ce:d6:0a:55:cb:0f:e6:f7:5b:e2:0b:5a:b3:b2:
c7:cc:27:87:d0:01:a2:28:70:4b:9f:62:31:73:d2:
08:d5:aa:bc:70:44:ec:ab:f3:d7:38:fd:27:be:ba:
c9:e0:89:35:ab:6c:93:0f:42:fc:52:39:4a:e5:d5:
b5:b6:e8:b7:4a:3c:3e:ae:5a:6e:f6:8e:4c:07:24:
5f:9c:e3:cb:7d:a3:1e:57:b7:66:2b:34:30:e2:c8:
c6:d2:4f:d1:1b:8c:c7:b9:cb:4e:7a:f5:cb:bc:63:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:CC:21:6E:D6:3F:C7:D5:CB:6B:98:36:35:0A:A3:EC:DA:27:89
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c0:c2:0d:29:71:94:9a:21:04:b2:e2:d8:91:4b:07:5c:1e:
a1:81:2a:5f:d4:49:cc:e6:2b:40:44:ad:58:05:4e:7a:b9:45:
3d:73:b6:33:e2:b1:2e:18:da:21:44:26:c6:ec:61:9f:0e:31:
2e:97:29:e5:82:5f:51:24:e4:aa:9e:ad:8e:0d:01:60:46:5e:
a4:0e:ba:96:14:73:e9:6c:0c:d2:d8:9b:57:2b:5e:5e:bd:da:
cc:7c:c2:b8:30:52:92:f7:4a:10:28:ea:61:27:dc:ee:16:23:
2a:2f:8b:87:65:1b:67:81:5f:4b:e1:b6:fe:c7:12:8e:84:54:
b5:2f:a3:0f:7e:09:ef:0f:3f:6c:52:25:1a:1d:95:4b:c1:92:
e6:24:a2:61:cf:66:9f:f8:dc:83:33:8b:3d:80:04:7b:4e:06:
d1:7b:8e:4c:05:e4:b3:a0:bf:a3:1d:2c:6b:ca:6e:c8:74:f4:
1b:c2:e6:76:d3:19:6e:e5:b8:6d:13:cd:81:d8:ea:08:cc:7a:
ea:aa:8e:71:52:21:d2:e0:77:b6:e0:7f:88:3c:72:48:8b:18:
9b:28:70:8c:af:b4:4e:96:46:6a:ca:f4:57:da:54:9c:e5:d9:
17:3e:52:c7:fc:04:6c:da:4e:93:d6:d2:69:53:f4:b8:9d:2e:
54:3c:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:01 2026 by rpki-client