Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 7D0EgJnuqB81mEIzvYvOGWFu2kRXLdUC5rPpJW++zsE=
Subject key identifier: 32:DA:C3:1B:3A:8F:40:DD:39:C4:B9:B8:92:2F:66:21:C7:07:52:FA
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01A138C9368E90FC3466F33A42555E3064A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0782
Signing time: Wed 14 Oct 2026 05:01:13 +0000
Manifest this update: Wed 14 Oct 2026 05:01:13 +0000
Manifest next update: Thu 15 Oct 2026 05:01:13 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: m8P50X5XrioLqxgbs53+QaLhD+tzEuaoPw928BdBhlY=)
3: lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa (hash: 8vRKXr3v7lfmQwJ46dN1JawVHnwZVtyt70o7OLDYeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:36:8e:90:fc:34:66:f3:3a:42:55:5e:30:64:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Oct 14 05:01:13 2026 GMT
Not After : Oct 15 05:01:13 2026 GMT
Subject: CN=32dac31b3a8f40dd39c4b9b8922f6621c70752fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:36:a9:76:39:56:8f:be:a0:26:1a:0c:ae:
88:e1:91:61:36:df:27:bb:f8:7a:fc:fe:20:06:46:
85:99:c8:15:0d:42:de:88:e9:4d:bd:85:67:f4:82:
ec:5a:b8:6f:d2:ae:11:c2:96:a7:75:24:68:7e:a7:
7e:fe:42:b1:e2:e1:9f:ea:c4:75:b6:72:7c:81:48:
4b:b5:6e:5e:29:15:78:2a:0d:cc:c3:7d:9f:b6:80:
e5:59:fd:92:e1:12:b1:fa:cb:84:fb:46:17:bf:01:
aa:da:e4:e9:0e:ca:6f:a8:aa:2c:08:b1:36:2b:91:
40:5a:d4:c2:eb:59:f6:b2:ef:06:29:85:0f:b4:3c:
b6:00:da:0e:5b:96:27:2b:a1:dc:da:a8:31:64:90:
3a:cb:38:88:5f:00:c9:16:8d:f1:7e:6d:84:98:73:
de:a7:1f:ea:f7:41:80:10:0b:0a:9e:33:37:7f:cd:
fb:c2:21:24:eb:46:2f:48:8b:7f:d3:57:1e:d3:14:
63:47:fd:eb:ca:fe:ef:dd:2d:25:1f:f5:38:24:ae:
48:f4:a1:81:a8:f4:5f:2e:19:68:b7:b4:fa:38:13:
7b:79:46:57:2e:0a:17:8e:a3:0c:c5:bc:2e:9a:80:
7d:e1:1d:a1:54:e5:db:4a:62:dd:88:43:3e:04:7e:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:C3:1B:3A:8F:40:DD:39:C4:B9:B8:92:2F:66:21:C7:07:52:FA
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:7b:5c:be:dc:dc:b6:87:09:74:dc:2d:ff:ae:cf:0e:92:
52:e0:6a:d9:be:8a:0c:fd:19:ce:48:36:8c:7d:72:47:bb:49:
6d:13:ab:86:4d:58:95:9d:8b:4d:5d:3e:69:7e:ba:18:88:69:
ac:e6:dd:de:2a:c2:83:dc:b0:f5:2f:3f:7a:92:86:7e:5c:07:
9f:08:a2:0e:10:12:bb:43:9d:b1:d9:f3:ab:a5:0f:52:65:4d:
4a:90:c7:6b:70:6b:24:4d:98:49:50:5b:b1:f9:f4:10:f5:f7:
53:da:d1:ea:6e:0c:5d:fa:16:81:a4:39:a3:9a:16:0d:b4:65:
7a:8f:29:d6:bb:c1:2b:bc:f2:19:45:8e:0a:ef:52:77:23:1d:
d7:06:d6:4f:79:e1:49:76:85:43:ba:04:05:77:e0:a9:e9:2d:
df:cf:da:7e:da:a9:0c:d4:ea:33:54:1b:ac:88:d7:0c:81:60:
0e:55:a4:ea:a9:21:2a:2a:16:97:d8:94:d2:4e:6f:5c:18:f6:
0b:be:48:f3:be:82:40:98:af:70:fd:82:35:42:20:11:d7:70:
6a:08:84:a4:95:ca:a4:f2:6f:9a:6e:14:6c:22:4e:4b:ef:99:
6f:b5:7c:02:ab:12:c8:9b:a2:55:6c:f8:28:db:78:a2:e5:42:
1e:4f:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:42:48 2026 by rpki-client