Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: P0IGMDmqAhbONsa85/3PtTGOkbUz00BJR6YH2i2m6EE=
Subject key identifier: BB:BF:A6:55:8F:25:76:BE:EF:06:81:B6:FB:F0:72:B1:C7:5E:0F:47
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019D2BBBC500AD80115C4CFFE32A501BB86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0568
Signing time: Thu 26 Mar 2026 20:00:19 +0000
Manifest this update: Thu 26 Mar 2026 20:00:19 +0000
Manifest next update: Fri 27 Mar 2026 20:00:19 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: r5XRaCZ45o7K7PakfJz+zDoCfMHI6TLRi6exeVQYIg8=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:c5:00:ad:80:11:5c:4c:ff:e3:2a:50:1b:b8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Mar 26 20:00:19 2026 GMT
Not After : Mar 27 20:00:19 2026 GMT
Subject: CN=bbbfa6558f2576beef0681b6fbf072b1c75e0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:d6:ef:84:19:f4:c2:a3:be:1e:0f:d0:e4:
8e:e2:66:4e:4b:38:c0:29:6c:0d:9c:77:7e:77:18:
fe:08:5e:1d:b9:f4:86:c8:72:8c:70:7b:91:01:13:
75:05:93:cc:3f:ce:67:c9:48:04:5b:b7:bf:65:f2:
4d:90:f6:4e:8e:c4:2b:d1:f3:d6:90:12:47:fc:0c:
6a:ce:50:e8:6d:fc:45:01:32:c0:f3:84:18:f6:87:
d0:57:41:30:46:11:3e:4a:40:e1:62:e5:cd:50:e5:
be:9a:dd:9c:d8:57:bd:10:4e:f7:1f:e5:73:61:2e:
06:91:ad:da:5d:3d:4f:28:dc:1c:f6:f9:8e:ba:7d:
c2:8f:67:7a:2e:ac:d6:e3:5e:6f:d8:36:c8:45:58:
14:2a:b9:cf:3c:2b:c5:77:35:fb:5c:55:7b:22:aa:
42:72:91:46:59:ee:9d:04:00:43:38:58:95:da:2a:
f5:99:88:b6:c3:f7:ab:c7:e1:53:41:b2:99:46:e6:
21:35:ff:93:c8:d1:10:61:48:36:bb:cf:e0:af:be:
f5:46:82:62:47:ae:96:11:dd:1b:b1:2c:c1:96:34:
57:35:88:8e:b6:a8:c9:3e:4f:2c:d9:58:1b:92:f3:
51:dc:22:9f:7a:73:3b:bf:77:50:24:92:f7:d8:1b:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:A6:55:8F:25:76:BE:EF:06:81:B6:FB:F0:72:B1:C7:5E:0F:47
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0f:32:38:5f:0e:0d:27:34:7e:0d:a6:81:2d:65:11:2c:c9:
06:2c:74:ac:53:e6:8e:7b:83:7c:fe:7b:96:01:94:e0:86:e7:
86:7b:dd:69:4e:a9:65:72:c3:c6:06:23:87:f5:0b:f6:aa:4d:
70:e6:f8:26:85:9d:fa:aa:58:ab:0d:d4:a2:cb:2d:83:61:30:
03:46:b6:54:6f:aa:90:11:4e:5e:24:66:7e:9a:0b:ce:ec:79:
8b:f0:f0:50:d1:6a:a6:19:52:98:eb:59:88:26:f1:e8:86:cc:
b1:1b:da:7a:78:f1:dd:41:f4:ec:e2:82:3f:e5:e1:64:a0:d0:
b4:57:53:dd:4f:eb:65:f8:fd:bb:af:7c:89:22:51:71:bb:4c:
79:35:f7:11:1e:bf:e1:18:fd:ef:2c:90:dd:a2:3b:ae:e0:34:
2a:5b:23:a3:03:1a:92:96:38:0c:44:f7:22:93:aa:e9:ed:a5:
10:c5:54:1b:53:23:89:34:1c:d3:ca:8c:d8:11:10:b2:b3:aa:
f2:55:24:ef:3a:e9:4d:cc:c0:e1:07:32:d3:7b:01:55:f0:a5:
ee:75:8a:e1:c8:19:fa:04:c4:6a:14:98:e0:ba:e8:d1:3a:ee:
4c:aa:7e:35:62:b2:53:04:95:90:9f:a1:8c:e4:ca:10:a7:f9:
8f:4a:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:06:58 2026 by rpki-client