Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: t42uLskNrIJ30/70zbK8pTSMtU8P9g1iUxab5hkOez8=
Subject key identifier: 37:4F:F5:17:B2:C0:AF:3E:1E:3B:21:BF:EC:97:1E:00:47:51:07:0D
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019F95B74CEA0C0FA8DCC2FB0328ADD5E9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 06A8
Signing time: Fri 24 Jul 2026 20:00:45 +0000
Manifest this update: Fri 24 Jul 2026 20:00:45 +0000
Manifest next update: Sat 25 Jul 2026 20:00:45 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: gFl5iO8H2bIgqk59/PIKHJ+oXVOVamhAgbat6FLrt8U=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:4c:ea:0c:0f:a8:dc:c2:fb:03:28:ad:d5:e9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jul 24 20:00:45 2026 GMT
Not After : Jul 25 20:00:45 2026 GMT
Subject: CN=374ff517b2c0af3e1e3b21bfec971e004751070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:32:72:ff:86:f9:15:5f:1c:62:47:10:86:
65:c2:8e:91:b0:11:1b:80:dd:3e:3f:6e:2a:e2:2d:
ea:a7:93:de:fe:dd:49:e4:18:7e:e6:2b:e1:85:3f:
4a:10:27:ce:c9:73:c3:4c:32:ab:96:a0:49:60:b9:
c2:db:aa:83:60:2e:7c:1d:41:22:89:e1:f3:5a:e0:
05:3e:80:47:77:04:2e:e0:6c:3c:8a:cb:1a:7b:26:
8e:35:61:df:03:df:86:cb:9e:30:de:2c:b4:2e:87:
6c:66:3a:56:81:3e:e1:e1:bb:c0:56:76:df:ea:8d:
94:ed:93:33:f8:d8:65:4c:1c:83:46:4c:87:06:4f:
df:b3:42:a2:3b:37:15:4d:7d:46:6c:c2:1e:32:0d:
96:78:6f:eb:90:e9:48:c7:2d:9b:24:8e:dd:53:f8:
ce:7d:11:c3:26:8e:aa:10:b3:69:8d:2e:a7:0f:8a:
70:82:4b:a5:e6:40:76:d8:83:37:83:9f:48:f0:45:
1b:7c:0c:49:ae:e1:92:63:44:91:26:02:f2:87:10:
80:24:7c:49:08:51:81:a2:60:01:28:ee:f1:40:60:
18:09:02:40:91:d9:c8:1e:65:4a:f6:e7:f7:f1:ed:
bd:64:76:3c:d3:b4:2c:fd:37:08:73:53:69:b4:f7:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:F5:17:B2:C0:AF:3E:1E:3B:21:BF:EC:97:1E:00:47:51:07:0D
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:70:d1:30:4f:c1:56:43:cc:07:9a:b6:c1:de:2d:ce:35:
05:27:12:fd:c1:69:af:9f:6c:a4:c6:32:0d:c6:a6:3c:7e:8d:
df:d8:c6:a2:31:d5:fa:4f:10:56:fa:a5:3f:9b:13:eb:eb:8c:
36:2a:10:8c:e7:39:3a:e8:0c:0f:7a:24:b6:97:2e:de:19:1c:
47:24:36:ef:9c:a0:76:91:2c:65:54:3b:42:7e:fe:0d:d6:e2:
f8:88:06:2c:7b:43:9c:fd:ca:73:6a:d3:70:b5:36:60:73:0d:
d4:37:07:7a:b6:74:c9:73:7f:35:0e:d0:6b:6d:a8:3f:d7:e4:
e6:e2:be:31:12:de:40:a4:d4:b2:20:d9:2d:53:1c:0d:3a:09:
b3:7a:53:a5:0b:36:f2:b5:23:9d:39:90:65:e0:54:a7:88:4b:
0e:cd:55:c4:66:ea:cb:f8:86:9c:5c:df:e8:80:7f:42:a8:63:
92:f8:89:66:95:69:29:2a:a0:82:56:8a:b1:e4:80:23:44:72:
36:05:39:98:fd:cb:90:cf:30:7e:66:4e:ad:79:ad:3f:02:b1:
e5:50:df:41:c9:af:cb:60:90:ae:db:8d:af:38:dc:55:f3:a5:
3f:36:3b:cb:4c:6b:3a:ab:84:2f:9b:96:cb:2c:84:a8:0e:21:
b0:b4:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:54 2026 by rpki-client