Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: Cbw3DRXkGhYfEsrAeYofMZ4/SsfLoGyLjYooDB+lKIA=
Subject key identifier: 0D:EB:6B:37:9C:F5:9A:B0:CA:11:0B:19:B7:81:1C:CE:BA:F4:EF:FE
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019E20FEE72896D65DB64FD7A86B60AE12D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 05E7
Signing time: Wed 13 May 2026 11:00:36 +0000
Manifest this update: Wed 13 May 2026 11:00:36 +0000
Manifest next update: Thu 14 May 2026 11:00:36 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 1+svQCp51iiXi2yeqNLDhesmvu/tG28rwnQ7QBDNF+8=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:e7:28:96:d6:5d:b6:4f:d7:a8:6b:60:ae:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: May 13 11:00:36 2026 GMT
Not After : May 14 11:00:36 2026 GMT
Subject: CN=0deb6b379cf59ab0ca110b19b7811ccebaf4effe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:2a:9a:f1:70:27:a6:7d:23:33:46:65:ed:
5d:23:7d:f5:e8:b3:d4:5f:8a:c4:f4:95:11:b3:47:
83:53:29:50:bc:cc:5c:36:7d:ae:6b:f4:10:ff:3e:
89:d6:ad:41:91:49:62:c4:87:7f:d9:ad:8c:5d:15:
bf:ce:7a:b7:52:27:4f:5e:89:30:c5:e1:49:19:6f:
cc:fc:f9:ca:c1:7a:91:37:8e:1a:4d:7a:dc:b0:e6:
7c:f8:d4:ee:78:7d:21:38:9a:e2:97:51:a0:e9:09:
4f:cd:81:12:9c:4b:e9:5e:7f:85:14:a2:41:42:b6:
66:48:8e:54:7b:9c:66:21:72:d3:bb:97:45:60:77:
b2:5b:5f:9a:2c:22:39:05:57:79:73:49:89:53:7e:
7a:7d:d5:b3:6a:39:d3:18:96:79:ee:80:de:33:f6:
ae:64:90:09:c9:95:e6:40:13:bf:4e:c0:56:a4:fd:
02:7a:eb:ce:07:44:1c:58:d4:db:a1:f9:d8:69:5d:
a0:5f:e6:d2:9d:21:9f:57:5b:b2:7b:2b:a3:b9:0b:
de:1b:02:d7:6b:00:78:9d:5b:e8:65:79:7c:49:72:
4b:d2:96:d4:bd:dd:25:f3:22:8f:b3:58:49:3c:c7:
79:41:ef:95:ff:52:bb:42:5c:1c:ec:af:b7:52:57:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:6B:37:9C:F5:9A:B0:CA:11:0B:19:B7:81:1C:CE:BA:F4:EF:FE
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:40:4d:72:3c:72:dc:ec:ca:17:e7:52:04:db:41:70:0f:21:
63:79:ca:93:6e:29:4d:95:f9:30:29:05:cf:fa:75:93:8e:99:
fa:88:ee:dd:3d:d2:2c:f9:c3:d9:35:5a:80:d5:da:4f:9f:9f:
58:9e:40:03:a7:cb:bd:4f:0c:1b:64:90:18:25:e1:05:7f:9e:
98:f6:22:26:4d:bc:a7:ba:bd:f5:b3:09:5f:78:ee:1d:1f:c6:
18:6a:66:5a:d0:bd:71:e3:f8:83:7c:96:5d:07:13:b9:5e:15:
19:da:09:cd:3f:07:5f:74:61:bd:19:d9:93:6b:34:19:7d:95:
8f:00:cc:8a:b9:2e:21:cf:95:8b:68:04:40:17:ed:e2:7a:32:
27:8e:e6:0b:68:f0:8c:40:12:50:a3:3f:10:6f:3f:c9:8f:a0:
e9:49:6f:2b:11:5d:17:51:05:1c:12:82:65:90:f4:ae:45:be:
03:4e:ad:7b:d7:55:2b:16:53:64:f1:32:76:65:58:a0:ca:e1:
21:2b:3b:6c:90:55:0d:f3:a9:5a:12:25:ef:bb:a2:bc:81:89:
d6:fb:dc:ee:71:50:b5:55:0a:9c:83:b9:54:90:1e:bf:9b:28:
3b:4e:c1:c8:44:ae:ce:23:21:5d:26:e0:45:8e:01:05:4a:c5:
0c:f2:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:53:07 2026 by rpki-client