Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: G1p9DqT4KaNsl9jdKwpqyRLfWJp9m0IQ0uz8pWxBmMg=
Subject key identifier: 58:1F:37:FA:A0:F2:59:B0:96:BC:7A:17:49:0E:F6:D8:9D:D4:2C:BF
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 01A137ECEE8EA5627F3FF297131318ABB7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 0143
Signing time: Wed 14 Oct 2026 01:00:36 +0000
Manifest this update: Wed 14 Oct 2026 01:00:36 +0000
Manifest next update: Thu 15 Oct 2026 01:00:36 +0000
Files and hashes: 1: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: N3gOuoHLiMB6zdxA3V0KhA975SntVkMUr4I5s6jQvoM=)
2: iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa (hash: UgNnrp4T2gV/9ZM+lt6scNgekuq4L4SWsoVKSp2uNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ec:ee:8e:a5:62:7f:3f:f2:97:13:13:18:ab:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Oct 14 01:00:36 2026 GMT
Not After : Oct 15 01:00:36 2026 GMT
Subject: CN=581f37faa0f259b096bc7a17490ef6d89dd42cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:8e:b8:39:7f:0f:c2:31:b1:da:af:ce:80:
a3:82:79:2a:ff:8c:a7:21:eb:46:c4:2f:78:a9:35:
f6:69:17:48:ae:66:9c:60:22:d1:74:4c:68:81:68:
e5:4b:2e:e9:bf:bc:bb:1a:16:5c:6b:29:4d:71:fc:
38:d1:b3:5c:b7:ec:09:75:de:9d:cb:e8:04:3e:f3:
ff:2c:47:7e:54:84:9e:e0:4a:c5:b9:02:6f:05:c8:
4d:e8:7a:34:8a:2d:6b:c2:86:87:73:c4:69:7f:b7:
63:3e:44:e3:f1:e0:55:b7:f7:9f:20:51:79:81:31:
3a:05:51:5c:29:9e:a5:28:f1:06:0e:34:64:49:8d:
f6:7f:73:2f:0f:00:ff:f3:1c:f5:a6:26:51:0c:bd:
5c:81:36:ed:ff:cc:97:07:7f:ed:e8:83:28:e9:8c:
35:a4:e0:c4:cd:94:ff:e5:29:f3:37:ef:54:16:33:
fc:cb:60:af:7b:79:de:9c:48:e7:e7:79:e5:21:02:
6d:5c:cb:ab:f5:b1:2f:1c:43:0a:f9:0c:83:ac:00:
8d:ad:f7:af:df:ee:6e:6c:53:36:7f:42:8c:75:b2:
1f:d7:07:39:56:f5:af:24:08:02:28:39:8f:d0:a5:
00:1c:ea:5f:a2:fe:f0:f5:7f:67:94:69:87:47:78:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:37:FA:A0:F2:59:B0:96:BC:7A:17:49:0E:F6:D8:9D:D4:2C:BF
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:e1:81:0b:b9:44:84:59:55:25:62:24:a7:b6:eb:9a:09:
0f:66:a4:29:bd:68:4a:c9:5c:5c:3f:af:27:05:ad:94:65:b2:
62:0d:8b:9b:14:d6:ef:7a:77:07:aa:e9:06:b7:a3:20:29:c5:
31:fb:c2:41:db:1e:93:25:d3:67:37:df:b9:5f:2b:55:8f:0e:
16:e9:1d:c9:99:86:40:4d:09:7f:1b:40:24:7f:c5:6e:f3:d1:
89:36:d3:87:e4:8c:25:7a:19:b2:c6:30:f9:ef:01:a7:59:82:
bd:f5:79:ca:5b:c9:b6:dd:9b:7f:d7:d2:64:dd:49:e6:1f:1d:
15:db:81:eb:1b:86:8a:8e:bf:c5:4c:a4:f1:19:a5:92:62:07:
4e:b4:72:1e:71:50:f7:13:eb:d8:c3:a4:71:fa:84:74:51:99:
75:93:68:0a:37:7b:66:a2:8f:29:ea:e3:00:a9:7d:31:6f:0b:
cd:f6:ab:07:76:b8:a8:97:0b:54:92:f5:34:0d:84:1a:36:71:
4a:f4:3e:08:9f:d6:bd:5a:63:8e:a7:27:ba:b9:b0:e9:18:6c:
7c:db:c0:15:7d:0c:dc:c4:22:44:ed:72:8b:ca:97:fb:73:4a:
2b:c1:ce:01:10:4d:52:74:e0:98:c1:40:37:2b:c0:f5:9e:ea:
61:20:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:33:58 2026 by rpki-client