Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: L2b0xaP0rUVoRW/u8Abh2gL6EL4020CIoCMEVv/cp/8=
Subject key identifier: BD:E2:B3:13:EA:8B:DB:28:46:9F:8A:9D:5D:EC:01:5F:3C:12:59:E8
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019E1EA3950C3FC1FCFF70C259FBC6550445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1897
Signing time: Wed 13 May 2026 00:01:37 +0000
Manifest this update: Wed 13 May 2026 00:01:37 +0000
Manifest next update: Thu 14 May 2026 00:01:37 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: +0xJACjYbj40rkh5rD3bLNEaUsMc1VHocDxQk7b+NVk=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:95:0c:3f:c1:fc:ff:70:c2:59:fb:c6:55:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: May 13 00:01:37 2026 GMT
Not After : May 14 00:01:37 2026 GMT
Subject: CN=bde2b313ea8bdb28469f8a9d5dec015f3c1259e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:ac:0a:f1:71:02:7a:0f:7d:dc:6b:c9:fb:
69:8b:04:6e:59:24:90:98:83:76:f7:5b:44:a9:cd:
79:f2:e6:c7:fb:d4:61:5e:7b:90:54:4b:30:16:7b:
55:fd:61:a4:bd:92:f4:0f:e0:5e:e8:82:52:98:4d:
c7:bb:36:4c:92:ed:34:05:f2:d3:79:3b:65:ff:ad:
fa:de:69:d4:38:03:ab:9b:48:ae:c8:30:01:b8:40:
7f:59:71:94:75:30:1c:25:e4:07:21:64:82:3f:18:
9a:26:6c:6c:5a:24:e5:21:07:1c:ad:b1:06:a5:e0:
0d:18:82:96:6f:00:d8:4e:c2:29:f0:3b:4f:64:6a:
09:0c:be:2e:eb:e8:d0:1e:cb:7d:99:e2:47:05:ed:
fb:b3:01:06:8b:b3:2d:e7:dd:87:95:f7:dc:69:8b:
d2:ec:24:22:45:10:bc:c1:11:0d:9d:6f:e5:26:3d:
53:3d:ac:93:28:cb:90:c2:03:04:45:b3:23:32:77:
40:81:3e:83:80:ac:45:1a:26:a0:6e:df:31:d1:2d:
f7:d6:ce:1b:38:f6:72:89:9c:97:3c:a7:7f:58:11:
5d:c5:8f:99:e7:1d:35:f3:42:2b:ac:71:86:b3:aa:
6d:8a:de:3e:45:4f:a9:51:31:8b:3c:8f:8d:92:99:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:B3:13:EA:8B:DB:28:46:9F:8A:9D:5D:EC:01:5F:3C:12:59:E8
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:ad:82:19:d0:ce:d8:21:40:94:82:89:0a:46:0c:d6:02:
b1:a9:54:75:fd:99:52:55:cb:b7:ac:82:ec:ef:03:dc:25:19:
11:8a:70:57:f8:37:80:1c:ea:45:b3:f2:f5:52:1f:ce:c9:ea:
e8:1e:f7:d8:39:ca:b6:48:55:b3:98:95:c4:e9:b1:ee:9d:d1:
8f:40:87:58:66:62:98:86:3e:ae:0d:7a:10:39:99:41:f0:c9:
ac:87:1e:2b:37:61:15:a3:31:4b:03:ce:c0:c8:f4:3f:49:2c:
bc:2c:8d:e1:d3:35:4f:4c:6d:1a:e4:48:53:2e:df:36:db:cd:
d7:c0:23:12:80:bd:b0:db:23:75:b9:b7:a0:1c:3c:2e:84:d7:
2a:ab:d2:d3:34:f1:66:08:83:3b:57:06:42:46:fe:cc:c0:1a:
49:a4:6b:f7:ff:b8:ef:9d:60:45:e5:28:80:eb:70:2f:d0:b3:
47:64:99:e6:06:8f:18:24:36:61:a2:84:2b:29:2a:cd:80:14:
bd:e4:52:8d:c9:53:29:bc:47:ec:59:cc:ee:bc:35:01:0e:a4:
54:61:ab:b4:7c:2b:30:01:25:0f:d6:0f:da:80:60:5c:b7:25:
80:23:88:d7:23:ce:e0:d9:e5:39:80:50:6a:eb:77:ef:82:35:
44:8e:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:03 2026 by rpki-client