Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: SphBMxjVWPlMMGOlztoxqWffcSjZdazJ93wShsDTbR0=
Subject key identifier: FF:5E:6B:24:2E:77:3A:EF:65:82:F8:35:5C:4F:B0:C4:74:DF:60:04
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019D277277E1111854791E59A2A9B36D1A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: a55Ep/64KeWIJQzwPr3lKuTdglTCSen0QN5O/l1IPx4=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:77:e1:11:18:54:79:1e:59:a2:a9:b3:6d:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=ff5e6b242e773aef6582f8355c4fb0c474df6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:03:ab:15:cf:29:6d:4f:2c:a8:09:2d:91:
19:ca:b5:9b:cf:6b:c8:68:7d:0d:58:90:4f:f8:5c:
63:bb:dd:4c:d5:1e:28:a3:ca:4b:e3:bf:4d:f5:dd:
cf:92:f3:c4:4f:5b:77:40:4d:a4:08:53:00:ec:f0:
6d:01:26:70:a1:2a:3e:93:8f:67:73:d2:4d:a1:ac:
cd:ea:e6:dc:25:e4:f5:d7:49:20:c9:80:6b:61:f5:
5c:74:3f:98:b8:1f:ad:b1:94:46:7b:df:1e:2a:e3:
58:48:f5:4f:b1:87:c5:c8:59:86:82:98:c3:d5:08:
48:9d:24:27:22:51:ee:82:89:49:21:1b:25:45:43:
8f:60:e8:5c:34:aa:b5:d3:6d:fa:95:23:f8:73:9d:
19:b5:ab:a6:b0:b8:6f:69:0d:ae:2e:3a:89:50:58:
5e:96:70:3b:bf:79:e6:40:8a:ec:f9:08:e0:f3:6a:
9c:97:65:ad:b5:2a:16:5e:06:6f:c9:2f:b6:72:2f:
44:ed:63:a7:0e:b4:de:8a:66:6a:ee:55:64:43:4d:
08:80:0b:68:db:54:06:bb:46:21:4e:b2:67:76:2d:
34:34:37:fe:1e:94:7e:51:34:fa:4f:3c:ce:91:d8:
23:da:bb:f8:65:12:df:82:2b:f3:7b:18:3c:78:b4:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:6B:24:2E:77:3A:EF:65:82:F8:35:5C:4F:B0:C4:74:DF:60:04
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:07:73:e1:dc:25:c6:15:3e:2e:e2:c2:fd:d6:ed:23:28:c1:
b0:82:94:d1:23:9e:6c:32:35:db:6f:38:bb:24:ad:81:bc:d0:
7a:b7:7d:1a:a8:88:86:b7:3a:48:27:c7:cc:7e:db:be:ba:21:
2d:e2:4b:6f:78:75:b9:b2:dc:26:bc:a1:0d:a5:04:95:ea:d6:
c2:22:3d:c6:1b:99:8e:ff:3c:1e:2d:2d:3e:dd:67:ca:0b:e7:
4e:09:96:e5:1a:e1:58:6c:b1:ca:83:35:43:59:fa:00:47:59:
b9:e7:c7:01:b4:36:4d:86:00:23:7b:5c:5f:58:ed:04:a1:7c:
7f:ca:43:e7:f7:e2:5d:d6:47:3f:b7:5b:e0:aa:68:05:53:a9:
3b:3c:9e:ee:e0:bb:c4:37:6e:d5:b4:a4:24:81:80:9b:99:37:
50:02:ed:30:4f:51:94:0d:09:de:f7:cc:aa:62:c1:87:05:6e:
23:84:4b:8f:ca:68:01:e6:6f:22:54:49:e0:ad:44:60:09:e1:
24:6c:5f:03:57:ee:5c:81:da:49:13:1e:8f:5f:4e:1d:f7:24:
02:94:0c:68:ed:41:4b:e2:c7:db:90:d5:38:45:5e:1a:9d:80:
cc:91:0d:57:3d:0c:52:93:92:47:ac:f4:f1:46:a4:bd:5d:56:
d5:64:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:03 2026 by rpki-client