Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: NIv/PwCHHZ92BWwO3s/h+3T4MEs9P0Sl6j8z33tWZOs=
Subject key identifier: 8D:85:76:07:19:B4:E7:D2:66:12:F9:7B:E2:30:A6:6A:1C:F4:29:C3
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019F8F7F0D8A970930ED4B79B29385E847B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1956
Signing time: Thu 23 Jul 2026 15:01:36 +0000
Manifest this update: Thu 23 Jul 2026 15:01:36 +0000
Manifest next update: Fri 24 Jul 2026 15:01:36 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: QG5Z0PEwegt/uGlyT2J0GMMiKSA6LT0mTbaKqwZFCNw=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0d:8a:97:09:30:ed:4b:79:b2:93:85:e8:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jul 23 15:01:36 2026 GMT
Not After : Jul 24 15:01:36 2026 GMT
Subject: CN=8d85760719b4e7d26612f97be230a66a1cf429c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:0c:ac:65:55:15:87:5e:12:3e:97:88:80:
b3:61:e9:08:dd:8d:00:53:de:66:21:48:70:ad:5b:
f7:18:44:c2:68:76:04:e2:19:35:23:29:75:a0:21:
94:6c:cb:91:9d:5d:cf:44:f0:0b:ac:21:d8:28:3c:
bb:7a:32:1e:1a:d6:21:f6:fb:20:a6:95:32:fd:fd:
cd:92:ef:ad:ec:d1:64:0b:55:13:89:72:1f:05:59:
a0:dd:a4:f9:34:dc:b8:61:14:d8:2c:d9:e0:9c:bc:
7f:77:af:cf:2a:e8:64:91:4a:f3:02:e8:00:90:f7:
7b:72:25:3d:22:4b:bd:86:ed:ae:72:e6:17:42:3d:
34:3f:97:f4:85:4b:da:f2:0c:12:08:12:c1:96:fc:
9d:dc:65:e8:0d:c1:af:5f:34:4a:9a:95:a7:77:ba:
40:d8:05:29:d5:4c:04:1c:a5:50:99:98:26:3c:af:
da:3a:00:9f:27:8b:5f:f6:34:38:f8:81:c4:07:3a:
95:c0:8e:6d:78:03:48:a4:d8:1b:ab:7c:96:67:d2:
67:69:73:8f:46:f5:7c:b2:cd:48:d4:64:3a:f8:2d:
c2:ad:27:94:f8:41:3f:de:51:bf:c4:a2:fb:7f:12:
f4:c2:19:77:4c:7b:a9:a6:6a:7b:57:62:ae:ce:b8:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:76:07:19:B4:E7:D2:66:12:F9:7B:E2:30:A6:6A:1C:F4:29:C3
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ec:2f:4e:89:3b:ab:3c:66:c6:45:e0:af:58:24:04:06:9f:
81:d7:9b:cc:c1:33:2e:44:c4:c8:7a:23:02:75:46:12:9b:a9:
9e:cb:21:6c:a3:5c:d2:41:74:e3:be:db:56:cd:1c:4e:8f:73:
17:e4:3e:50:9a:c1:21:45:b7:05:e8:37:3b:8c:ae:db:34:e3:
0a:a4:af:f2:b7:ba:c6:e9:4f:c1:df:85:72:c8:92:08:e0:0c:
11:bc:71:e4:2b:29:5e:f0:d5:84:b3:4b:b1:af:3d:2b:58:60:
18:b9:a8:ca:48:bd:76:4e:e0:88:e7:c9:ba:41:07:c3:87:f9:
8d:3f:ef:99:e5:41:d6:37:e9:de:fc:7d:41:df:7b:d8:68:3e:
67:18:64:55:f9:54:15:2c:51:9c:e1:76:ad:d3:3b:35:ba:34:
4f:11:8b:77:f8:25:1e:bf:65:f5:7d:b8:47:86:02:56:87:60:
3f:37:00:69:0b:64:4b:97:8d:43:f9:d9:e6:d1:f8:7c:4c:ba:
28:2c:c2:76:0a:db:82:28:5e:89:92:28:dd:c0:d1:7f:49:40:
c7:19:32:09:71:db:57:4c:84:cf:5e:a6:e1:33:c5:8f:b9:c9:
6a:64:02:17:40:1b:cd:d3:e7:55:e9:3f:ce:39:94:f0:36:82:
3c:a4:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:16 2026 by rpki-client