Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: ILJKd+GisYhg0iMYHyzrhUkeEeF7x4DkUlK2UuaiRck=
Subject key identifier: 5D:53:E7:69:57:46:76:67:FA:0C:02:F7:E6:3B:3F:50:9E:FB:4B:80
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 01A0D728269013AB8009D45097CE1A97DF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: 011C
Signing time: Fri 25 Sep 2026 06:02:07 +0000
Manifest this update: Fri 25 Sep 2026 06:02:07 +0000
Manifest next update: Sat 26 Sep 2026 06:02:07 +0000
Files and hashes: 1: HhFHFL1OCw8ofMtLsaP_9nbfrFU.asa (hash: BRYKkkg4LsI+ogvaJ9O62G5uw5km4Yza0HAxhzb4kTU=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: PTt76EMZBa1pZp6baYL/OnqsZOWwXXQ2S7a6GGvkcAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:26:90:13:ab:80:09:d4:50:97:ce:1a:97:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Sep 25 06:02:07 2026 GMT
Not After : Sep 26 06:02:07 2026 GMT
Subject: CN=5d53e76957467667fa0c02f7e63b3f509efb4b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:51:d2:01:6e:7a:bb:3f:0e:c3:7c:20:b1:
70:63:9d:ba:87:06:8d:b8:89:bf:64:ea:3e:38:9d:
64:29:c9:ce:fc:97:95:a2:d3:d6:ce:f9:a0:16:d2:
5a:a4:28:28:ca:df:ab:23:ec:7e:1a:ad:f7:2a:cf:
24:79:c7:bd:2c:07:3e:34:74:51:b4:28:fe:55:30:
b6:91:e8:a4:94:f4:30:f8:79:56:f3:c1:b5:4c:56:
ff:49:4d:51:91:cd:8d:08:77:34:d2:b2:b3:e0:fd:
79:0a:c0:dd:b8:d0:02:80:16:98:74:cd:2e:d8:80:
5b:26:89:cf:9e:7a:a4:6d:28:e0:c9:53:1c:a3:56:
74:f0:05:d9:fe:23:01:62:ba:33:79:01:53:e9:82:
ee:d9:61:81:49:1b:3e:a6:b2:88:57:ee:2d:fc:4b:
fc:8e:e4:7f:d8:4f:33:83:13:13:78:d8:c6:d5:90:
31:29:e9:fb:f3:2d:db:a9:e5:07:1e:8e:d6:6e:4f:
06:4e:af:ac:0f:66:31:d5:3e:87:d0:74:04:33:7c:
c1:2b:2e:39:1f:60:f2:f8:b1:f7:97:cc:63:cc:cb:
a0:2b:fa:b1:dc:d9:5f:d7:26:90:4a:6c:31:a1:e0:
ab:ed:1e:b0:de:5c:f4:62:58:85:e0:30:9b:4d:47:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:E7:69:57:46:76:67:FA:0C:02:F7:E6:3B:3F:50:9E:FB:4B:80
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:22:30:fd:65:92:e9:e6:d7:69:fa:35:20:b3:bc:98:ab:3c:
06:84:67:ba:f2:e0:52:70:24:a0:f2:e7:fc:c8:a8:74:2a:d9:
5b:5d:75:0d:de:70:97:61:75:ba:77:bc:cd:93:1c:89:1a:ee:
fc:c9:02:62:ed:2b:0e:87:63:09:65:c5:78:57:5c:0e:09:74:
5e:ce:69:86:3b:38:cb:b8:4a:bb:c4:7a:df:2b:22:12:67:aa:
4e:ab:f5:fa:37:08:6f:ef:0b:7b:c7:e7:03:4b:df:02:a0:f6:
b6:f9:00:4c:fd:4d:d0:b7:a3:75:12:e8:cb:0d:0b:00:91:0b:
aa:4b:69:19:44:0c:a6:7e:62:f8:ab:ea:3a:04:e1:47:95:dc:
a2:81:09:db:b3:5c:2e:8c:9e:c9:d6:0d:ac:8c:44:7b:70:af:
9e:48:1d:97:ae:cd:cd:73:d7:dd:7e:8e:70:df:63:45:cf:1a:
98:cf:0b:e9:4c:c2:09:c9:46:6d:0d:af:46:ff:61:9f:3b:0d:
fd:b1:f4:7e:49:ac:5e:32:50:6c:87:42:b3:4b:fa:b4:78:ed:
aa:87:5f:6a:ff:6a:16:b5:c7:84:48:fe:3f:bd:e8:4d:7f:dd:
25:14:aa:3c:34:fc:49:6d:03:29:df:ff:9e:9d:2d:48:c2:5f:
63:34:9b:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXKCaQE6uACdRQl84al99lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjFkZTZjYTY5ZGMyMTUwMDBjYjlhNjdjNjU1YzY0ODRm
YjU3MGEwHhcNMjYwOTI1MDYwMjA3WhcNMjYwOTI2MDYwMjA3WjAzMTEwLwYDVQQD
Eyg1ZDUzZTc2OTU3NDY3NjY3ZmEwYzAyZjdlNjNiM2Y1MDllZmI0YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDZR0gFuers/DsN8ILFwY526hwaN
uIm/ZOo+OJ1kKcnO/JeVotPWzvmgFtJapCgoyt+rI+x+Gq33Ks8kece9LAc+NHRR
tCj+VTC2keiklPQw+HlW88G1TFb/SU1Rkc2NCHc00rKz4P15CsDduNACgBaYdM0u
2IBbJonPnnqkbSjgyVMco1Z08AXZ/iMBYrozeQFT6YLu2WGBSRs+prKIV+4t/Ev8
juR/2E8zgxMTeNjG1ZAxKen78y3bqeUHHo7Wbk8GTq+sD2Yx1T6H0HQEM3zBKy45
H2Dy+LH3l8xjzMugK/qx3Nlf1yaQSmwxoeCr7R6w3lz0YliF4DCbTUd/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1T52lXRnZn+gwC9+Y7P1Ce+0uAMB8GA1UdIwQY
MBaAFEVh3mymncIVAAy5pnxlXGSE+1cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZWNlZjUtNTQxMS00YzlmLTliMGYt
N2NhYTA0YzM3NDRmLzEvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZWNlZjUtNTQxMS00YzlmLTliMGYtN2NhYTA0YzM3NDRm
LzEvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICIw/WWS
6ebXafo1ILO8mKs8BoRnuvLgUnAkoPLn/MiodCrZW111Dd5wl2F1une8zZMciRru
/MkCYu0rDodjCWXFeFdcDgl0Xs5phjs4y7hKu8R63ysiEmeqTqv1+jcIb+8Le8fn
A0vfAqD2tvkATP1N0LejdRLoyw0LAJELqktpGUQMpn5i+KvqOgThR5XcooEJ27Nc
LoyeydYNrIxEe3Cvnkgdl67NzXPX3X6OcN9jRc8amM8L6UzCCclGbQ2vRv9hnzsN
/bH0fkmsXjJQbIdCs0v6tHjtqodfav9qFrXHhEj+P73oTX/dJRSqPDT8SW0DKd//
np0tSMJfYzSbjw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:56 2026 by rpki-client