Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: UK+MQiVSVKEsH3NNGORh0PtV5mQqp9HGxv8Av4ldbK8=
Subject key identifier: 8E:DA:1C:05:B7:04:E1:4F:4C:40:C6:95:E1:F7:AA:44:E0:52:14:0E
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 019F8F7F4F5D5C6D3A3F772B60ABDDB87D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: 72
Signing time: Thu 23 Jul 2026 15:01:52 +0000
Manifest this update: Thu 23 Jul 2026 15:01:52 +0000
Manifest next update: Fri 24 Jul 2026 15:01:52 +0000
Files and hashes: 1: NcFL0BjRNyW3WL18C8pcwUnZW_U.asa (hash: 04PkKKLtBtREOO6AAXNlEnZZIRrfOjn2kvSazl4zgBQ=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: ppGKx/qsmPgakrf6wag26fcXcDgCh98QMTfoPlFqFto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:4f:5d:5c:6d:3a:3f:77:2b:60:ab:dd:b8:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Jul 23 15:01:52 2026 GMT
Not After : Jul 24 15:01:52 2026 GMT
Subject: CN=8eda1c05b704e14f4c40c695e1f7aa44e052140e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:80:40:7a:da:46:e2:16:a4:2f:1f:83:d3:
6b:9d:41:b9:2e:25:c3:87:51:f8:e1:dc:dd:05:11:
39:cc:91:8f:dc:f6:2d:5d:03:91:2f:3c:9c:6e:72:
e3:2c:de:3d:79:25:7f:a0:ea:e4:ec:db:6e:f5:bf:
b4:c5:40:bf:41:ac:05:59:16:c7:ac:05:1a:50:88:
fb:6a:db:05:0c:d5:dc:8c:dc:5c:d2:78:1f:97:6b:
21:3a:4c:32:49:6f:4e:e7:ab:18:b8:27:51:c2:96:
7e:28:60:c5:72:b4:a2:ef:ce:df:0e:a6:35:42:cc:
4a:ef:76:26:ab:1e:0a:7a:6d:4f:4d:ec:d0:70:b9:
3c:44:bb:7d:23:b4:53:32:1b:21:1f:a8:9c:bc:09:
ac:e3:0f:aa:55:ac:4c:48:12:17:03:2d:e2:1c:22:
45:dd:37:1e:40:45:ff:4b:47:05:8d:d1:f8:c6:ec:
43:54:9f:6f:0d:17:ad:05:9e:aa:29:e2:27:0d:84:
9b:f4:f0:0a:92:da:00:16:04:ca:62:4b:31:cd:d6:
8b:24:05:d5:97:a9:d9:8d:f6:c1:28:37:8d:7f:f1:
9e:09:0f:c5:3f:e9:35:44:d2:e5:b7:81:84:ae:b0:
77:98:21:10:bd:b0:00:d4:c5:7a:a6:50:9b:1c:96:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:1C:05:B7:04:E1:4F:4C:40:C6:95:E1:F7:AA:44:E0:52:14:0E
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:00:65:d3:d7:7b:ba:3e:a2:b0:a5:2c:21:42:ab:5a:99:30:
0d:e3:4c:e8:75:6f:58:67:44:89:e9:78:0f:f2:35:9c:2c:4a:
29:36:e5:4b:61:9a:38:9e:fa:f5:4d:bf:33:66:ae:25:ca:d7:
6d:51:2a:e3:76:0f:e1:48:7e:60:a9:04:66:72:fe:5d:3d:60:
7e:b1:fe:e3:ef:9d:fb:b5:54:11:bb:fb:e8:59:e0:23:8a:51:
1c:9b:95:69:f0:2c:de:fe:80:36:a5:65:fb:44:a2:b8:f5:cb:
bf:eb:d7:7c:d6:98:1e:35:e6:40:c6:6a:f3:27:73:41:23:ce:
0e:ab:bc:3c:76:45:bd:31:ec:05:48:08:59:6e:8c:06:c7:cb:
be:e9:0a:8b:90:0d:f2:63:ea:c1:e2:b5:20:35:67:ab:ae:36:
77:37:37:e6:64:88:a3:84:8b:b4:16:56:3f:09:5a:68:18:7a:
04:68:3f:e1:38:83:38:a4:3d:35:18:51:f1:aa:fe:30:e1:17:
26:f2:9c:ff:d0:18:84:8f:20:ab:9f:05:64:a0:36:53:a1:1a:
89:20:a5:10:a6:4b:fc:75:e4:d8:02:29:d2:14:62:5a:da:ac:
e6:69:c6:da:f6:66:9b:d1:3f:1c:3a:46:af:b6:20:c6:09:37:
c6:3b:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:00 2026 by rpki-client