Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: WDaHF66NAkmpKVcsQ7r0lja8nft4kL5TrcBOw5IsFuo=
Subject key identifier: 6B:A4:60:70:24:0A:DD:48:FE:48:90:01:CA:46:FB:7E:EC:BD:DA:DD
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019F927F2B882CD014F85688A32914F4E99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 164D
Signing time: Fri 24 Jul 2026 05:00:35 +0000
Manifest this update: Fri 24 Jul 2026 05:00:35 +0000
Manifest next update: Sat 25 Jul 2026 05:00:35 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: qrjjZADnnQxg8ROFqO1vNNOnEFeAzUcH9yUqF8W5SLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2b:88:2c:d0:14:f8:56:88:a3:29:14:f4:e9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jul 24 05:00:35 2026 GMT
Not After : Jul 25 05:00:35 2026 GMT
Subject: CN=6ba46070240add48fe489001ca46fb7eecbddadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:d7:42:c8:39:97:9e:a6:50:19:03:43:99:
11:86:5c:cd:30:73:e9:1d:a9:14:8d:dc:82:61:b9:
04:f3:0f:54:8e:f4:d6:c7:f2:82:17:cb:1f:6f:75:
7a:2f:fd:9b:82:af:3f:4d:90:f8:f2:97:8b:03:04:
34:b2:98:19:e4:34:cb:dd:2b:4a:15:08:38:41:fd:
62:a4:77:e1:29:61:ac:b7:61:fe:9c:e7:88:47:51:
82:42:4c:8a:2e:2f:8b:36:5e:0f:99:b9:3c:22:86:
15:1d:47:cb:e9:2b:05:ab:c8:82:be:75:65:cf:8d:
46:2a:6a:3f:a9:ce:44:06:9f:90:45:95:88:03:9f:
b6:72:f0:b8:8f:48:3c:bc:99:3e:a0:42:c8:f4:97:
5d:46:76:09:e1:75:dc:7d:a2:11:bd:0b:63:71:e1:
fc:7a:3b:39:35:4e:4f:c7:4b:ef:58:3f:96:9a:81:
2c:2f:d5:5e:ed:22:5f:b0:33:d2:46:78:a0:2f:95:
60:b9:f2:8b:42:68:e3:4d:a8:e2:ef:54:9a:66:54:
40:89:85:ed:9e:a2:a1:82:c9:f0:13:d7:e7:93:4a:
56:c7:ba:aa:d2:db:70:3b:cb:e2:8f:3e:47:29:3e:
36:93:b5:a8:c4:f3:e4:50:35:f8:25:57:26:49:6c:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:60:70:24:0A:DD:48:FE:48:90:01:CA:46:FB:7E:EC:BD:DA:DD
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4b:1e:1e:97:b8:58:6b:b2:8f:1c:9b:f1:f2:33:c0:36:bf:
63:47:e7:2c:ee:13:c2:14:8c:e1:34:e4:0e:63:33:dc:c8:58:
5c:65:7f:16:e1:9b:9b:7b:42:c9:01:9d:05:15:fa:2b:bc:b8:
b0:f3:8a:f1:29:eb:14:37:53:64:18:7c:e6:6f:44:4d:6f:f0:
f8:96:9d:2c:62:4e:40:d5:b8:c3:31:20:ed:d0:5e:3a:30:46:
29:f5:43:a8:8b:e0:fc:59:84:9b:2d:72:3a:84:0b:f2:bd:06:
69:49:c1:2a:5b:c7:47:d0:95:4d:9d:de:64:44:ff:91:50:2f:
50:86:3a:28:b9:a3:8d:7b:78:d2:40:ae:3e:90:b9:5c:0f:ec:
43:a4:96:dc:ed:a7:3f:19:4a:34:57:fa:c6:2c:04:5b:ba:5d:
38:ca:44:3f:b9:ba:a4:c6:3f:e7:a5:70:88:86:d1:f0:7a:87:
c0:7a:d9:64:79:be:25:49:29:2e:49:52:60:3a:b7:64:07:61:
28:a5:8d:8f:46:53:c0:3b:c7:60:5f:1d:47:98:95:f4:9a:9c:
63:13:a7:bf:16:bf:d3:1b:c4:ec:b4:02:8b:1d:f9:54:5f:24:
b6:ec:d4:9c:91:62:12:0a:bc:41:c0:b0:13:09:ce:f7:41:29:
d9:78:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:07 2026 by rpki-client