Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: 2MvVufhncmobvu2pZ6JwcsHsaadY0hcvfcbX5atl+EA=
Subject key identifier: 46:2C:0D:B3:A9:52:A1:91:C3:63:71:B9:1C:B8:D2:93:6D:5B:CE:8C
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 019D2996EBFBED11237E8620F35BCA21F6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 176A
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: uAVxdA9kxDG1Za2YKY+d1OdmgtCl7KDmczWdL4H0if4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:eb:fb:ed:11:23:7e:86:20:f3:5b:ca:21:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=462c0db3a952a191c36371b91cb8d2936d5bce8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:23:b0:ea:6b:c2:12:db:20:94:37:cb:13:69:
61:ec:4f:05:e9:af:7a:bd:2a:17:1c:95:ec:3c:1e:
49:47:4f:57:24:89:f8:15:9f:d2:21:25:04:4a:ff:
25:5b:48:3d:56:c5:1d:6c:39:61:80:cc:84:9a:26:
fe:72:b7:2e:38:42:5f:7d:f7:11:d6:61:cd:f0:23:
86:92:46:bb:5e:72:96:5f:b1:cf:6e:6c:80:f0:3a:
96:32:37:50:5c:ac:59:0a:ea:3a:77:06:77:3f:e2:
a5:e3:ef:bd:b5:7c:81:42:f5:f2:b1:1b:6f:27:3d:
a3:ed:4d:b6:80:6b:b5:37:45:e1:64:44:43:e8:a4:
52:5f:ac:61:3b:e9:5b:4f:c2:eb:ea:18:26:1e:d0:
e2:80:2f:b6:22:94:d7:2c:ec:f9:d2:fc:6b:db:f6:
a2:7d:21:2d:58:37:a5:7a:e9:fb:b4:ff:af:09:2f:
81:df:6a:46:13:14:52:8d:0b:b8:0b:bc:c1:74:88:
52:23:d4:49:34:21:31:2f:04:1f:3b:a5:3a:cf:7b:
47:a5:6a:1c:9b:0f:96:c6:89:aa:7e:4b:46:12:01:
d9:08:c5:22:cb:d0:ff:b9:81:0d:6b:b3:4d:38:f9:
b8:fb:ad:7a:d5:2b:df:c9:1b:09:a8:d7:df:ec:71:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:0D:B3:A9:52:A1:91:C3:63:71:B9:1C:B8:D2:93:6D:5B:CE:8C
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3c:35:af:62:95:dc:9c:f9:d2:a5:29:80:ec:e5:18:e1:3f:
3e:d9:dd:25:ab:4b:4f:6c:9b:17:31:39:87:55:e3:08:a7:ce:
3c:14:3e:e7:a2:21:c1:f9:14:e6:55:5b:d8:c2:47:d8:0d:31:
38:a7:4c:94:a1:14:78:6a:6b:dd:0d:a5:67:47:84:54:c8:c6:
1a:6d:2e:0a:97:38:fb:e5:2b:ec:ea:23:e9:a4:3d:ab:5d:ae:
61:12:24:68:6a:aa:b1:c0:4e:f5:36:59:87:b7:08:3f:af:13:
7f:21:b6:47:ee:87:5b:29:75:77:1f:cf:46:7f:b4:01:40:00:
04:eb:70:bb:44:bc:ad:fd:3a:e7:38:13:49:34:95:9f:58:36:
c8:97:5b:47:8e:5a:25:bf:e6:2f:db:46:fc:e2:43:9e:2a:df:
eb:ea:30:25:af:37:2a:e6:52:7b:92:5a:e7:f5:c7:8e:3a:bf:
65:a3:1d:8c:56:27:19:0b:a7:3f:86:9c:5d:48:72:36:b0:dd:
b5:4c:b3:82:8c:10:4e:a2:3a:7b:8e:cf:1c:a8:ee:92:50:4b:
82:69:a3:74:5b:d7:6d:72:7f:4f:22:c4:b7:5a:5c:18:22:53:
04:51:b7:7f:56:f6:f0:a0:ff:ed:19:7f:1b:f5:79:66:97:5d:
c2:56:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:27 2026 by rpki-client