Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: 6bd0KFpESnC/OOdbwkhtBCb/i813Z+tbgZyPqyGxlb4=
Subject key identifier: 06:37:C5:76:01:D7:56:11:12:F5:66:83:A8:47:18:77:EF:7A:66:71
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 019F9391F62DC9BCD989DEFB58F8B607028C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 18AA
Signing time: Fri 24 Jul 2026 10:00:44 +0000
Manifest this update: Fri 24 Jul 2026 10:00:44 +0000
Manifest next update: Sat 25 Jul 2026 10:00:44 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: w/CXJsMExUxLc2A8eDrCfqnIznJE25h5U2bsNWw+m/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f6:2d:c9:bc:d9:89:de:fb:58:f8:b6:07:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Jul 24 10:00:44 2026 GMT
Not After : Jul 25 10:00:44 2026 GMT
Subject: CN=0637c57601d7561112f56683a8471877ef7a6671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:2b:62:b7:70:45:a2:a8:01:b6:a9:20:eb:
1f:11:b1:2d:0a:58:ea:c2:0e:1f:e5:f5:92:3c:97:
e8:18:64:78:71:dd:7b:14:07:ea:12:4c:dc:0d:53:
08:c1:e0:c7:21:26:e2:e5:31:bf:3d:6f:e2:05:53:
55:b4:b0:79:ac:9f:8d:24:7d:61:05:b4:85:7c:97:
7a:c8:3c:f5:0c:2d:d5:4d:42:f6:9c:58:77:0d:8f:
51:d8:b2:65:33:e8:25:80:70:18:91:ae:6f:91:b3:
8c:c3:73:0e:46:0e:7f:44:c8:9d:60:5f:67:15:4d:
fa:87:82:79:e5:c9:a9:2f:39:5c:14:82:f0:6f:d9:
06:e3:54:15:08:6b:d4:43:e7:c0:2a:b8:3d:8e:dc:
dc:46:1a:5d:5d:db:42:c3:dc:51:84:cd:e0:3b:7d:
19:06:61:44:00:80:17:f0:e9:80:f7:8a:98:e4:f5:
c6:83:18:2e:88:3e:be:68:d4:15:d4:cc:2f:db:b4:
4c:15:b0:ef:a7:2a:5b:41:6d:b8:fc:60:bc:13:e3:
f2:b9:7f:29:40:31:65:3f:8a:7a:b7:a0:92:3d:30:
92:c3:8d:43:df:5e:9e:df:e1:80:15:e2:aa:ee:26:
f6:a7:3a:85:7f:c1:02:df:c2:11:dc:b5:11:6a:95:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:C5:76:01:D7:56:11:12:F5:66:83:A8:47:18:77:EF:7A:66:71
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fd:a6:5e:ff:98:ab:8e:a4:6d:63:2d:a8:93:c2:64:ca:25:
fe:c1:d6:5a:a0:91:88:2c:b5:75:be:b0:e2:b1:24:fd:d3:fb:
85:11:3c:0c:42:e7:fd:56:7f:ce:80:9c:83:90:f6:e7:ce:ab:
68:ce:33:90:7f:0c:e5:b8:97:e7:86:95:ee:d1:67:be:60:c9:
3f:27:6e:18:ce:ab:ce:95:85:2d:cf:d4:b5:7e:d4:8f:98:f7:
59:c7:db:ed:19:7d:5e:a5:94:c2:75:09:d2:cb:73:f1:e5:ae:
a8:7d:04:b9:bd:54:19:d1:b5:23:4a:c2:44:d3:db:3f:ad:bf:
2a:a1:9e:3d:1f:cc:f6:9a:47:07:d5:24:d0:b7:89:8a:c9:9a:
9a:89:a6:8f:3a:f0:3b:06:bc:2d:7c:ba:00:da:cc:45:84:1e:
52:25:27:0a:10:8d:c3:97:ae:14:c6:dc:6e:6b:9b:9f:a0:47:
78:ce:66:66:11:31:8f:2c:fd:fa:bd:18:96:49:e4:74:15:b7:
e0:72:6f:60:df:a3:0c:6e:f3:f9:d0:fe:03:10:0b:b1:88:58:
5a:0f:3d:9a:8d:bd:c8:b9:95:a5:8a:58:de:9e:9c:c3:61:25:
8a:f5:c3:22:04:54:c0:5a:8e:3c:d3:36:b7:4e:eb:18:e5:cd:
fc:6c:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:43 2026 by rpki-client