Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.mft
File: fHwkaJ0pgA_as5W2PXFquBBSCEc.mft (raw, json)
Hash identifier: w2wUF3juK0dQIv1921s/mG8GslgBwHh+4BwJt944W7c=
Subject key identifier: AA:3F:5C:70:63:38:A7:BD:54:5C:0D:90:DB:47:77:94:FD:67:64:0B
Authority key identifier: 7C:7C:24:68:9D:29:80:0F:DA:B3:95:B6:3D:71:6A:B8:10:52:08:47
Certificate issuer: /CN=7c7c24689d29800fdab395b63d716ab810520847
Certificate serial: 019FAD1B1046F0464AAA8BA7B8483B41ED7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.mft
Manifest number: 22
Signing time: Wed 29 Jul 2026 09:00:59 +0000
Manifest this update: Wed 29 Jul 2026 09:00:59 +0000
Manifest next update: Thu 30 Jul 2026 09:00:59 +0000
Files and hashes: 1: dtNXuacoKVjJ8KqoS7jdzJTAksc.roa (hash: NlulyFd8cZc2rDJIPjQm4KqbJa/u5d0hCyvR2vSoziA=)
2: fHwkaJ0pgA_as5W2PXFquBBSCEc.crl (hash: d42O6jpXPlD3D0p/vOWs+QDd3DxVNpq0IrarccrufGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:10:46:f0:46:4a:aa:8b:a7:b8:48:3b:41:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c24689d29800fdab395b63d716ab810520847
Validity
Not Before: Jul 29 09:00:59 2026 GMT
Not After : Jul 30 09:00:59 2026 GMT
Subject: CN=aa3f5c706338a7bd545c0d90db477794fd67640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:f4:bd:64:13:33:2b:57:70:0e:24:e7:69:
30:2f:1c:23:9e:a3:cd:83:81:ff:ff:28:9e:77:ee:
32:51:e9:44:3e:4a:52:16:8d:db:f0:35:db:78:1f:
22:c2:70:ae:b2:c5:41:41:c2:81:aa:84:69:23:05:
39:00:0e:70:32:46:c9:9a:05:18:e5:72:10:4e:32:
ea:97:49:a6:a3:c0:7c:6e:f3:0f:fd:9b:0a:1b:c5:
43:69:e9:0b:d3:b9:75:99:9a:59:c9:eb:9f:fb:26:
8c:5d:25:57:7f:fb:84:d1:a9:fd:aa:48:ad:a2:3e:
3d:08:ef:e7:bb:a4:a0:e5:ea:c6:38:ba:bd:fd:b4:
2e:f6:bf:68:57:ae:43:76:75:ff:e3:5c:19:2a:31:
c2:e6:7d:7b:53:ef:8d:db:09:ff:c5:af:60:0c:b1:
c9:8f:7a:65:f8:d1:ef:12:09:b3:3c:a5:98:d3:81:
25:5b:f9:77:50:df:b0:7d:8e:b2:f6:55:e7:af:3a:
b0:1e:c7:c6:72:86:db:04:95:f3:1f:63:d0:f0:42:
18:d2:6b:27:c1:1a:d6:2e:7b:39:ae:51:f0:d0:67:
9a:56:f0:42:fe:5a:70:a1:00:8a:47:35:1e:5a:b0:
63:12:3e:3f:96:a2:fe:ee:4c:32:e9:92:38:d6:f6:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3F:5C:70:63:38:A7:BD:54:5C:0D:90:DB:47:77:94:FD:67:64:0B
X509v3 Authority Key Identifier:
keyid:7C:7C:24:68:9D:29:80:0F:DA:B3:95:B6:3D:71:6A:B8:10:52:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:44:05:d4:86:c6:60:31:26:91:c9:f7:7f:4b:54:56:d7:
53:d4:10:55:b4:ff:19:38:ed:ce:88:be:39:b0:08:90:62:5a:
2d:ad:92:70:0d:b7:25:f3:29:a7:79:f1:86:52:92:28:94:47:
f7:33:cd:b3:80:79:df:26:36:d2:f7:2e:c9:1f:26:b1:9b:fc:
c6:f5:d4:a0:ac:17:e7:8c:e2:5a:04:68:3e:ba:06:4f:b8:5a:
06:d6:20:17:1f:9d:6e:01:2b:f5:f3:a1:48:a6:fe:b9:00:48:
19:d2:80:e0:b3:62:bf:33:c4:8c:e5:84:b1:1e:28:7c:18:2e:
41:4f:99:38:6e:d2:f7:a2:f8:82:51:b6:1b:6a:ed:26:32:57:
48:12:87:69:52:4c:90:57:ae:d8:de:0a:dd:4d:60:83:ae:b2:
a7:58:05:ff:e5:99:86:0c:c0:e1:6b:81:2d:03:aa:a4:87:b2:
42:46:84:a7:34:83:a6:de:31:ff:3e:f4:71:7f:02:ea:70:ad:
f3:86:0a:ab:f4:70:b8:32:75:e7:5b:4f:1b:db:3c:15:62:e9:
3a:0c:45:2b:31:22:1c:9f:4c:2c:89:bc:a2:e6:f7:95:89:8b:
f0:ba:21:b4:6f:c4:8b:8a:09:db:c4:70:39:72:aa:b0:c9:17:
aa:04:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:22 2026 by rpki-client