Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: 1NoeHJBdy7BEpWsgICtUBqypfeswTYlX3TS/P4/WYLU=
Subject key identifier: 34:96:DD:BC:E0:60:A7:12:D7:C5:9D:8D:80:DC:57:C2:92:FB:38:C3
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 01A13BC9D2CFE2B8890ECC6B4D534D747855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 0DE7
Signing time: Wed 14 Oct 2026 19:00:44 +0000
Manifest this update: Wed 14 Oct 2026 19:00:44 +0000
Manifest next update: Thu 15 Oct 2026 19:00:44 +0000
Files and hashes: 1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=)
2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=)
3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: zQgCdtTE0DHq4nh3Iy0nGjXna+AcmOLnuvNUf9Uhdh8=)
4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=)
5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:d2:cf:e2:b8:89:0e:cc:6b:4d:53:4d:74:78:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Oct 14 19:00:44 2026 GMT
Not After : Oct 15 19:00:44 2026 GMT
Subject: CN=3496ddbce060a712d7c59d8d80dc57c292fb38c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:61:16:9d:1b:cf:93:20:05:43:e6:7c:24:
39:4b:84:7e:9d:b8:15:60:72:92:eb:8b:8d:09:2a:
3d:f9:da:8a:70:e9:fb:fb:de:ce:68:1f:f8:3f:26:
db:e9:07:7f:0f:e8:3e:ba:5b:19:97:a8:a1:53:9b:
8b:5b:58:6c:19:f2:57:41:e3:7f:ef:c0:f5:21:36:
90:c9:c6:9b:69:77:aa:6c:47:e7:6b:6b:fd:64:cf:
2b:5e:7f:ee:2d:08:eb:f3:eb:b9:c6:f7:51:39:0a:
f9:52:7e:67:ce:b7:62:f0:b5:42:af:cf:40:e1:ff:
43:c0:e5:0b:d2:29:18:1f:dd:54:4f:29:d9:53:36:
62:99:05:c0:64:e8:25:6d:4d:13:0b:8a:ad:d6:5a:
4c:64:2a:8f:84:d4:40:89:66:93:ca:50:8e:0f:41:
ee:40:b4:8d:00:8b:86:26:45:80:9d:c4:07:66:75:
8b:01:1b:06:39:59:86:15:62:79:26:8b:c6:96:c9:
5d:50:64:48:0c:83:54:46:34:1b:5d:e7:a8:82:bd:
d0:55:5d:2b:7a:81:86:7e:6b:84:94:66:23:58:e1:
0c:81:c9:af:43:3b:5f:36:01:af:9b:65:af:69:d5:
ab:0c:bc:11:4d:4f:26:47:51:d2:9a:23:de:9c:04:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:DD:BC:E0:60:A7:12:D7:C5:9D:8D:80:DC:57:C2:92:FB:38:C3
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:af:2d:cf:75:77:a0:a4:40:b8:2d:cc:ba:5c:5a:f7:f9:
d5:09:4f:34:2d:67:8a:2c:2d:b4:45:6b:63:bc:56:fe:07:50:
9f:7f:77:92:74:1a:75:54:47:89:cc:45:77:7c:bb:23:80:bc:
02:4f:c6:44:a4:32:94:50:a5:70:4d:3a:c4:58:cb:cd:2a:6d:
08:b1:83:82:5c:e7:2b:98:99:a1:29:0a:04:1d:d2:13:63:76:
af:57:24:8d:d7:40:43:6d:c4:d2:14:34:2c:85:e9:4d:f3:c4:
81:81:2f:2e:60:34:70:b3:10:90:e5:52:0d:9b:e5:92:9e:49:
82:da:a2:b3:3a:a2:6c:a1:68:40:74:f6:b3:68:d7:52:4a:aa:
ba:ac:da:0a:ff:f0:c1:7a:7c:a9:f3:40:a0:40:47:4f:bc:c4:
8f:fe:da:be:f1:fb:26:f4:cb:f0:20:7d:45:f9:3a:9b:5d:ca:
3b:3a:99:ac:9e:41:a1:98:88:d6:14:ea:14:1e:6f:37:17:0f:
73:7d:ff:36:f5:cf:1f:b9:d8:ed:f9:87:e4:f0:84:49:34:04:
1e:1d:eb:74:c8:94:7c:32:13:82:77:6b:c6:2b:25:e2:bc:09:
c7:e8:f9:10:33:49:f2:3d:10:7e:74:47:08:cc:b6:02:76:c9:
3e:65:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:26:26 2026 by rpki-client