Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: 5FLF1rq3X0lFDj88KY8IjfYHFd3/g9WEenZK2nHPbo4=
Subject key identifier: D9:C5:4F:7D:50:1D:38:6A:B3:86:3F:45:3B:3B:2F:6C:90:E8:CE:A5
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019FAC3F54F177FC2C2EAF89B7B80186C7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 0152
Signing time: Wed 29 Jul 2026 05:00:59 +0000
Manifest this update: Wed 29 Jul 2026 05:00:59 +0000
Manifest next update: Thu 30 Jul 2026 05:00:59 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: csMx4bh8/UO9GJDXnykCYHeq11zD8WRacmq5qVBWbuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:54:f1:77:fc:2c:2e:af:89:b7:b8:01:86:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Jul 29 05:00:59 2026 GMT
Not After : Jul 30 05:00:59 2026 GMT
Subject: CN=d9c54f7d501d386ab3863f453b3b2f6c90e8cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:a3:78:0f:36:74:1f:2b:e1:d5:1b:c1:2e:
fc:91:0b:cf:a1:88:38:4a:28:a3:4b:f9:29:52:a5:
5b:7a:85:4a:ef:df:fd:ee:3f:10:04:01:65:b9:f5:
c1:92:9a:14:be:41:55:1b:79:ac:58:f2:e8:d1:9b:
06:8e:5c:4c:2c:f3:2e:cf:49:97:b9:42:b1:9d:56:
63:2f:94:77:70:25:5b:76:c6:5c:2c:6d:5f:c0:9e:
96:ce:96:d7:bd:24:59:67:c1:3a:d9:9a:f0:b1:4f:
2f:09:5e:e5:40:34:1b:de:a9:6e:f5:28:2f:40:55:
6d:c3:ec:f4:d4:0f:af:a2:20:45:2e:e8:79:05:e4:
e1:f9:96:8b:63:f1:04:d8:bd:d5:1e:8c:2a:3a:f0:
3d:19:b6:6b:19:e2:2e:d8:17:ec:74:c3:5a:6f:fd:
1b:57:ca:f7:34:ae:c0:37:24:7b:0c:ff:f4:49:20:
91:c1:4e:47:c4:44:9b:d1:e3:06:b9:c8:ad:0f:17:
02:18:4e:85:84:10:af:43:21:fb:07:bb:97:bb:f9:
c3:ea:84:14:5b:f2:72:a6:c9:6d:27:f7:0d:d7:e5:
ba:04:f5:13:fd:ba:65:a1:b2:77:6b:7c:ea:8d:83:
34:25:60:b9:b8:b8:b3:c5:7d:51:0e:e2:ee:f5:c5:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:4F:7D:50:1D:38:6A:B3:86:3F:45:3B:3B:2F:6C:90:E8:CE:A5
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a9:ad:27:b4:f7:8f:f4:7c:1b:94:df:46:20:30:20:61:c3:
39:f9:39:38:29:11:ea:81:bc:e2:4a:cc:62:44:5c:67:e7:97:
52:bc:7a:bc:10:9f:4d:44:18:e4:45:4e:5b:2c:ca:db:77:51:
21:a6:ff:79:c5:2b:b6:b3:8b:de:f2:a5:1a:e7:e8:17:50:4f:
a5:32:55:03:b1:ba:e0:b6:28:85:27:05:2a:48:6e:b4:a8:45:
ae:1b:12:d1:6e:3f:62:c1:b2:1d:98:c1:c2:7b:08:6e:c6:41:
b8:f6:19:c4:41:82:78:c9:94:53:a4:16:c2:cc:55:48:b5:26:
e0:8c:03:1e:d8:3a:83:da:62:b1:f7:8d:a1:3e:9e:d8:e5:31:
a0:e6:46:cf:04:e7:14:19:30:c0:6a:1a:b3:df:ac:7f:3c:02:
c8:80:06:e7:c7:58:1f:e3:af:dc:cc:80:50:97:55:61:94:06:
18:46:20:6b:65:69:6f:7d:77:ad:69:f5:63:32:82:83:64:09:
18:f4:49:b2:32:d1:fe:10:d3:f3:83:ef:83:04:8c:72:17:e9:
77:73:fb:00:75:f4:6e:67:5d:45:70:95:64:cd:89:dc:0a:eb:
e2:bc:f1:e8:74:ad:a8:3d:cd:c9:1c:a7:6f:84:2c:f3:ef:d7:
eb:3a:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:33 2026 by rpki-client