Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: 8+MuobiefOaMQi0fG1Sn8SPqAEzj+Ejf/Jprz9gAYDo=
Subject key identifier: 8A:F5:93:8C:34:FD:5F:76:68:2C:43:3A:2B:07:F4:53:04:03:B2:EA
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 019CAD59C3A235276E0141B3C193927650D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 15D8
Signing time: Mon 02 Mar 2026 07:01:06 +0000
Manifest this update: Mon 02 Mar 2026 07:01:06 +0000
Manifest next update: Tue 03 Mar 2026 07:01:06 +0000
Files and hashes: 1: 4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa (hash: JkbE2ukkvOX9Yb+5O016nUW2TqsNKcHpk0PraLymPbM=)
2: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: gDhOdBm8NHKqNisZdXX3jouB9lkgtz5G1lo51fFsjLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c3:a2:35:27:6e:01:41:b3:c1:93:92:76:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Mar 2 07:01:06 2026 GMT
Not After : Mar 3 07:01:06 2026 GMT
Subject: CN=8af5938c34fd5f76682c433a2b07f4530403b2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:63:fe:aa:44:88:5e:02:34:79:1e:9e:60:
ba:34:4f:8d:f1:98:4d:08:0a:b7:28:f4:9d:8c:d2:
c8:c2:98:69:2f:95:dc:2f:f0:64:2f:19:b9:71:81:
52:8f:86:5a:9f:6d:b3:93:f7:1f:15:66:6f:18:59:
84:71:89:07:28:e1:85:6e:f7:a2:ac:00:f3:77:cc:
55:42:9e:87:49:a1:78:c7:61:a3:02:55:44:55:70:
fe:90:78:5a:da:66:48:b6:0e:84:17:a6:f8:f4:f9:
50:29:a7:b6:18:00:c1:11:74:fc:9b:93:a8:f1:0e:
da:56:c3:11:a4:57:70:9d:ee:a0:fa:96:63:86:92:
80:3b:9b:d1:68:97:d9:f2:fa:85:70:cf:1e:3e:7f:
a3:5f:70:dc:af:f5:ce:95:ce:ad:14:b7:86:d0:c7:
ea:e7:7b:e4:fb:0e:45:6a:7c:9b:5e:bd:08:ba:0b:
c8:4c:40:17:05:53:53:88:57:da:e5:41:1c:0b:60:
ef:29:1e:b5:35:2c:41:5d:eb:0c:25:01:b3:7b:a1:
12:b8:67:1a:da:22:a9:72:23:c0:07:1f:e6:98:e3:
8d:4a:a9:1d:71:73:76:13:09:80:9a:b2:5f:7e:f2:
11:17:43:75:7e:1f:e4:25:07:d7:bc:01:0a:d7:33:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:93:8C:34:FD:5F:76:68:2C:43:3A:2B:07:F4:53:04:03:B2:EA
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:72:6a:a7:c4:b2:62:ed:5c:a2:6a:17:66:16:39:25:45:
84:2f:56:fc:0c:70:23:ec:81:56:a2:5b:7c:ba:98:b6:59:a8:
ec:34:9d:67:db:5d:9d:a4:0b:23:b3:05:e5:d3:38:6a:fb:f3:
02:a3:83:4d:c3:c3:c6:08:23:98:f7:26:13:42:21:e0:6b:fe:
c5:20:d4:b2:07:08:08:16:bf:b1:61:c0:9d:58:93:86:ec:56:
e0:c8:ec:bd:0b:5c:78:ff:de:4e:c9:26:f1:23:bf:4d:8e:b0:
e3:48:1e:78:f6:eb:5a:20:10:3c:e3:0b:fc:c7:43:97:f2:6c:
a3:b1:3a:d3:36:06:3f:74:02:61:93:3f:0d:ab:3c:ea:78:00:
1d:6f:d2:a2:b2:68:4e:61:e0:3f:ea:9a:ff:c4:38:f2:53:49:
6b:8e:18:ca:f4:bd:ab:68:a6:f6:c3:06:be:70:24:df:79:9e:
67:ee:51:26:b0:8d:cc:24:18:0a:06:7b:8b:5d:2e:da:54:cc:
c9:99:76:e8:45:c4:4b:5f:9f:e3:b7:52:61:c5:2e:12:40:ff:
b0:9c:2a:92:52:29:66:4d:37:75:f5:59:b9:ba:46:f7:45:c0:
10:f9:2e:67:a2:9a:54:4c:81:65:b3:6e:53:18:46:fc:dc:30:
aa:be:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:01 2026 by rpki-client