Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: 6QxmUDKbOVP51qvJYb13CmkCGgXYP51kioA+U75oN0U=
Subject key identifier: A2:C4:63:51:D8:87:5B:D8:A6:03:D6:3D:96:89:53:46:61:0C:99:03
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019FA7F517EDD70DBB96ADD2B1C0030DF2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1A11
Signing time: Tue 28 Jul 2026 09:01:25 +0000
Manifest this update: Tue 28 Jul 2026 09:01:25 +0000
Manifest next update: Wed 29 Jul 2026 09:01:25 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: kcJch8I/XlXkzZtM9VfWTMB9f2jUKv7W1yl8q1j1n0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f5:17:ed:d7:0d:bb:96:ad:d2:b1:c0:03:0d:f2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Jul 28 09:01:25 2026 GMT
Not After : Jul 29 09:01:25 2026 GMT
Subject: CN=a2c46351d8875bd8a603d63d96895346610c9903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:0f:84:82:ae:f4:4e:99:e6:68:b5:03:a9:
b7:57:4f:96:81:22:5c:b0:00:14:cd:24:7d:22:e6:
c4:a9:e2:4e:c9:4c:6f:f1:d3:f7:40:06:08:ec:f5:
c5:e8:3c:ef:c8:1d:ae:b9:f3:2d:b0:81:10:4b:35:
28:f4:e7:e4:1e:99:b6:d4:70:27:9f:80:33:05:ca:
f1:a8:8f:60:26:aa:7c:03:cf:36:8d:46:91:b3:33:
3b:fc:e5:f4:24:5b:ba:99:9b:81:b0:1f:cf:e2:73:
d3:ed:f8:93:45:f0:3a:10:cc:b8:f3:cc:2e:c5:97:
c0:ba:d8:bf:3f:41:10:91:ad:98:1a:58:a6:32:4a:
e5:fd:d4:4e:bc:aa:b3:8e:1a:c8:c2:6b:0c:fc:b8:
39:7f:e0:c5:5b:e0:63:5d:05:92:29:bb:7b:cd:b0:
b4:92:a4:a4:23:89:23:08:0a:a5:07:e9:e4:73:21:
82:4a:86:ba:75:63:55:1f:40:f0:83:c0:79:09:8c:
e3:e8:a3:d8:da:20:10:7a:c9:a6:9b:e8:6f:40:0b:
b9:88:c1:15:a3:cb:44:9d:76:a7:e7:a2:da:a3:fc:
aa:ba:41:ee:9d:4b:92:ce:bd:44:84:58:77:d5:58:
6b:7d:91:23:5f:c6:79:94:e2:f8:e4:b4:29:68:97:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:63:51:D8:87:5B:D8:A6:03:D6:3D:96:89:53:46:61:0C:99:03
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0c:c9:38:8d:d3:bd:7d:5a:f1:f1:ae:a3:e7:3a:80:b7:ae:
14:7a:ad:6b:97:02:2e:43:b8:84:35:ed:37:17:1f:a0:a8:1e:
d5:da:00:54:b1:bc:ed:7d:fb:af:e7:02:75:03:33:23:47:a5:
8a:f3:2d:72:8b:a6:9f:a6:31:b3:ce:a6:28:fa:e0:a5:9d:bc:
06:c7:1e:d0:2a:9f:34:cd:43:3c:f0:b8:b3:71:f4:cc:ee:38:
28:de:76:fb:fe:ab:6c:1a:bd:b7:c3:ba:e9:97:ab:13:ba:46:
13:d9:cb:2e:ae:0a:60:a3:46:37:5e:10:8c:61:3e:e0:d3:cd:
e7:e9:8d:4c:fb:6d:92:ce:e0:26:e3:f7:e2:49:71:f5:0c:f2:
5d:10:62:16:25:f9:7a:39:0e:88:a3:b5:73:63:b4:06:5c:46:
65:e0:94:02:62:05:d5:00:8d:39:1f:51:17:31:e6:8d:4d:8e:
50:0f:3d:08:bf:38:02:63:b4:b7:e4:05:cd:87:d7:b8:ee:1d:
4b:b1:c5:49:12:8e:ea:44:7d:2c:65:dd:f3:b9:88:fb:3d:9a:
b8:33:34:0a:63:3c:8a:da:1c:d4:2b:ac:9b:e0:aa:0f:15:e6:
da:d7:5a:49:fd:82:87:c8:bc:7c:3f:4d:da:66:46:f8:de:f3:
69:fb:cd:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9Rft1w27lq3SscADDfLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh
OGMxNDAwHhcNMjYwNzI4MDkwMTI1WhcNMjYwNzI5MDkwMTI1WjAzMTEwLwYDVQQD
EyhhMmM0NjM1MWQ4ODc1YmQ4YTYwM2Q2M2Q5Njg5NTM0NjYxMGM5OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWMPhIKu9E6Z5mi1A6m3V0+WgSJc
sAAUzSR9IubEqeJOyUxv8dP3QAYI7PXF6DzvyB2uufMtsIEQSzUo9OfkHpm21HAn
n4AzBcrxqI9gJqp8A882jUaRszM7/OX0JFu6mZuBsB/P4nPT7fiTRfA6EMy488wu
xZfAuti/P0EQka2YGlimMkrl/dROvKqzjhrIwmsM/Lg5f+DFW+BjXQWSKbt7zbC0
kqSkI4kjCAqlB+nkcyGCSoa6dWNVH0Dwg8B5CYzj6KPY2iAQesmmm+hvQAu5iMEV
o8tEnXan56Lao/yqukHunUuSzr1EhFh31VhrfZEjX8Z5lOL45LQpaJeVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLEY1HYh1vYpgPWPZaJU0ZhDJkDMB8GA1UdIwQY
MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt
YmU3YTFhMDAxY2NmLzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm
LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwzJOI3T
vX1a8fGuo+c6gLeuFHqta5cCLkO4hDXtNxcfoKge1doAVLG87X37r+cCdQMzI0el
ivMtcoumn6Yxs86mKPrgpZ28Bsce0CqfNM1DPPC4s3H0zO44KN52+/6rbBq9t8O6
6ZerE7pGE9nLLq4KYKNGN14QjGE+4NPN5+mNTPttks7gJuP34klx9QzyXRBiFiX5
ejkOiKO1c2O0BlxGZeCUAmIF1QCNOR9RFzHmjU2OUA89CL84AmO0t+QFzYfXuO4d
S7HFSRKO6kR9LGXd87mI+z2auDM0CmM8itoc1Cusm+CqDxXm2tdaSf2Ch8i8fD9N
2mZG+N7zafvNAg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:22 2026 by rpki-client