Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: iyGETQOAECX7PTNHy9iprkuV5WARQqrC3F7cHL5lyfY=
Subject key identifier: 67:F2:E0:2B:75:F9:15:2C:41:7F:51:3C:E9:9C:36:1C:A0:A9:F5:C6
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 01A1254239FDC652B3C7B1055F7641692067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 07E9
Signing time: Sat 10 Oct 2026 10:00:59 +0000
Manifest this update: Sat 10 Oct 2026 10:00:59 +0000
Manifest next update: Sun 11 Oct 2026 10:00:59 +0000
Files and hashes: 1: 9aRTzcNv5guAsQiFnGIvU6cyVjw.roa (hash: yxAswLOvy7NpNtBGcnZYbW1+LR5oOn3Rqal1sA9FoVg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: s88NzdMl4Tus7smQTmUXqc3zsv1IunM5qjFJToySuyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:39:fd:c6:52:b3:c7:b1:05:5f:76:41:69:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Oct 10 10:00:59 2026 GMT
Not After : Oct 11 10:00:59 2026 GMT
Subject: CN=67f2e02b75f9152c417f513ce99c361ca0a9f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:63:ba:92:63:97:47:16:35:30:3d:79:c3:
3c:e9:45:56:54:66:59:46:e3:39:21:d5:f7:8f:45:
99:4c:98:9a:0d:a2:c9:09:a1:3f:85:38:9a:da:6c:
6b:fd:61:ae:3b:a8:e0:8d:f1:bd:d4:56:e3:5a:bc:
dc:98:e3:2e:47:0f:00:36:13:6a:e4:09:ef:d0:22:
54:06:71:14:c7:52:c1:93:aa:8d:14:31:ce:5e:6e:
18:86:e3:cc:ae:fe:9c:c3:eb:74:df:98:ca:90:85:
de:b1:73:a3:fe:67:72:33:ed:c2:b4:a9:2f:3f:a9:
bd:92:75:cf:aa:76:c1:07:84:93:95:be:c9:cb:12:
63:2d:4e:4e:75:1d:dc:a0:52:81:5a:85:e8:79:a8:
18:e6:92:86:96:ef:6c:11:08:7d:10:7b:c4:bb:83:
1d:60:e1:c7:7b:54:2b:ad:97:51:5c:69:70:c5:6e:
24:f1:90:88:d8:dd:5e:48:8a:da:7a:fd:69:7b:9b:
5b:3a:8e:33:08:21:e2:eb:a4:fd:dd:c0:88:60:9b:
09:2d:42:4f:8e:15:e2:20:29:59:db:75:f7:05:06:
57:47:20:91:7e:9c:c6:4b:f4:eb:07:c1:4e:69:2e:
1b:2d:3e:c3:34:24:ce:ca:5c:ff:78:a1:ec:14:0a:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:E0:2B:75:F9:15:2C:41:7F:51:3C:E9:9C:36:1C:A0:A9:F5:C6
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:43:51:0d:d3:0f:6a:7a:1a:db:cf:c5:87:58:00:0b:bf:
ac:5e:26:c7:15:27:fe:d9:8e:31:3f:0d:ae:9b:ae:49:d4:ab:
b1:9f:57:9e:cb:75:1d:64:5d:2e:3c:5e:35:b2:c2:5b:c3:85:
30:a3:39:7e:78:4b:8b:25:ad:dd:09:95:c7:4c:c2:bf:be:04:
b6:45:e2:81:82:73:96:53:37:a8:6e:bb:e9:ff:52:5c:ed:94:
8a:d5:3b:77:d0:36:3c:ca:f9:ed:20:4d:25:dc:88:33:b8:2b:
e8:1b:30:2b:69:06:c9:06:b5:76:87:63:96:de:03:c4:a8:92:
53:bf:a7:68:38:f3:1d:af:c4:e3:e1:e0:25:12:93:d1:68:ca:
b4:96:99:e9:b9:2a:90:ff:a7:54:68:d2:85:85:b1:38:db:1c:
da:8e:51:53:10:0f:03:e0:56:98:dd:46:c8:ae:78:9b:71:7c:
37:34:a8:13:ca:b0:6b:9c:b0:1d:aa:93:34:69:08:f8:15:d9:
01:a7:72:00:21:1e:5d:e9:72:a1:df:c6:d5:65:53:6d:4c:2c:
45:e9:ed:ea:c6:79:ca:50:85:9b:92:3c:f7:3f:c3:9a:7a:54:
ee:c6:a6:e2:f0:cb:6e:26:9a:9e:ae:ce:83:a7:dc:77:8b:5c:
4a:bf:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:43:14 2026 by rpki-client