Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: Ea9vuJAYiR6XHDU+P3IsXCAO7Sr0PPplCMNY618i4sY=
Subject key identifier: CD:39:BF:91:07:A3:2D:75:5A:98:22:D0:5A:63:0A:46:A2:78:D4:17
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 019FAABE92ABCC6FD53541C2180207BD218B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 0725
Signing time: Tue 28 Jul 2026 22:00:43 +0000
Manifest this update: Tue 28 Jul 2026 22:00:43 +0000
Manifest next update: Wed 29 Jul 2026 22:00:43 +0000
Files and hashes: 1: 9aRTzcNv5guAsQiFnGIvU6cyVjw.roa (hash: yxAswLOvy7NpNtBGcnZYbW1+LR5oOn3Rqal1sA9FoVg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: 8i4SRLW9rdGCLOoeiFKZm1RAbboSRsRBEkVWIe5gbV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:92:ab:cc:6f:d5:35:41:c2:18:02:07:bd:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Jul 28 22:00:43 2026 GMT
Not After : Jul 29 22:00:43 2026 GMT
Subject: CN=cd39bf9107a32d755a9822d05a630a46a278d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:a3:e0:ce:49:b9:96:d5:05:cd:b0:18:bf:
47:18:b5:25:d1:d4:e0:40:de:63:c2:b3:96:4d:68:
69:ce:b3:65:b8:82:97:a0:5c:36:32:8e:74:f7:5e:
35:d1:57:22:ea:b7:2e:67:65:f2:db:0b:47:b5:29:
58:17:71:f6:df:e6:7a:94:11:fb:6b:df:a3:93:93:
cf:a4:ff:ec:40:73:5e:9d:bb:c3:ee:f0:7b:aa:20:
e4:84:cd:eb:87:35:2b:60:d0:c5:28:2a:b3:a5:d7:
cb:a0:07:61:28:e0:f5:83:af:aa:a8:e9:5a:1c:ec:
06:8c:00:3a:bb:0c:ba:91:e7:da:be:00:72:cc:c5:
83:ac:e6:a4:c8:71:cb:85:36:a2:18:03:ec:49:bd:
f7:08:b0:7d:78:d1:e9:c1:4f:ab:13:cd:50:bd:bd:
02:12:23:63:5a:25:c9:70:17:0e:df:8f:f9:09:12:
f8:e0:f8:d3:df:69:ab:ad:09:9a:f4:f6:70:96:1b:
d6:e5:f7:b2:aa:df:8e:03:b9:c0:6a:d5:62:c0:2d:
b0:79:f9:a5:20:6a:c2:cc:3b:3e:2b:25:98:e4:64:
b5:a1:e1:bc:fd:68:e8:ae:0e:fc:2a:34:27:1f:9d:
09:71:4c:f0:56:ef:0f:90:c0:fa:31:f4:d2:a3:6a:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:39:BF:91:07:A3:2D:75:5A:98:22:D0:5A:63:0A:46:A2:78:D4:17
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:d1:f6:80:02:f7:76:73:22:ef:f8:1c:e2:22:4b:bc:b3:
02:3c:99:72:fe:3f:df:ac:16:da:62:7f:f7:4e:6d:85:6a:31:
2b:77:54:0e:eb:ab:16:14:68:54:4e:9f:14:2f:f3:a6:06:68:
13:5e:a5:72:5d:05:fb:bd:a7:29:c8:38:83:5e:0c:92:75:fc:
40:61:1f:71:fc:ca:c5:19:ea:a7:8f:b7:f9:b2:e6:77:37:8b:
21:ac:01:7b:c7:f1:76:2a:b8:09:37:03:a5:e1:f3:25:87:dc:
42:e4:3f:0d:80:24:9a:f0:65:a2:19:2b:ee:4e:07:36:30:4d:
3e:14:57:7b:30:91:6d:2f:59:50:77:17:eb:d0:cb:a3:6f:58:
f0:48:48:98:6d:9f:01:8e:5c:6c:26:76:93:a2:b0:b5:6a:97:
0d:94:88:9d:99:fe:d2:66:75:a7:42:b1:fe:ce:82:bb:c7:b8:
03:34:cf:ff:01:a8:59:e3:53:bf:21:d8:bb:3b:16:8d:4c:cd:
f4:ac:e6:0e:ae:de:13:85:d4:32:9b:fb:dd:9a:fc:98:68:11:
2e:e7:b0:a1:d7:05:da:93:36:23:c3:c3:ea:cf:69:3f:b1:ec:
5d:62:87:12:3a:53:dd:05:bf:a8:20:b6:75:e0:5f:fc:62:a0:
63:ca:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:56 2026 by rpki-client