Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
File: hWyvHy8CkUARBe9osllX3FVVENI.mft (raw, json)
Hash identifier: vbgVzBLonkZW7h2ZMbHa5lXQ0S6gi0H+Wjyu3f+gf+A=
Subject key identifier: 3D:58:2A:64:87:D9:54:CA:38:1C:D9:3A:BF:56:2B:AF:FA:FE:A2:D1
Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2
Certificate serial: 019CAD230994E3D7A96EEAE079FA78DBE673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
Manifest number: 13B2
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: IprTwL4Amh5zz4RcQ4eoiHW37Ks.roa (hash: dBtfOnRmy0XmcWX3EB1msTLJV31TMXHtHpcj07KafxY=)
2: hWyvHy8CkUARBe9osllX3FVVENI.crl (hash: mlX8+Cv1v8C+oWJhrn/Bsauqb2pVdeKxc68q4TujviE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:09:94:e3:d7:a9:6e:ea:e0:79:fa:78:db:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=3d582a6487d954ca381cd93abf562baffafea2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:17:9e:62:9d:31:64:36:3d:f0:35:83:a7:
b4:7a:f3:74:d9:42:19:03:46:5e:12:f4:4c:0e:5e:
8d:fa:ae:8a:62:80:48:b8:8c:6b:e7:29:18:2f:70:
a2:19:63:24:2a:25:bb:d1:da:0f:30:15:a1:80:d2:
9a:92:e9:2f:1b:8c:ba:69:d6:85:08:c5:7a:6a:99:
98:0c:29:58:7c:f5:74:f4:5c:25:db:f6:28:e1:18:
e5:04:af:0a:89:cd:2f:ac:f6:03:49:3a:60:3b:b7:
8b:5e:cd:15:fd:0b:fe:34:1a:ae:b1:23:fc:00:53:
83:ca:d0:5b:09:1f:0e:52:4c:16:22:65:77:b6:0d:
ae:8c:f1:85:f9:de:7a:ad:a2:92:c6:70:8d:ff:8f:
fd:8d:9b:2f:a4:44:2b:ab:79:b3:cb:53:40:e5:4e:
05:1a:e0:f1:3a:89:01:28:85:96:58:0f:31:1f:ba:
55:5d:f3:ea:12:9a:2b:1e:30:25:58:57:ae:97:e2:
70:eb:30:05:6e:a9:0d:79:a1:c6:ee:c9:fa:e0:dd:
46:69:5b:e6:b1:4d:62:a5:02:61:5e:ae:d2:c1:d0:
cc:db:1b:32:d1:d8:fd:73:1b:73:61:39:c8:61:03:
32:0a:25:fc:41:63:dc:19:42:dd:f0:4a:ed:0c:3d:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:58:2A:64:87:D9:54:CA:38:1C:D9:3A:BF:56:2B:AF:FA:FE:A2:D1
X509v3 Authority Key Identifier:
keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:7d:7a:31:90:46:a8:5e:ec:33:48:14:b6:55:42:6f:4b:
e1:04:e0:7d:a2:cb:e0:59:1a:e1:b9:0a:8e:17:6f:34:82:e8:
a6:80:4b:3c:89:06:68:00:b8:ea:cf:14:3c:66:1b:ce:a2:5a:
d9:61:76:cc:b0:82:7b:ef:4f:e9:21:51:53:d6:cc:31:ed:02:
0e:5d:d2:eb:ed:33:9a:e4:f3:b5:64:a7:99:9a:16:94:33:f0:
95:9f:d8:b8:60:ef:7f:78:2b:ca:66:62:8e:89:34:39:9b:ea:
49:ff:37:d4:52:96:e1:91:88:5f:dd:50:32:29:9d:76:7b:11:
72:45:63:3d:c2:50:18:3c:3b:51:76:ef:8e:d2:9b:db:67:15:
81:d8:7a:13:97:58:5f:6a:20:63:1d:4a:b5:59:70:b2:d6:ea:
d7:c4:5e:c3:34:46:70:37:ab:e3:87:34:87:a6:f9:49:93:0f:
d2:5e:5f:54:ef:de:03:c1:c5:9a:d8:5c:6b:8a:26:34:58:b7:
ed:5a:b6:43:fa:05:c6:5e:6c:b8:18:80:84:2a:81:3d:26:9d:
d6:ca:a1:9d:48:56:4c:a5:75:88:7d:73:28:4b:8a:76:81:5b:
39:80:86:b5:41:28:68:10:c3:d6:d6:38:cc:58:10:2e:9a:4d:
83:a9:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:23 2026 by rpki-client