Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: hN7GgEmBjYRPj6kf7yJIcH6SSsiY2TI1pBDm+6jimWg=
Subject key identifier: 63:5B:39:E5:C5:C0:7B:BA:3D:76:E3:47:7F:1E:60:E9:6D:5B:4D:C8
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019CAAC619CFCA05F2F2858F02752BAB6F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 067A
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: JD-fJFwQnYMI64eLzt1EZdO8xZg.roa (hash: SmdG1CgUBFaqBpssn0iz5Ev++iu6coHjX7fE1/FoyJ4=)
2: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: KsYxKTzMWBLIJ6nQSB02GRy1woiVYdi2KtNeAWbX0bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:19:cf:ca:05:f2:f2:85:8f:02:75:2b:ab:6f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=635b39e5c5c07bba3d76e3477f1e60e96d5b4dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:ed:5a:4a:73:13:20:60:8d:3c:51:b1:13:
52:eb:c2:cb:d1:f0:a8:0e:f1:2f:11:39:22:d7:16:
67:13:39:9b:84:0a:c5:af:67:a0:31:83:ce:53:82:
e3:b7:a8:2f:c2:83:d2:72:ad:77:fc:5c:01:1d:72:
7c:33:f3:67:e5:0b:f3:a0:2b:44:6f:f8:a1:09:d2:
31:af:59:5a:bd:ca:4a:c1:94:90:11:f6:d9:b2:99:
8b:51:a3:0b:a8:67:6d:60:d0:fe:0f:52:41:10:17:
12:56:45:4b:0f:97:0b:92:92:23:46:72:0c:cf:65:
68:97:ea:99:d0:f3:86:20:19:46:bc:7b:5a:a6:dc:
33:78:9b:e3:af:ff:ad:6a:db:72:58:fa:6d:02:7f:
7f:8a:4b:15:14:46:f8:d4:9d:96:0d:bb:75:d3:8f:
ec:51:39:3b:d2:68:f9:4d:7f:87:a4:b5:3a:b7:3c:
6c:ef:ec:94:b0:80:9e:c3:d5:13:3e:98:ad:d7:89:
ee:c4:de:a5:99:69:04:75:95:97:ec:00:04:e3:ca:
86:d0:5b:9a:b6:fc:40:4c:18:7a:60:eb:d1:76:f8:
da:9d:9c:15:fb:53:6e:0b:8c:77:e6:0c:83:92:69:
d5:ab:33:02:5e:f6:8a:8c:b0:f5:16:4a:6f:92:4c:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:39:E5:C5:C0:7B:BA:3D:76:E3:47:7F:1E:60:E9:6D:5B:4D:C8
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:62:e1:fc:d5:49:a3:8a:8f:09:a6:64:52:45:6b:62:5e:59:
27:a5:66:61:4b:8c:d6:20:af:a2:67:d7:03:b8:58:18:16:04:
34:91:2e:e0:f0:02:60:52:78:8d:fa:51:ca:aa:e7:51:5c:74:
22:da:26:88:9c:03:b4:bf:d5:22:25:88:76:79:7e:50:33:2f:
df:3e:b8:70:81:6d:f5:36:02:04:7c:aa:d8:63:c9:84:ea:77:
8e:ce:b9:17:e7:96:ce:03:56:58:ef:3a:0b:d8:79:a9:46:52:
86:25:ea:e2:2d:22:55:69:bd:99:55:ed:3a:87:6b:54:f3:55:
30:e9:af:8b:a7:15:fd:d1:cc:a1:9e:8f:ce:c7:9b:f2:e6:fe:
0a:3a:7c:a8:f6:10:48:50:1a:54:e2:36:2b:b5:0d:bf:84:6b:
db:b4:e0:8e:3e:90:ad:20:c0:a9:c6:89:ee:c0:e3:8b:4a:e7:
f2:a3:4e:d5:e5:bf:f0:01:ce:c6:13:c8:ac:d1:d8:ba:f5:69:
e7:00:21:6e:49:ef:41:c6:31:6f:f3:c3:75:f9:2a:85:4a:13:
9c:d7:8d:cd:54:07:75:06:8e:98:74:89:46:83:6d:a8:cd:14:
89:c8:2e:c5:38:a6:32:0e:5d:16:e9:8b:6d:ab:49:5f:65:7e:
10:9d:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:10 2026 by rpki-client