Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: glm5x1haeV9oVoqw6yhbOGHdqJo/AoFx3FGIXDkOpS4=
Subject key identifier: 4B:E5:D4:AC:08:6A:A1:59:B0:2F:C4:58:A4:45:F2:F4:B0:8E:36:C2
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019D98BD3E8DCB0E52EE8FCE6F51AA344DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 1871
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: hbbH+Hqe/5+NJUbVD03X3v6UUHeoQeET37CIio+WMM4=)
3: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3e:8d:cb:0e:52:ee:8f:ce:6f:51:aa:34:4d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=4be5d4ac086aa159b02fc458a445f2f4b08e36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:96:ca:69:e3:41:96:e8:7f:cb:30:b5:39:
12:d6:2d:7d:30:0a:2b:f4:4b:a1:b3:bd:f4:ab:fe:
68:06:2f:d9:25:6b:fd:6c:45:45:eb:7f:c4:e0:b2:
7e:41:26:6a:08:74:dc:3c:50:1f:1d:7f:07:b6:dc:
d5:ce:16:b9:a5:e6:18:60:d0:67:cc:82:9b:fe:72:
67:0e:28:86:4b:24:55:ab:01:9e:2c:e6:1b:59:68:
95:22:bf:bd:16:a5:0f:23:42:8b:77:0c:1a:5b:4d:
1b:f2:fa:b3:58:d6:49:a8:9b:36:e8:59:72:94:a9:
b6:a6:f6:04:3e:4d:ec:73:db:d4:cc:0e:32:25:6f:
d9:b6:82:91:fa:fe:c7:6c:f7:ce:d9:eb:55:45:cc:
55:1d:d3:86:5c:6b:0f:1b:3b:88:91:52:04:c8:02:
ff:65:08:e7:80:d6:a4:60:50:5b:4c:f7:58:4e:2a:
07:52:ea:41:c5:38:48:d0:0c:c5:b4:85:c9:b0:02:
ea:36:38:b8:dd:46:e8:ca:c9:b4:b9:69:3a:ea:11:
e3:4a:15:b1:7a:4e:ae:d6:0c:d9:44:77:5c:c5:d5:
2f:d3:e4:2b:2e:02:99:73:2f:31:fa:b3:d0:cf:20:
ab:e5:42:6c:4a:9c:ae:69:43:77:e9:32:69:f2:db:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:D4:AC:08:6A:A1:59:B0:2F:C4:58:A4:45:F2:F4:B0:8E:36:C2
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:d9:27:f9:ec:40:02:ae:92:d9:6d:28:b3:93:72:27:06:
45:91:d9:67:dc:0f:a2:a5:4b:6a:77:cf:e7:5a:b4:60:60:2b:
63:28:13:82:4d:f4:e5:2b:2b:4d:d5:6c:11:60:83:c6:30:2d:
aa:af:7a:88:a5:f6:1e:f2:98:00:12:e8:83:65:28:bf:20:7b:
df:5f:c7:a0:8c:f4:1d:28:b1:f8:57:28:7c:b9:08:6c:ec:5a:
b4:5b:b2:61:18:3a:68:4f:47:23:37:6f:8e:06:5c:01:50:d8:
17:08:ce:2f:6b:ae:67:08:c9:40:ba:27:88:70:87:42:19:1d:
1b:94:1a:67:f0:18:62:d6:7b:e2:50:5e:be:89:0f:98:ad:ce:
4a:d5:0b:73:6e:07:cd:9f:5c:b6:7b:70:43:bd:8a:43:9a:8f:
2a:6c:f3:62:9b:14:64:d4:fc:ca:ce:02:3a:58:5b:00:3a:5c:
04:2b:fc:8e:b6:cf:39:00:1b:10:1a:03:11:eb:b2:e7:cf:a9:
1b:3b:97:4a:74:4a:89:09:e7:df:d2:de:b6:81:69:cb:80:78:
3b:1e:05:1e:bb:00:2c:99:c7:86:2d:d1:b6:2b:3c:11:0f:fc:
d3:53:e7:f6:1b:a5:13:9e:6b:a2:15:28:24:34:37:54:4d:58:
52:8a:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:12 2026 by rpki-client