Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: +ttEFgJLQVem0MCa7fQS7hy+UNN7FKZOebEMA4M5J4o=
Subject key identifier: 9E:61:46:60:AF:12:EA:DB:F9:13:59:57:D3:50:AB:C3:A5:C4:62:23
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019CAB33F0038A65C9A924C88A17BFA14AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 17F2
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
2: 9Fey2fL5T-I6iWRQjnl5tFPgV78.roa (hash: 65yGgePTUWKVgMKzNn1p8ghRnq/EigUAh+Mwu8coGnY=)
3: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: QrOROpy6eMBqQZ+zuyEA3nFn4wAngcrSW7/ngMOi6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f0:03:8a:65:c9:a9:24:c8:8a:17:bf:a1:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=9e614660af12eadbf9135957d350abc3a5c46223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:52:84:65:fd:1e:36:99:d7:d0:7a:cc:c9:
84:e8:fb:65:a6:a0:8c:64:8a:fb:91:de:e1:54:27:
79:ff:e7:f1:a6:cc:47:aa:53:50:c9:ce:fd:b1:f9:
83:7d:fa:90:2d:c3:10:e9:16:75:7a:4f:d6:32:d0:
62:c6:e3:34:60:bd:47:b5:8a:66:4e:26:8d:a7:6c:
0d:41:ce:4f:a4:a9:d1:1e:94:1b:c8:c9:f5:03:7a:
56:98:c6:55:99:67:a5:df:f5:fb:6e:b5:b6:65:3a:
9b:45:1c:ba:7e:15:7c:6a:2f:0d:88:eb:da:4d:0e:
d5:09:c4:92:2b:4a:e4:bc:57:89:87:16:8e:27:e8:
e5:58:d8:c1:4c:34:07:bb:14:27:54:5f:77:aa:7a:
de:0c:9c:ad:6d:67:39:c6:99:78:f0:1d:10:2a:45:
39:e7:52:4f:c6:38:87:cc:d5:26:84:49:bf:cf:ee:
b5:40:de:c3:75:95:2b:b6:33:22:d9:bd:8d:63:8e:
9c:0f:ba:16:38:08:17:01:5f:fe:14:65:5f:19:27:
93:16:62:59:7d:37:2b:c4:e4:01:18:23:d1:e5:fb:
a4:0e:9e:91:c9:ed:d4:43:4f:a7:8f:ec:42:67:f9:
3d:48:a4:27:2c:80:e0:8b:8a:b9:5a:05:33:a4:6a:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:46:60:AF:12:EA:DB:F9:13:59:57:D3:50:AB:C3:A5:C4:62:23
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:95:a4:af:9a:8a:19:21:2e:50:2d:6d:1f:b6:e1:66:b6:03:
fd:ce:9c:50:2b:0a:4a:af:ff:c9:17:c6:72:2d:2e:79:ca:aa:
e3:9c:3d:6a:b1:cf:c2:72:5f:9c:a9:f3:d0:2b:9b:44:7c:10:
ad:20:ef:fa:85:af:1a:89:40:55:2c:4a:a2:37:4a:09:c4:4b:
36:3b:31:06:62:fd:53:8f:25:f8:57:4c:34:73:17:37:e3:a7:
09:51:db:e2:8d:d2:3c:dd:ce:7a:76:25:45:61:aa:13:ef:12:
e8:44:f6:ff:e6:13:09:7d:09:b9:a4:71:68:00:30:4b:84:47:
8c:cc:bf:12:0c:01:c2:ec:ab:a5:03:8d:9a:87:8c:27:51:57:
82:fe:7f:95:9b:63:5b:73:10:f2:9c:8d:e9:d8:27:4a:50:bb:
4d:54:3b:21:f1:4e:8d:60:a2:99:3e:3a:6a:01:e0:3d:94:30:
b8:a3:01:0f:3b:74:48:15:d6:ee:09:1a:57:4e:a4:9e:66:fc:
ed:33:8e:9b:ec:fe:7c:14:8e:24:29:6b:3d:55:7f:5a:8b:02:
28:a8:11:0c:03:7f:a7:d6:43:30:9b:c4:f2:0f:1f:4a:4c:03:
7a:39:6f:63:86:68:98:ba:1a:b3:cb:bb:72:3c:98:bc:ec:bc:
cb:f8:c4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM/ADimXJqSTIihe/oUqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjYwMzAxMjEwMDMzWhcNMjYwMzAyMjEwMDMzWjAzMTEwLwYDVQQD
Eyg5ZTYxNDY2MGFmMTJlYWRiZjkxMzU5NTdkMzUwYWJjM2E1YzQ2MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXlShGX9HjaZ19B6zMmE6PtlpqCM
ZIr7kd7hVCd5/+fxpsxHqlNQyc79sfmDffqQLcMQ6RZ1ek/WMtBixuM0YL1HtYpm
TiaNp2wNQc5PpKnRHpQbyMn1A3pWmMZVmWel3/X7brW2ZTqbRRy6fhV8ai8NiOva
TQ7VCcSSK0rkvFeJhxaOJ+jlWNjBTDQHuxQnVF93qnreDJytbWc5xpl48B0QKkU5
51JPxjiHzNUmhEm/z+61QN7DdZUrtjMi2b2NY46cD7oWOAgXAV/+FGVfGSeTFmJZ
fTcrxOQBGCPR5fukDp6Rye3UQ0+nj+xCZ/k9SKQnLIDgi4q5WgUzpGoUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5hRmCvEurb+RNZV9NQq8OlxGIjMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpWkr5qK
GSEuUC1tH7bhZrYD/c6cUCsKSq//yRfGci0uecqq45w9arHPwnJfnKnz0CubRHwQ
rSDv+oWvGolAVSxKojdKCcRLNjsxBmL9U48l+FdMNHMXN+OnCVHb4o3SPN3OenYl
RWGqE+8S6ET2/+YTCX0JuaRxaAAwS4RHjMy/EgwBwuyrpQONmoeMJ1FXgv5/lZtj
W3MQ8pyN6dgnSlC7TVQ7IfFOjWCimT46agHgPZQwuKMBDzt0SBXW7gkaV06knmb8
7TOOm+z+fBSOJClrPVV/WosCKKgRDAN/p9ZDMJvE8g8fSkwDejlvY4ZomLoas8u7
cjyYvOy8y/jEng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:40 2026 by rpki-client