Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 4lO1nLqI2DWHXyF5Dv+UjZ4Hb4NIEjZhMNYeCV2gvnE=
Subject key identifier: 78:8B:31:B8:94:3F:11:67:29:57:EF:B6:11:2D:26:EE:EF:E5:E0:AA
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019ED4998C9E34DE16E1D9DAF82C88F6BB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0644
Signing time: Wed 17 Jun 2026 08:01:33 +0000
Manifest this update: Wed 17 Jun 2026 08:01:33 +0000
Manifest next update: Thu 18 Jun 2026 08:01:33 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: sWQaQqYNPwA2SwbRG890f9is6VcfODRSgYFSBx7LtC0=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:8c:9e:34:de:16:e1:d9:da:f8:2c:88:f6:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jun 17 08:01:33 2026 GMT
Not After : Jun 18 08:01:33 2026 GMT
Subject: CN=788b31b8943f11672957efb6112d26eeefe5e0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:33:24:ba:c7:52:b7:7e:43:6d:41:2f:e5:
f3:6b:a6:5f:94:57:65:9d:e3:44:fa:a1:c1:e8:36:
68:42:16:43:a7:61:89:3a:99:15:58:b1:9e:22:f6:
98:7e:29:87:fd:d1:c6:8d:05:0e:e5:b3:16:59:84:
f5:8c:28:c3:1f:98:f9:12:b1:7d:9a:ad:92:8c:d4:
38:af:be:f1:ea:5e:cd:4f:3d:e5:f4:fe:de:44:9f:
24:12:07:be:cc:f6:7f:f5:a7:cc:75:94:7b:8f:23:
a7:f9:be:0e:28:b1:0c:26:14:45:b8:05:0e:f7:54:
35:9a:19:6b:07:6d:0e:4a:ea:ed:13:9d:7e:97:c9:
5e:84:51:1d:03:74:53:61:5f:1b:7b:be:a1:0a:3d:
ea:39:5a:a0:89:b7:c5:25:1b:4c:70:2a:9c:a6:7c:
7d:fe:3d:a2:89:31:5f:e1:e7:2c:40:01:03:2d:a8:
5c:24:2e:19:87:c3:5d:f4:f7:a3:de:e9:6f:48:37:
7d:d8:20:0d:5d:e5:ff:5e:a1:6e:d6:a7:4e:30:08:
d6:52:dc:8d:56:65:86:4c:86:bf:4a:9b:cd:38:9b:
dc:eb:80:e9:f0:62:95:11:bb:d5:74:ed:ac:91:2f:
18:d6:99:35:1d:49:e6:3f:c0:f3:73:5a:26:0b:7d:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8B:31:B8:94:3F:11:67:29:57:EF:B6:11:2D:26:EE:EF:E5:E0:AA
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fe:74:e0:c7:90:2a:23:36:b0:09:76:43:cb:59:18:c0:85:
97:5c:b9:35:29:94:a4:d9:69:58:54:51:bc:94:4c:f3:dc:59:
e7:f8:9d:fd:21:de:82:07:ab:84:c9:2a:4c:d9:c6:bb:a0:a2:
d3:20:6e:4f:29:ee:f3:82:a5:82:74:06:8a:ee:a2:15:37:fd:
cb:e3:cd:85:e9:fc:13:c8:47:97:e7:e9:b3:3a:2a:b6:76:a9:
00:f6:11:86:14:15:d5:da:ca:5e:7b:b7:4f:0e:04:a0:f3:ee:
ab:e0:a3:a8:c9:51:25:3f:06:8d:f8:a4:f0:0b:ea:b4:46:7b:
c7:f0:7e:f3:98:da:12:a1:9e:49:ca:86:fc:74:da:77:ac:b6:
65:86:39:e1:fa:ad:21:cc:41:3b:60:7e:47:cd:44:52:b0:9b:
c4:cb:a0:af:b8:db:f9:c1:d1:43:35:6a:cf:cf:0e:7c:63:13:
0b:fd:c2:52:c3:47:75:b9:03:f9:46:c4:4f:5f:d3:09:0d:e3:
40:d9:f0:49:75:6f:72:b2:b7:e9:08:bf:18:53:75:9d:09:9e:
c7:40:bf:de:5b:0f:cb:7a:06:65:9e:3b:97:2c:2d:71:c2:1a:
18:49:17:a3:2c:02:23:6e:c2:e8:d3:76:93:90:be:7c:73:8a:
83:92:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:23:40 2026 by rpki-client