Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: KeXs2+2mbaZXUyir4Hkd8gUdDKLKsdhOtNe02pS0xWM=
Subject key identifier: 51:87:5E:2B:5B:02:B3:9A:B9:41:D0:50:F8:7D:F7:50:04:24:B0:31
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01A13E94B89EA0629D9841DFA39E72BCD4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0785
Signing time: Thu 15 Oct 2026 08:01:36 +0000
Manifest this update: Thu 15 Oct 2026 08:01:36 +0000
Manifest next update: Fri 16 Oct 2026 08:01:36 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: b8mGzr0lpweslYXxMLcf+BJRIopyUM9ts1mondl5nLQ=)
3: lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa (hash: 8vRKXr3v7lfmQwJ46dN1JawVHnwZVtyt70o7OLDYeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:b8:9e:a0:62:9d:98:41:df:a3:9e:72:bc:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Oct 15 08:01:36 2026 GMT
Not After : Oct 16 08:01:36 2026 GMT
Subject: CN=51875e2b5b02b39ab941d050f87df7500424b031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:ca:5e:da:43:a1:f7:c8:b6:71:a9:76:b1:
07:a1:41:78:7c:ff:9f:f2:a9:81:0e:d4:e5:c9:b9:
ee:7d:05:95:78:72:3d:b8:f1:cd:7e:75:0f:3f:16:
28:82:1d:02:77:37:81:eb:43:80:ea:b8:9c:97:1a:
f0:2b:f2:c0:07:1b:c1:b0:ac:34:9e:73:02:a8:4f:
4e:33:36:fb:e0:20:97:ff:94:9d:1f:ce:98:84:ad:
37:5a:d8:ab:1d:3b:24:16:b2:bb:b0:81:d5:b5:c0:
39:c7:67:d3:d8:0b:95:74:02:61:86:fe:93:55:fd:
b0:49:91:60:c7:d8:f7:70:bf:f4:3c:18:9b:7d:81:
15:19:b0:4a:21:87:79:97:f2:3f:f1:63:c0:49:b7:
69:70:1a:e5:45:c3:34:3f:d6:50:1d:db:14:2d:24:
46:ad:f0:9f:1e:89:e0:e3:7f:2c:f9:0b:b4:3f:00:
18:6d:79:0f:91:0b:49:c3:aa:5f:18:1e:5d:4c:2f:
c0:fc:37:1a:ab:9f:71:e9:07:75:a0:74:be:2d:9e:
47:9f:10:f8:46:5f:b4:68:02:bc:73:1f:96:87:fd:
1f:bb:5a:73:0a:0f:88:24:f0:52:64:60:4b:76:a4:
5b:50:ac:51:17:ac:7a:d4:24:34:3b:61:2a:fc:59:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:5E:2B:5B:02:B3:9A:B9:41:D0:50:F8:7D:F7:50:04:24:B0:31
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5d:f1:f5:ba:6e:a1:0e:40:73:89:7e:a6:4f:66:ff:d7:45:
fc:52:c7:ae:8a:34:75:b3:05:5c:e6:22:c8:59:af:81:f3:a4:
af:71:d5:5a:7c:a6:19:4d:c5:76:11:d0:67:7a:6c:1a:ac:f4:
d0:d9:69:fe:13:e6:6a:bf:fa:60:2b:75:ff:22:2b:26:af:69:
ec:0c:4d:37:2a:ca:5d:04:c1:17:30:24:9a:a3:2b:ef:24:0f:
04:7e:ec:0f:0c:3d:cb:7e:03:da:50:e5:82:7e:4a:64:a3:ae:
08:21:c5:61:f4:48:9c:79:98:3d:88:b5:01:0c:bb:3d:4f:62:
b4:7a:2e:c0:f0:58:0c:d1:08:c8:73:71:cc:01:d2:fc:fd:54:
78:64:3c:72:3e:5f:5c:fb:ed:00:30:13:d6:cd:f7:28:1f:d0:
35:48:d7:f2:83:6d:eb:02:ee:e8:2c:be:6d:8b:99:37:e2:c1:
32:f7:f8:98:bc:6a:f3:ba:05:f4:5f:3a:79:ff:c0:f5:2f:64:
d1:95:5d:76:00:9f:9c:75:86:6c:02:0a:01:88:75:bd:9d:e8:
c3:47:d2:5c:c5:f7:a2:2a:ab:bd:55:85:31:04:77:72:8d:d5:
3f:f1:c0:54:e7:67:90:d6:06:fd:4d:b0:bd:91:0c:4d:c0:b6:
92:1a:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:50:35 2026 by rpki-client