Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: l7WcgGzMTEW0L54tbOdE0xRXpBkPVfAittFjZhyPNAw=
Subject key identifier: FD:BD:12:B6:55:93:6F:03:0A:E5:5C:83:8A:0E:5D:7B:4E:C5:2C:7E
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019CAE34EC30B043F0DF13472AD6F1CB2586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0527
Signing time: Mon 02 Mar 2026 11:00:29 +0000
Manifest this update: Mon 02 Mar 2026 11:00:29 +0000
Manifest next update: Tue 03 Mar 2026 11:00:29 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: ZXdG2AKptSSm9h/2rUMCRJEIixGFIea289TpT25Pmrc=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:ec:30:b0:43:f0:df:13:47:2a:d6:f1:cb:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Mar 2 11:00:29 2026 GMT
Not After : Mar 3 11:00:29 2026 GMT
Subject: CN=fdbd12b655936f030ae55c838a0e5d7b4ec52c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:45:80:14:56:df:2b:08:4d:62:9f:80:2b:
59:9f:b3:bc:5e:a5:f5:df:62:89:6c:68:af:c6:47:
72:7e:c8:3a:29:84:c8:d4:a9:20:c8:49:c0:94:c6:
ec:d5:30:38:f0:2f:81:91:ea:f3:4d:77:41:c1:40:
0b:68:f4:b4:e7:88:c9:5c:44:04:59:fe:ec:e4:d9:
3e:ae:d0:91:94:f3:45:21:ef:d4:e6:05:f0:a8:05:
4e:9a:4c:68:4d:e1:b8:77:8a:f3:a5:c7:58:73:dc:
5e:26:c4:78:3a:6e:25:74:f3:37:39:60:18:54:7a:
9f:31:45:7a:e6:4d:4f:9b:1f:27:e1:88:b5:d4:b1:
7a:e5:13:a8:e6:6a:90:34:10:ac:29:4d:9f:0b:59:
17:ed:99:38:93:cd:46:96:dc:3c:3a:03:94:da:4d:
7f:9d:21:94:f5:94:80:8d:75:2c:0b:ae:04:e1:cc:
44:c0:e5:dd:77:95:94:7a:09:41:2f:29:e7:9a:a8:
56:f7:05:04:65:6c:2d:06:e9:d8:c0:64:ca:f7:ab:
ae:ed:9d:76:80:8a:3a:fc:cf:71:d2:ce:f9:bf:4e:
25:d6:bc:83:35:c1:f2:bf:fc:b4:1b:5c:23:2b:9f:
44:dd:ed:69:04:16:bd:0d:b6:7b:b3:b3:cb:ce:8d:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:12:B6:55:93:6F:03:0A:E5:5C:83:8A:0E:5D:7B:4E:C5:2C:7E
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:17:18:2c:75:51:5a:0a:07:f8:8b:d3:34:38:52:01:f4:
98:55:3a:62:92:55:0f:a4:66:05:d7:52:2a:14:52:5e:6b:6a:
8e:cd:51:24:f8:6d:a5:f5:da:d6:b6:e3:63:6c:0c:32:4f:29:
d6:82:71:2e:72:b2:0a:3f:33:57:66:dd:ec:a5:00:a8:b7:a6:
0d:38:dd:38:92:29:f5:d9:20:dd:9a:92:8a:59:2a:9a:0c:68:
03:25:e6:2e:c7:16:b6:a8:ab:c7:ae:6b:2c:cb:e7:18:e0:16:
f3:38:1f:35:e3:c4:bf:26:c8:ef:d6:ec:e5:26:27:19:c6:9e:
26:69:c0:e8:b3:a3:49:2b:00:cf:09:4a:58:70:7b:a8:fd:04:
1e:de:11:3b:ef:cf:dd:8d:6d:50:a6:a8:2e:a1:58:e2:41:65:
2b:6d:75:7a:ae:b4:ef:a7:17:90:81:36:d5:44:17:e4:af:e5:
7b:1f:00:b4:48:80:eb:98:12:8f:e6:96:60:89:19:8c:db:d0:
05:fb:dc:20:41:53:8d:a3:03:26:1b:c4:b4:d5:96:42:68:3f:
ec:55:69:7d:ce:55:54:8a:52:eb:f4:fd:e9:d0:1b:59:ba:56:
df:d3:c9:b1:63:83:8f:eb:e4:c2:e7:05:ec:2c:e2:f8:65:70:
ae:eb:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:13 2026 by rpki-client