Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: UlxXO+yeW6LykfV0WvrAammqTnydKDPx1dVgkZY/a+o=
Subject key identifier: 39:9A:22:AE:10:2A:84:F9:58:B8:12:90:3C:75:4C:71:FE:EB:3C:87
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019D9BBE45A5D158C0E96CEF13A70FC15A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 05A2
Signing time: Fri 17 Apr 2026 14:00:31 +0000
Manifest this update: Fri 17 Apr 2026 14:00:31 +0000
Manifest next update: Sat 18 Apr 2026 14:00:31 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: ymm/b8xJXIpKy3UcIltGVO4a6jIul4FodsR9sbwWEfY=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:45:a5:d1:58:c0:e9:6c:ef:13:a7:0f:c1:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Apr 17 14:00:31 2026 GMT
Not After : Apr 18 14:00:31 2026 GMT
Subject: CN=399a22ae102a84f958b812903c754c71feeb3c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:12:cc:8f:74:e4:b4:f4:91:c5:42:f4:3f:
38:5f:01:69:83:d2:42:4f:ec:28:00:23:5a:43:d5:
d2:2f:9d:d1:cc:15:bc:1d:8d:c1:a6:36:f0:7f:de:
86:d5:ca:1c:74:f5:c5:79:da:1e:18:9f:4d:9d:b4:
2e:23:7e:db:75:0a:99:64:95:7e:77:69:3b:0d:df:
d5:3a:6f:b3:74:5c:9e:88:90:e8:2a:ed:72:2c:4a:
82:2f:a8:cb:36:82:06:78:d1:9a:96:29:cf:dc:f8:
58:11:08:92:12:91:bb:32:b6:bf:a2:59:43:fc:43:
7e:46:b5:d6:8f:32:3b:16:b6:3b:25:49:85:92:b2:
8c:af:8e:e3:fc:00:f1:20:ae:31:71:71:09:bd:74:
64:29:61:dd:ba:d4:1e:31:c8:9c:c9:25:2d:d8:21:
1f:48:89:18:14:e7:e4:70:7e:45:b4:bd:46:23:7a:
63:f2:9f:e8:66:35:d4:80:27:b3:a8:2f:30:23:b9:
0a:e2:3c:8b:11:af:26:a7:0d:16:c9:26:7f:a9:8d:
02:10:8b:51:6f:1b:71:65:77:7e:8e:1c:e6:6f:19:
e7:d3:94:1a:5f:b0:c6:2a:60:1d:fa:fd:7d:0b:aa:
65:70:e5:36:22:d0:38:59:cb:71:2e:c0:6a:21:c4:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:22:AE:10:2A:84:F9:58:B8:12:90:3C:75:4C:71:FE:EB:3C:87
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:22:83:ec:e1:3a:31:98:a4:5e:87:a3:d0:25:d9:25:7a:5e:
2c:45:94:c9:eb:ce:01:e4:a5:28:be:26:35:25:d4:9f:32:a6:
2d:a7:0b:de:f4:a5:56:12:7f:20:b0:7e:bd:19:02:d0:6a:ee:
24:f3:7c:27:2f:62:70:c5:18:9e:15:01:2c:1d:ea:de:ce:85:
e0:47:29:43:63:e6:db:ee:92:3b:97:86:d6:47:41:e8:51:6b:
3d:30:9b:5f:bc:78:0f:40:ef:ed:21:bc:19:bb:cf:2c:1a:43:
71:0b:ee:27:07:76:8c:f5:cc:26:6b:8f:48:de:6a:ae:65:0f:
c1:ea:f5:38:ae:8a:95:f8:4b:a7:df:cb:53:c6:42:ac:40:70:
3d:32:82:64:30:6c:67:20:8e:3c:bf:a2:9d:83:b8:60:90:d8:
eb:b2:a4:f1:3d:94:53:c9:01:f6:b5:84:24:ac:08:a5:b3:7c:
be:be:24:43:44:e0:0d:ba:ea:4c:ec:54:5d:b8:63:05:ad:f8:
80:0e:f7:64:ac:2d:68:fa:8e:64:96:0f:f4:6b:55:a5:7f:ce:
e3:71:4d:d7:2d:63:34:ae:95:7b:2a:65:f8:b4:4d:66:22:8f:
92:e4:c9:8f:c9:85:7b:fd:8f:62:bb:1d:d5:70:7c:ce:88:16:
7e:f7:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:13 2026 by rpki-client