Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
File: hYw-khBoog7GKwOi2aGXGlWZBdo.mft (raw, json)
Hash identifier: v05zKHY2eQ06iZg5+IZWAj4tUmghguXbGKRDLPQiNR8=
Subject key identifier: BA:4E:32:50:2C:F0:CE:53:DF:08:D4:78:08:49:65:EE:6E:AD:75:89
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Certificate issuer: /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial: 01A13BC96DC8A35199B71CEEEF0D598C5044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
Manifest number: 0145
Signing time: Wed 14 Oct 2026 19:00:18 +0000
Manifest this update: Wed 14 Oct 2026 19:00:18 +0000
Manifest next update: Thu 15 Oct 2026 19:00:18 +0000
Files and hashes: 1: hYw-khBoog7GKwOi2aGXGlWZBdo.crl (hash: Cf7n3Pk8Xzt4+AWzovGDdusj/azS9MbSyNYPgTRSU28=)
2: iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa (hash: UgNnrp4T2gV/9ZM+lt6scNgekuq4L4SWsoVKSp2uNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:6d:c8:a3:51:99:b7:1c:ee:ef:0d:59:8c:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
Validity
Not Before: Oct 14 19:00:18 2026 GMT
Not After : Oct 15 19:00:18 2026 GMT
Subject: CN=ba4e32502cf0ce53df08d478084965ee6ead7589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:ec:51:cf:05:01:fd:23:23:37:de:5d:21:
97:f2:ba:53:ed:f7:05:5d:41:9c:0f:b8:22:0f:77:
6c:08:b7:9b:9b:3a:6e:43:03:fe:db:d2:aa:1f:1d:
24:42:ed:f2:b7:8b:6f:f8:8e:29:9a:a3:6a:c6:6f:
16:5c:51:08:91:10:a8:a4:28:0d:bd:50:01:93:f1:
c3:7f:7d:47:1a:11:4b:f6:7a:5b:c0:20:8e:5e:29:
5f:7d:01:70:a2:f7:48:90:e3:15:88:87:0c:a5:38:
60:8d:d9:dd:a1:02:37:fc:31:79:57:19:f2:67:54:
40:d6:32:ae:c6:81:03:f3:9a:71:79:77:ae:97:c4:
8d:5c:1d:be:c0:4e:63:d2:4e:94:fa:c6:ae:d9:41:
bf:30:a9:24:a5:24:2a:96:bc:b0:1f:19:cf:c1:4b:
5a:3d:3a:24:ff:6f:d6:25:6c:9f:f5:e0:fd:36:3d:
44:c3:30:15:58:17:d7:0a:69:57:ea:53:5e:dc:55:
97:3c:12:35:8a:a2:1a:87:9d:71:a6:f5:21:c4:40:
2b:0d:bd:c2:b5:b5:a4:46:21:5a:2e:20:29:63:ee:
83:7c:fa:9e:9a:a7:c8:dc:54:0c:e0:63:88:b4:e8:
a3:fe:79:be:68:a7:48:83:0d:93:64:b5:13:ae:fd:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:32:50:2C:F0:CE:53:DF:08:D4:78:08:49:65:EE:6E:AD:75:89
X509v3 Authority Key Identifier:
keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:03:d9:3d:fd:6f:58:42:a7:ca:9d:44:dd:0f:7f:ca:0b:df:
2b:ac:7d:b6:63:a8:26:90:6f:37:a1:66:37:9f:0d:3a:43:c2:
1d:c3:8a:ea:af:e5:2a:22:ae:27:f7:b1:05:5a:d4:89:e6:3a:
a8:b4:7b:a6:68:40:96:05:80:52:34:c5:b5:82:5c:38:0d:a2:
06:58:50:82:45:86:fe:23:2b:0b:72:67:39:b9:2a:1d:1f:ef:
73:ef:e2:b0:2d:8c:ef:03:bf:92:8e:46:f7:59:81:bb:2f:70:
f7:ce:e9:e6:4b:02:9f:32:6b:af:cf:b4:20:6a:2d:d6:f1:e4:
6f:1e:ec:f7:cd:59:03:5c:cd:7f:0a:d5:87:70:ee:1d:a5:6d:
b8:8c:d2:65:fb:91:5e:f3:f6:4c:de:e8:af:97:b5:5f:bc:2a:
b7:db:fa:38:88:f0:02:b4:6a:3a:8d:57:1e:d4:d8:60:b6:35:
08:2d:de:86:27:06:57:5d:61:11:9a:44:a8:db:91:37:5e:eb:
6b:41:2a:ba:63:15:2d:8b:60:a1:b6:cb:b0:ca:b9:b5:7a:22:
f6:a2:4b:db:56:a7:17:b5:f9:10:df:43:ef:fe:99:5a:af:b6:
a5:fe:5c:26:e6:59:3a:e6:69:eb:78:b7:24:6e:76:89:e4:24:
1f:23:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:44:49 2026 by rpki-client