Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: MS7Aa+VsHo2MUlJklgUP9+2mshsoVsfA0Ov3r6o7do0=
Subject key identifier: 7A:98:72:66:B8:69:67:EB:80:40:DF:19:2D:7E:08:03:9E:64:72:C0
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019FAA87D586AE514C08964FCA4F48752462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 21:00:56 +0000
Manifest this update: Tue 28 Jul 2026 21:00:56 +0000
Manifest next update: Wed 29 Jul 2026 21:00:56 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: 92ka7AEGgymj7n8Etubhzm92gRKMWyx1gXLmCvmHYv8=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d5:86:ae:51:4c:08:96:4f:ca:4f:48:75:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jul 28 21:00:56 2026 GMT
Not After : Jul 29 21:00:56 2026 GMT
Subject: CN=7a987266b86967eb8040df192d7e08039e6472c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:2e:20:21:49:c4:9c:2d:55:ea:93:0d:60:
33:4c:d1:47:e0:25:54:0b:b0:d2:f2:c6:65:87:8d:
14:82:ba:bc:17:20:48:81:8c:44:02:4f:03:7c:f2:
ec:d3:f5:4f:bf:93:72:93:80:5c:ba:18:3e:b3:75:
44:d0:93:f7:5b:31:1e:6e:54:86:db:ec:38:d3:29:
6e:42:18:8d:f4:93:83:53:96:da:21:6e:64:46:85:
fe:91:2d:cd:85:5c:cc:5c:7f:10:e4:92:e4:43:66:
0c:60:0f:8f:eb:74:16:ad:34:45:4c:32:10:64:d4:
ac:ff:42:5c:9a:11:1b:9d:ba:dd:43:de:60:b8:27:
7f:4e:38:d3:d4:e6:fa:c9:0e:77:4c:2c:af:27:50:
e7:8f:76:1b:17:5d:13:c1:e7:7a:a3:d2:bb:96:5e:
69:ec:99:c4:4f:93:d1:c9:1a:d2:1d:58:4c:c3:ef:
37:ce:4f:5a:08:08:4b:e6:ee:31:bf:8d:ca:c9:c3:
ce:5e:7a:8b:87:33:98:76:4b:ec:54:96:25:58:6a:
df:fe:9e:91:fb:01:04:ba:22:91:d9:00:0a:7d:1f:
a3:ab:4f:09:aa:3a:67:2c:58:a3:3d:78:97:24:dc:
9a:9b:63:65:b8:81:29:62:e2:c5:25:e6:98:9c:5f:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:72:66:B8:69:67:EB:80:40:DF:19:2D:7E:08:03:9E:64:72:C0
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ec:15:df:57:17:f5:c6:38:6c:b5:af:6d:0b:1d:66:72:73:
df:32:31:5c:e8:a4:b5:a6:62:3f:44:1c:c5:e6:c3:71:d0:dd:
8a:00:1a:cf:27:0c:df:49:db:b8:3f:f6:15:15:1f:f1:92:6b:
3f:44:b3:f2:26:09:f4:5a:62:e0:24:e5:ce:89:c1:c9:de:b1:
ef:a8:e5:66:d1:43:9b:66:ea:3a:36:6d:09:f2:b1:9f:52:95:
f2:08:1f:ba:61:a9:0f:bc:91:3a:a0:4a:a4:00:c3:7e:d7:df:
d7:24:40:51:b1:d6:45:02:55:b1:3b:84:63:37:e8:00:b6:37:
46:72:a6:37:a8:1e:c0:73:f2:09:ae:36:1a:25:ae:21:54:d7:
d9:2b:b9:4e:54:8b:3c:12:6c:f3:90:93:60:ae:f3:f1:71:76:
f3:31:47:23:83:61:65:f8:19:4a:92:31:1f:25:9f:d5:96:4d:
fe:91:ed:60:d4:ab:9f:3d:80:57:4c:45:03:27:c9:69:4a:8a:
c0:31:47:fe:8f:db:8e:65:dd:1c:8d:20:4a:93:df:15:90:b8:
64:8e:e1:b9:da:60:d2:bc:2d:25:45:19:11:a1:90:ae:85:9a:
3a:dd:f0:28:a0:f2:33:78:a4:b3:2a:e1:58:c3:53:42:d2:3b:
3f:35:eb:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh9WGrlFMCJZPyk9IdSRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj
ODQ5MjcwHhcNMjYwNzI4MjEwMDU2WhcNMjYwNzI5MjEwMDU2WjAzMTEwLwYDVQQD
Eyg3YTk4NzI2NmI4Njk2N2ViODA0MGRmMTkyZDdlMDgwMzllNjQ3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL0uICFJxJwtVeqTDWAzTNFH4CVU
C7DS8sZlh40Ugrq8FyBIgYxEAk8DfPLs0/VPv5Nyk4Bcuhg+s3VE0JP3WzEeblSG
2+w40yluQhiN9JODU5baIW5kRoX+kS3NhVzMXH8Q5JLkQ2YMYA+P63QWrTRFTDIQ
ZNSs/0JcmhEbnbrdQ95guCd/TjjT1Ob6yQ53TCyvJ1Dnj3YbF10Twed6o9K7ll5p
7JnET5PRyRrSHVhMw+83zk9aCAhL5u4xv43KycPOXnqLhzOYdkvsVJYlWGrf/p6R
+wEEuiKR2QAKfR+jq08JqjpnLFijPXiXJNyam2NluIEpYuLFJeaYnF8hQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqYcma4aWfrgEDfGS1+CAOeZHLAMB8GA1UdIwQY
MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt
ZDM1YjQzMGFmMjZkLzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk
LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOwV31cX
9cY4bLWvbQsdZnJz3zIxXOiktaZiP0QcxebDcdDdigAazycM30nbuD/2FRUf8ZJr
P0Sz8iYJ9Fpi4CTlzonByd6x76jlZtFDm2bqOjZtCfKxn1KV8ggfumGpD7yROqBK
pADDftff1yRAUbHWRQJVsTuEYzfoALY3RnKmN6gewHPyCa42GiWuIVTX2Su5TlSL
PBJs85CTYK7z8XF28zFHI4NhZfgZSpIxHyWf1ZZN/pHtYNSrnz2AV0xFAyfJaUqK
wDFH/o/bjmXdHI0gSpPfFZC4ZI7hudpg0rwtJUUZEaGQroWaOt3wKKDyM3iksyrh
WMNTQtI7PzXrew==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:49 2026 by rpki-client