Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: CHeclS2MYFYNXqc0/CmA+YsK4eudwiVsnteh05OZaeM=
Subject key identifier: 94:E8:A3:F0:F2:82:D1:1A:A6:48:75:04:F2:30:3B:2F:67:F1:AF:EC
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 01A0D0119F1ACBF7BE7FEF600436A1690A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 21:00:10 +0000
Manifest this update: Wed 23 Sep 2026 21:00:10 +0000
Manifest next update: Thu 24 Sep 2026 21:00:10 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: +0BY+e7glcFybzj542NSVZrUkgah6X8+P9Vq0sLB9vE=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:9f:1a:cb:f7:be:7f:ef:60:04:36:a1:69:0a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Sep 23 21:00:10 2026 GMT
Not After : Sep 24 21:00:10 2026 GMT
Subject: CN=94e8a3f0f282d11aa6487504f2303b2f67f1afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:6e:5f:7c:4b:96:da:2f:23:d9:ea:8f:2d:
61:6b:d7:e0:16:73:ee:e0:8f:29:c2:2a:03:73:97:
84:f1:f6:4e:db:85:0a:d7:a5:0f:99:0d:43:bc:12:
d0:87:98:0f:00:6c:6c:65:cf:36:1e:c7:e6:17:8d:
49:7d:28:2e:2d:04:b8:c0:48:a6:e0:7c:b9:c3:e7:
f6:c1:89:59:88:f9:33:2e:0b:e4:78:60:39:fe:8d:
34:1d:2a:55:94:cd:7b:99:15:5a:d2:0e:34:15:59:
25:b9:9f:d3:69:94:96:f5:8f:29:ed:4c:27:11:d3:
a3:21:9f:04:a5:99:18:8a:3a:6b:94:37:72:b5:f0:
1a:96:75:61:bc:4c:b3:d9:e0:d5:6e:fb:66:11:b9:
fe:dd:62:9f:66:49:b3:b7:50:e4:6e:b2:86:1a:b5:
f5:6c:5b:cb:26:da:c3:b6:01:03:c0:fc:c7:76:fb:
24:1b:b0:2a:fe:67:1d:35:91:a3:27:b4:f0:a5:98:
10:36:7d:d9:ee:46:02:97:52:a4:de:25:76:13:2c:
0c:ea:77:04:48:78:19:52:77:a6:f3:60:8c:9d:95:
ee:d7:af:9f:ff:b9:69:a3:dd:ce:b4:85:ea:62:fd:
85:16:73:a5:89:14:25:7d:62:14:5d:ce:65:d3:d2:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:A3:F0:F2:82:D1:1A:A6:48:75:04:F2:30:3B:2F:67:F1:AF:EC
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:07:11:a9:4e:fc:9c:b0:50:75:97:55:bc:62:12:a3:ff:
8c:81:02:d8:ce:3f:24:c8:f3:cb:5e:d6:06:ad:20:9d:23:eb:
05:76:05:f5:9b:33:6b:55:3f:62:60:c0:70:41:7c:50:7f:73:
ef:c4:6c:42:d0:d7:4d:9d:18:8f:e3:38:9a:3c:73:4b:c8:95:
ae:01:25:5b:13:df:7e:7b:01:bb:1e:f6:87:00:90:01:65:50:
f0:e4:52:9e:2f:2d:78:6f:b9:74:a4:e7:2e:a5:d4:fd:46:84:
c7:24:e8:85:bf:58:21:bf:6f:18:b8:d0:a1:c6:c8:07:d6:e6:
a4:6a:49:7f:d9:a4:03:0c:10:4b:d0:ab:89:9c:77:b4:0d:33:
ed:23:0c:a5:51:54:ce:38:75:75:c9:07:84:00:77:5d:03:4c:
e2:21:fc:ba:91:bf:8c:66:2e:63:da:21:7f:7e:82:d1:e8:23:
f6:e5:13:0d:b6:47:e4:57:6e:4e:03:be:8c:17:04:6d:f7:41:
16:72:c0:b0:d6:1b:2b:08:25:14:39:13:4b:8d:c0:0b:5c:8c:
0c:05:7a:fa:43:77:a2:5c:58:71:cd:06:0b:94:d4:73:60:2a:
32:63:43:df:b5:fd:29:42:b8:38:bb:9c:0f:ff:06:bd:37:e1:
cf:e7:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:19:09 2026 by rpki-client