Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: 5e14RIr9nQcXjbfu8priTKx9UAI+QLBtYeX6CJ+XS60=
Subject key identifier: F5:4E:DE:E6:F1:04:0F:88:20:58:5B:99:24:B1:BB:7B:F1:55:F6:F3
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019FA899DD21FE0C8D9A2B5CB2B48DFC6710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1963
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: fwYugZKpyqAGNzNXR+hvccu2FJboDZ7Q5yHTQ9LUj5k=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:dd:21:fe:0c:8d:9a:2b:5c:b2:b4:8d:fc:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=f54edee6f1040f8820585b9924b1bb7bf155f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:8d:f2:65:80:64:69:b4:6e:8f:79:56:00:
ec:10:1d:88:a8:0f:84:79:93:56:b5:4c:93:a1:e9:
c0:7c:89:7d:52:24:50:31:0b:b8:25:10:fb:32:c5:
64:f3:95:f1:26:e4:56:16:98:cc:4d:c3:1d:1e:df:
63:a1:cf:74:ce:02:5e:8a:05:b3:99:83:de:38:17:
02:6b:05:50:0d:e6:2a:40:1d:7b:db:7b:3a:b7:ac:
6a:a2:85:db:4d:5c:57:eb:53:2c:b5:6e:81:42:4c:
01:f0:b0:df:fd:ee:f0:fe:f3:9e:d2:ea:cd:79:41:
99:a6:d8:54:73:9d:64:76:a5:dd:9b:99:fe:02:94:
42:87:28:a0:0b:2b:34:ea:21:33:84:8b:e9:1f:c1:
1b:91:fc:a2:0f:a9:dd:91:4c:39:5e:ad:c8:85:93:
45:b9:55:ef:7a:ee:34:9e:b8:47:b0:72:64:6d:d9:
90:90:1b:14:8f:e6:30:3f:54:2d:8e:b1:15:1a:4f:
73:d0:3f:d2:5c:84:ac:81:d2:b7:de:71:11:ec:40:
f1:63:81:9d:61:17:65:f1:89:ec:2e:93:34:17:74:
16:d5:ef:b5:77:71:e7:37:5f:c8:76:75:e5:f2:4b:
7c:93:76:52:dd:3f:ce:b4:ee:f9:e7:2a:b6:85:fa:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:DE:E6:F1:04:0F:88:20:58:5B:99:24:B1:BB:7B:F1:55:F6:F3
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:ac:68:87:77:72:83:ed:a9:98:3e:af:2f:02:90:6e:36:
0c:6d:cb:43:b3:1a:b7:64:60:de:3f:2d:37:c5:8b:2f:e9:51:
08:37:33:b8:2c:5e:48:d6:0d:a2:d3:83:3f:ab:c3:2e:bd:4d:
e6:95:bc:b5:e7:2c:5b:45:a9:f3:f1:fc:a8:f8:70:e1:17:25:
8b:5a:24:77:f9:18:f9:d8:61:da:e9:8e:84:92:e1:ee:b6:9c:
79:19:fe:d1:c4:fc:32:1a:9d:ed:bd:33:46:05:9b:96:02:3a:
52:e5:b4:2f:eb:b7:99:bb:2b:04:b3:8f:a9:49:8f:72:69:7f:
bd:73:32:bc:d3:3a:ee:1b:59:49:fb:aa:8f:3b:b1:32:99:d3:
9e:67:43:5d:3b:d7:53:4e:5a:fa:4b:97:cc:33:9b:4f:d1:30:
e0:1f:ae:0b:f4:1c:5e:62:0a:69:b1:f4:56:10:76:6d:9c:56:
89:36:ab:5f:2a:fa:8d:ac:91:4d:89:7d:94:dc:21:86:04:38:
51:a6:7c:75:f9:bf:fe:83:bc:8a:54:ed:a6:73:a7:70:72:ac:
66:05:59:b6:15:91:aa:0f:43:95:73:ba:12:81:38:d3:58:a7:
8f:a0:8f:c9:43:1f:f5:83:1a:15:b7:bc:d7:f6:1d:b9:cc:80:
87:a2:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:17 2026 by rpki-client