Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: 8VN6ByEMvkPZE91xbjWIJxi/UYwKPt8U1HUmTEt3pM4=
Subject key identifier: 2C:EA:14:58:5B:47:E6:18:D2:6D:E8:4C:13:94:AD:28:5F:E1:88:DD
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 019FA7F4A2445D4DEBBB63A41B18064725EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: 7F
Signing time: Tue 28 Jul 2026 09:00:55 +0000
Manifest this update: Tue 28 Jul 2026 09:00:55 +0000
Manifest next update: Wed 29 Jul 2026 09:00:55 +0000
Files and hashes: 1: HhFHFL1OCw8ofMtLsaP_9nbfrFU.asa (hash: BRYKkkg4LsI+ogvaJ9O62G5uw5km4Yza0HAxhzb4kTU=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: AKBSfHpTqKmYO/tUUZYRRK8wRfaIeXoJ/fgOWoSLtmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:a2:44:5d:4d:eb:bb:63:a4:1b:18:06:47:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Jul 28 09:00:55 2026 GMT
Not After : Jul 29 09:00:55 2026 GMT
Subject: CN=2cea14585b47e618d26de84c1394ad285fe188dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:6a:a2:05:21:c5:46:33:5f:fc:7a:27:a4:
a5:d2:7f:d4:d0:38:7e:5d:9b:09:f7:f9:2d:b2:76:
f4:95:4c:00:ac:51:93:7f:14:b5:5a:ee:02:80:ba:
cd:4c:df:2f:ab:23:0b:96:bf:63:50:34:98:a0:0a:
b6:07:18:b1:06:f5:fc:7b:55:96:1e:f1:fc:86:7c:
54:a3:cd:74:b8:06:9a:73:f8:cc:92:92:13:a4:35:
0f:9f:b8:ce:d2:95:b0:95:8b:6e:ab:06:35:9d:d9:
f3:50:58:7d:66:ea:5e:dc:9e:0c:1a:09:32:c1:4e:
be:b7:bc:65:e0:d5:6e:35:36:fa:e0:53:03:e9:f7:
25:f9:d3:26:56:e1:5d:1e:6f:62:e9:79:eb:84:c5:
c4:a3:4c:fd:d5:11:f9:62:36:dd:2f:62:8b:39:2f:
3b:ec:4c:29:3f:f3:50:20:1d:10:07:e2:3d:57:23:
63:12:42:f0:41:eb:38:d4:36:8f:27:e3:53:b7:4d:
45:e0:5f:3c:7e:7a:03:07:1f:d5:e3:08:6f:ae:df:
5f:ac:80:51:33:8d:8d:73:a7:59:33:84:9a:6b:25:
df:e4:77:49:55:82:78:95:f7:16:16:d7:53:15:2e:
62:eb:eb:21:4f:c5:d9:41:c8:8c:23:fa:6f:e0:d8:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:14:58:5B:47:E6:18:D2:6D:E8:4C:13:94:AD:28:5F:E1:88:DD
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:b2:c4:ac:bd:eb:68:00:60:ae:18:04:8a:64:b1:d4:a1:
09:67:84:45:c1:9f:b8:ee:40:b8:61:9a:10:f4:4a:85:01:f2:
89:38:e7:8c:27:1c:73:10:d9:48:96:d5:88:da:98:f4:79:bb:
e0:4e:53:09:05:c2:11:90:df:d5:ea:ea:94:04:5d:1e:a5:98:
bd:46:91:a9:4c:17:0d:8f:07:30:4c:c7:da:55:d1:c6:ed:d7:
ab:8a:b4:6d:84:78:d3:b4:b5:c6:e5:b4:ef:34:1d:9a:87:f1:
f2:71:51:79:b8:14:c1:c8:21:19:ee:a6:2e:a5:40:a3:e4:fb:
34:ad:bf:37:ce:26:ad:5d:26:15:d5:1b:8b:62:2d:19:74:fa:
73:67:05:86:8f:7d:12:ae:6f:46:d4:21:e6:d5:5e:e1:a0:55:
e1:31:52:88:b7:2d:52:bd:53:b4:f7:fb:1e:bd:47:d4:b3:26:
9a:2d:50:12:3c:87:f9:cd:cb:ad:b0:9f:05:63:97:19:14:91:
13:29:71:49:c7:86:3c:a4:5c:41:98:50:bd:39:11:28:2b:28:
79:23:a0:d2:16:42:52:f9:6b:08:61:cd:4a:5b:5a:b1:85:b8:
45:44:41:ba:5a:0a:70:22:da:4c:2a:35:38:50:80:03:5b:b9:
8a:e9:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:37 2026 by rpki-client