Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: kxEsk/XN0Ev52Ca72v7CxEJAQqQzbMsb1bP+0aQfuM8=
Subject key identifier: 48:A1:28:39:D8:1A:1F:A1:E1:B4:39:11:A6:8F:37:2B:5C:65:66:2E
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 019EBEEC703DF67FDECB31B479F210631323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: 06
Signing time: Sat 13 Jun 2026 03:00:26 +0000
Manifest this update: Sat 13 Jun 2026 03:00:26 +0000
Manifest next update: Sun 14 Jun 2026 03:00:26 +0000
Files and hashes: 1: NcFL0BjRNyW3WL18C8pcwUnZW_U.asa (hash: 04PkKKLtBtREOO6AAXNlEnZZIRrfOjn2kvSazl4zgBQ=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: Ai1uJ34WdPk1IYhlW5VkxRvRyej2Liqn+IWjG0/oPdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:70:3d:f6:7f:de:cb:31:b4:79:f2:10:63:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Jun 13 03:00:26 2026 GMT
Not After : Jun 14 03:00:26 2026 GMT
Subject: CN=48a12839d81a1fa1e1b43911a68f372b5c65662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:36:e2:0e:b8:4e:3d:c9:c8:1f:a1:80:75:
dd:d8:c7:df:d4:4c:9f:e6:18:ea:4b:aa:92:df:3c:
7d:fe:fe:c6:64:10:e0:1d:5e:4c:23:65:c6:79:d4:
60:44:b5:5a:55:27:7f:60:e8:b5:98:36:74:65:89:
c3:ee:bd:c7:3e:c7:a7:ba:07:0b:e6:bc:b6:f8:79:
26:da:0c:5a:1e:fb:c0:fa:a3:a5:08:22:96:0d:49:
c6:ca:09:87:b3:3f:3f:9b:c9:7c:44:f1:79:6e:2c:
c2:4d:5d:65:03:ef:4c:fd:92:ce:0c:08:d2:28:9f:
72:40:4e:9f:30:cc:dc:19:c8:f1:f8:5f:1b:dc:0b:
1c:0f:4b:db:c8:d7:e4:07:45:15:cf:56:9b:fb:9c:
72:1b:a4:a9:04:9f:6f:c2:74:f9:fb:b4:f9:33:11:
03:c9:61:3b:34:3c:31:ce:8e:cb:51:c4:a3:15:fa:
bb:e8:21:d7:d5:82:76:60:d4:8f:2e:55:7f:fb:45:
a4:cc:fb:ad:3b:29:91:a2:ca:50:82:58:d4:c1:61:
a2:c2:aa:74:a5:25:ac:7f:0f:15:a5:6a:f9:64:4d:
98:f3:7b:1b:53:16:fe:b3:8e:24:d6:f4:fc:f1:70:
7a:c1:8a:af:74:d9:04:2b:9a:07:66:ea:88:fc:63:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:28:39:D8:1A:1F:A1:E1:B4:39:11:A6:8F:37:2B:5C:65:66:2E
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2d:56:bf:f8:ef:28:63:f3:42:eb:40:bf:16:bd:6e:db:6a:
f5:a3:03:cd:67:ff:8d:cc:8b:91:31:4c:79:7c:7d:4c:ad:d1:
96:e4:9a:0b:5a:1b:5e:9b:c4:72:62:1e:68:30:e0:8f:4d:33:
bb:24:ea:22:34:82:be:47:6c:62:a5:ae:46:5d:f3:9b:ed:0c:
be:ee:c3:66:e2:7a:e8:7a:44:1a:18:4b:ff:4c:f8:24:01:22:
5d:f4:ef:29:f5:35:7b:fc:4c:56:8f:87:3c:b8:24:26:13:f6:
a0:f8:63:94:45:d1:e1:cd:fc:c5:01:64:5b:51:70:4a:c0:3a:
a3:ec:54:d2:a8:4d:97:23:09:22:c4:96:36:e3:1c:c6:fc:e1:
ce:0d:78:d2:05:69:f4:ad:a0:c6:ba:02:ab:e2:a5:90:a3:a9:
3e:8c:d0:ae:10:44:fd:ec:5f:34:89:ce:9f:65:e8:09:c2:21:
a2:10:d3:73:6a:19:4a:a2:ad:7d:3d:86:2e:c5:23:71:3d:b7:
5b:91:12:6d:f1:ce:3b:19:9b:19:10:2d:d2:67:0e:8d:5c:cb:
a8:4c:4c:e9:54:38:ff:20:df:bb:54:a3:a6:11:08:02:ea:e3:
27:1a:36:a2:be:3b:ce:d4:38:0c:d6:12:45:0c:49:2e:12:25:
99:33:51:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7HA99n/eyzG0efIQYxMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjFkZTZjYTY5ZGMyMTUwMDBjYjlhNjdjNjU1YzY0ODRm
YjU3MGEwHhcNMjYwNjEzMDMwMDI2WhcNMjYwNjE0MDMwMDI2WjAzMTEwLwYDVQQD
Eyg0OGExMjgzOWQ4MWExZmExZTFiNDM5MTFhNjhmMzcyYjVjNjU2NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5M24g64Tj3JyB+hgHXd2Mff1Eyf
5hjqS6qS3zx9/v7GZBDgHV5MI2XGedRgRLVaVSd/YOi1mDZ0ZYnD7r3HPsenugcL
5ry2+Hkm2gxaHvvA+qOlCCKWDUnGygmHsz8/m8l8RPF5bizCTV1lA+9M/ZLODAjS
KJ9yQE6fMMzcGcjx+F8b3AscD0vbyNfkB0UVz1ab+5xyG6SpBJ9vwnT5+7T5MxED
yWE7NDwxzo7LUcSjFfq76CHX1YJ2YNSPLlV/+0WkzPutOymRospQgljUwWGiwqp0
pSWsfw8VpWr5ZE2Y83sbUxb+s44k1vT88XB6wYqvdNkEK5oHZuqI/GOXkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEihKDnYGh+h4bQ5EaaPNytcZWYuMB8GA1UdIwQY
MBaAFEVh3mymncIVAAy5pnxlXGSE+1cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZWNlZjUtNTQxMS00YzlmLTliMGYt
N2NhYTA0YzM3NDRmLzEvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZWNlZjUtNTQxMS00YzlmLTliMGYtN2NhYTA0YzM3NDRm
LzEvUldIZWJLYWR3aFVBRExtbWZHVmNaSVQ3VndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy1Wv/jv
KGPzQutAvxa9bttq9aMDzWf/jcyLkTFMeXx9TK3RluSaC1obXpvEcmIeaDDgj00z
uyTqIjSCvkdsYqWuRl3zm+0Mvu7DZuJ66HpEGhhL/0z4JAEiXfTvKfU1e/xMVo+H
PLgkJhP2oPhjlEXR4c38xQFkW1FwSsA6o+xU0qhNlyMJIsSWNuMcxvzhzg140gVp
9K2gxroCq+KlkKOpPozQrhBE/exfNInOn2XoCcIhohDTc2oZSqKtfT2GLsUjcT23
W5ESbfHOOxmbGRAt0mcOjVzLqExM6VQ4/yDfu1SjphEIAurjJxo2or47ztQ4DNYS
RQxJLhIlmTNR5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:33 2026 by rpki-client