Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: ECaKr2lZEP7pMLYJmSEul56ZV0k3daFy5ruX4TJa3TY=
Subject key identifier: B1:7B:06:82:EA:FB:DF:34:26:F2:2A:4F:1C:52:4B:66:CA:FA:13:38
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 01A0C9A1E5F02BF0233FC166B56B6DC3B3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: 0115
Signing time: Tue 22 Sep 2026 15:00:25 +0000
Manifest this update: Tue 22 Sep 2026 15:00:25 +0000
Manifest next update: Wed 23 Sep 2026 15:00:25 +0000
Files and hashes: 1: HhFHFL1OCw8ofMtLsaP_9nbfrFU.asa (hash: BRYKkkg4LsI+ogvaJ9O62G5uw5km4Yza0HAxhzb4kTU=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: zoerPp2H0wpqnl0sObxElnfkFkOwV5cDQkHt9Yd9f24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:e5:f0:2b:f0:23:3f:c1:66:b5:6b:6d:c3:b3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Sep 22 15:00:25 2026 GMT
Not After : Sep 23 15:00:25 2026 GMT
Subject: CN=b17b0682eafbdf3426f22a4f1c524b66cafa1338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:cb:0a:0c:df:b1:96:65:f6:61:c1:67:a8:
30:cd:99:ef:1f:b8:10:3b:ca:b8:28:84:a4:58:cf:
52:0b:bf:c8:e5:af:cc:d0:6e:b3:58:09:67:bc:b4:
ea:37:98:f8:47:05:a4:6a:c7:ef:c9:82:15:a2:98:
98:39:19:a1:bb:e8:0c:80:d5:a3:16:49:f2:c4:ec:
d1:53:0d:42:3f:d4:d3:d9:14:6b:f2:42:aa:55:c2:
59:f9:ff:af:00:2e:3c:18:17:16:71:cb:f2:91:34:
01:7c:4e:f7:16:48:a1:a8:b3:6b:58:bc:7b:15:8b:
33:0e:08:d6:ca:28:e6:91:f7:22:2c:8f:86:51:df:
e3:80:83:19:0a:b1:d5:dc:96:51:a8:2b:18:4a:6a:
25:c3:43:89:a2:fb:d9:c0:32:1a:2e:cb:3e:c1:d2:
9a:10:0c:48:a5:28:67:1e:e4:49:9d:d5:04:23:3c:
6f:9c:d9:63:7b:f1:70:01:3d:ed:36:49:97:9c:8c:
65:18:3b:1f:92:70:33:36:fa:b8:1b:45:04:19:31:
34:dd:0a:3b:9d:dc:a1:5c:1f:13:5b:de:45:0d:b2:
4b:e7:e2:c2:e6:4d:45:ab:91:a2:ef:fe:4a:bd:66:
9e:99:43:4b:00:b4:1a:d2:6c:44:04:0c:8e:7d:fd:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:06:82:EA:FB:DF:34:26:F2:2A:4F:1C:52:4B:66:CA:FA:13:38
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:c4:de:aa:09:af:1e:ba:54:7e:f9:ef:bf:51:60:b4:48:
28:40:13:f1:a6:ba:35:84:9e:48:18:cb:7a:52:f6:82:b2:95:
0a:71:08:4f:0b:9d:6d:8e:6a:cf:81:83:c5:97:a9:3c:82:c6:
89:8f:b9:8d:f9:54:06:bb:6f:5a:7d:ef:34:90:55:31:45:b9:
06:82:b4:1a:24:89:67:59:4d:5a:3a:ae:52:33:1c:11:7e:1e:
27:63:c7:57:2b:49:2e:e4:fb:8c:28:cd:22:09:8b:6f:27:38:
f2:52:37:bc:7a:71:86:e4:43:3d:fb:f3:76:5c:43:fe:ea:9a:
d8:95:8b:ce:60:56:a2:ea:4b:45:03:ba:6b:f8:02:c5:80:4f:
0a:88:93:11:0e:a0:e1:2d:7a:a1:af:e3:8c:2f:1a:f5:96:a8:
9b:20:d9:69:65:5c:f6:eb:8e:dc:13:b0:a2:d9:d9:85:e8:cc:
49:84:b9:15:15:65:99:74:1f:68:8f:5f:14:6e:04:53:56:d8:
bf:6e:7e:c4:c6:ed:4b:28:9d:f6:dd:64:94:6a:a6:79:9a:8b:
49:1f:d0:2e:28:3e:8c:82:be:c4:da:6f:9f:c3:1a:a8:17:6b:
5e:fe:26:38:8f:92:cc:fd:3e:dc:06:9a:e0:0b:c8:de:55:3a:
15:80:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:58 2026 by rpki-client