Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: Stf7W806ms3ZwVTEQKlkl40/qPaclalZ6yWp7YT5hV8=
Subject key identifier: CF:19:EE:A8:18:B5:00:45:3C:35:FE:4D:49:C9:AA:B0:FE:C8:E9:78
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 019FAABF1BAD40CF9E72C5846AB698356B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 18B6
Signing time: Tue 28 Jul 2026 22:01:18 +0000
Manifest this update: Tue 28 Jul 2026 22:01:18 +0000
Manifest next update: Wed 29 Jul 2026 22:01:18 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: sNGsIx1bZs00JXXziEKHf40O9pe2/yNsnmPSKJVUL6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:1b:ad:40:cf:9e:72:c5:84:6a:b6:98:35:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Jul 28 22:01:18 2026 GMT
Not After : Jul 29 22:01:18 2026 GMT
Subject: CN=cf19eea818b500453c35fe4d49c9aab0fec8e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:e3:c0:80:fc:04:2b:42:ab:6e:37:80:73:
73:1c:7a:66:a9:d0:ca:b3:15:dc:36:a4:fe:8b:bb:
44:a6:84:3c:b6:2c:6b:a5:cf:5e:71:9e:56:3a:a6:
6a:00:70:b9:da:bc:eb:55:fb:18:dd:45:90:92:18:
9d:ff:25:45:f5:b7:e8:f0:86:53:cd:96:ad:37:e3:
4b:51:f9:59:dd:53:20:f6:bb:a7:c5:74:da:9b:e9:
e1:77:c3:76:bb:59:5b:98:ba:d2:e3:b4:b4:9f:a9:
91:03:26:31:ba:1d:ec:ab:ac:11:c6:15:4e:bd:34:
3d:33:63:90:0c:25:67:58:f1:c2:4e:08:c8:9a:3e:
f7:c3:ec:76:e5:5d:91:ff:c4:c4:2a:17:c0:5e:1e:
17:b1:ae:36:32:3d:cd:62:c1:f0:5a:67:7f:ca:65:
98:ba:e3:88:09:30:aa:53:97:80:a6:2f:b7:33:95:
3b:53:99:c8:29:ed:dd:88:5e:5b:a2:38:91:ae:d5:
84:b9:3f:f9:74:d3:19:23:96:a5:e5:b6:4e:20:ab:
6b:9f:7a:4c:85:87:91:b6:80:1d:ee:20:73:7a:07:
e8:af:2a:7c:65:b5:3c:15:08:97:cc:7e:7d:2b:50:
8d:96:04:04:42:67:1e:e9:3e:3f:66:23:c0:55:b7:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:EE:A8:18:B5:00:45:3C:35:FE:4D:49:C9:AA:B0:FE:C8:E9:78
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d9:42:cc:d2:54:88:db:0a:9f:cf:e2:10:9a:43:86:9b:e7:
13:d9:f9:a6:af:9f:09:22:b7:c0:8f:1d:be:c0:f9:a3:a0:9c:
1e:03:cc:a9:a0:63:d1:4e:c7:d5:db:97:a9:8d:17:bd:df:d8:
c5:7a:cd:8d:93:0d:fc:fd:4d:be:0f:be:21:7f:c9:04:80:9b:
c6:82:6a:84:44:a0:5d:f9:48:8c:36:c0:b8:47:7b:37:eb:58:
fd:39:54:52:5d:00:4e:23:62:50:b4:54:dd:f4:3a:03:6f:77:
94:6d:9b:7e:55:27:8a:0f:4c:5c:c5:1f:db:e3:9c:6c:3e:a1:
2c:1a:cd:5b:8a:ba:4a:24:e9:d6:29:15:07:6b:22:f4:5b:c3:
89:54:87:74:5b:aa:72:ec:00:5a:e0:c7:b3:2d:b0:07:c7:ac:
e0:af:0a:23:cb:59:4a:0d:8f:10:43:74:99:e4:dd:fd:4d:6c:
e2:55:f6:c6:85:d5:d6:55:99:79:3f:30:ab:90:cf:2c:da:dd:
28:ac:a7:b5:0e:52:0b:47:b8:e9:be:8d:bd:02:c7:27:61:28:
b9:83:0c:e9:21:d3:4e:06:a8:cd:b8:3b:dc:ee:c3:ac:0b:22:
5c:34:a3:39:e7:cb:63:f5:8f:46:70:d5:35:66:28:54:e4:79:
fd:08:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:39 2026 by rpki-client