Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: lUr+rvyy58/6Um+9XwtHavmowSIFpRS8vPEylgC0WG8=
Subject key identifier: B9:23:AF:FF:22:C3:B0:07:E6:FB:EC:9E:5D:13:05:9B:C3:E3:67:05
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 01A130D8541497E4A1721A1817BCE5B2A530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 1980
Signing time: Mon 12 Oct 2026 16:00:45 +0000
Manifest this update: Mon 12 Oct 2026 16:00:45 +0000
Manifest next update: Tue 13 Oct 2026 16:00:45 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: gUZULILypaamq9ocqtPccG/g3K+hZCCCB3lXPfibvmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:54:14:97:e4:a1:72:1a:18:17:bc:e5:b2:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Oct 12 16:00:45 2026 GMT
Not After : Oct 13 16:00:45 2026 GMT
Subject: CN=b923afff22c3b007e6fbec9e5d13059bc3e36705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:60:e9:8d:a1:98:d2:32:9f:12:c0:0a:34:
26:63:f0:b9:26:26:dd:b5:7c:66:fd:78:0b:d3:cf:
b6:d4:fb:d9:b4:0f:2e:b8:2e:47:5f:af:6f:7f:da:
c6:19:a3:c3:01:6f:d5:11:23:ad:b6:e3:b5:9d:c1:
85:aa:1f:b3:c3:6d:94:e9:f4:ab:40:3c:8c:de:af:
84:72:a1:79:66:63:39:58:74:6c:52:34:87:7a:e0:
55:81:b8:1b:25:82:18:3b:a7:70:e9:79:0b:f3:89:
51:75:c9:a5:2a:4e:93:76:fc:38:f9:a2:87:0e:6d:
82:4e:f1:cd:73:90:35:17:2d:01:a3:a6:14:c5:64:
98:2d:21:76:5b:ce:6a:46:f1:9d:d3:aa:a5:79:35:
f0:f4:c3:9a:3d:98:4d:18:fc:58:f0:f8:e1:23:fc:
07:1e:33:77:63:a7:7c:87:bc:03:e3:63:f0:7f:be:
9b:ef:36:95:b4:d7:cd:f3:fa:d4:17:71:61:57:5d:
ce:8d:b3:06:e6:b3:1e:41:d2:f3:fa:f7:d5:85:7f:
2d:e4:c3:fb:6a:bb:a1:59:c7:6e:2e:49:e3:cc:34:
92:01:0a:42:2f:72:47:ff:c9:7e:24:2e:f8:10:0e:
27:e5:ee:19:96:42:99:07:7d:61:8d:5a:88:48:e6:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:AF:FF:22:C3:B0:07:E6:FB:EC:9E:5D:13:05:9B:C3:E3:67:05
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:40:66:9a:44:b3:6a:14:36:e7:a4:39:47:9f:14:22:bf:
d6:4a:35:d3:bd:fc:3d:3d:2f:49:3a:1e:79:f9:07:a7:c2:1f:
7b:38:07:27:d5:c8:47:2a:8f:dd:a7:5e:73:05:ca:31:f9:2b:
7e:ee:d7:2c:13:92:c1:15:3b:11:7f:e7:cb:b9:86:5b:88:70:
84:49:55:93:1a:7e:f4:97:6f:44:94:d1:4d:1a:32:b0:a5:f8:
7e:38:6e:49:eb:68:d6:81:96:44:4c:d6:c1:4d:e7:e6:ab:d6:
dc:28:5b:79:60:5e:1c:a3:c2:ce:a2:26:70:28:9c:3a:c1:20:
8d:31:9c:c1:40:f3:6f:a5:bb:b9:50:63:85:7e:1f:8f:2e:85:
03:28:6d:5e:b6:a9:22:04:fe:80:aa:fa:2d:48:71:db:cf:08:
80:ba:cf:73:05:7d:61:3a:7f:49:f2:4d:16:71:f9:ff:1d:02:
e2:78:48:4a:78:ef:63:4b:a5:5e:73:6c:d0:96:13:f8:3c:d9:
78:6a:3c:a5:01:7f:f4:74:0e:1e:16:ef:08:d9:0d:4a:ab:3b:
ea:79:c8:2d:e3:35:fd:7b:fd:18:af:be:36:77:18:6f:e1:ae:
8b:fb:4e:f3:e9:3a:b2:f3:90:34:5e:86:f7:a4:66:ce:9d:4d:
4d:58:4d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEw2FQUl+ShchoYF7zlsqUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2
NWMwNWEwHhcNMjYxMDEyMTYwMDQ1WhcNMjYxMDEzMTYwMDQ1WjAzMTEwLwYDVQQD
EyhiOTIzYWZmZjIyYzNiMDA3ZTZmYmVjOWU1ZDEzMDU5YmMzZTM2NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDtg6Y2hmNIynxLACjQmY/C5Jibd
tXxm/XgL08+21PvZtA8uuC5HX69vf9rGGaPDAW/VESOttuO1ncGFqh+zw22U6fSr
QDyM3q+EcqF5ZmM5WHRsUjSHeuBVgbgbJYIYO6dw6XkL84lRdcmlKk6Tdvw4+aKH
Dm2CTvHNc5A1Fy0Bo6YUxWSYLSF2W85qRvGd06qleTXw9MOaPZhNGPxY8PjhI/wH
HjN3Y6d8h7wD42Pwf76b7zaVtNfN8/rUF3FhV13OjbMG5rMeQdLz+vfVhX8t5MP7
aruhWcduLknjzDSSAQpCL3JH/8l+JC74EA4n5e4ZlkKZB31hjVqISOZtRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkjr/8iw7AH5vvsnl0TBZvD42cFMB8GA1UdIwQY
MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt
N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj
LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4NAZppE
s2oUNuekOUefFCK/1ko10738PT0vSToeefkHp8IfezgHJ9XIRyqP3adecwXKMfkr
fu7XLBOSwRU7EX/ny7mGW4hwhElVkxp+9JdvRJTRTRoysKX4fjhuSeto1oGWREzW
wU3n5qvW3ChbeWBeHKPCzqImcCicOsEgjTGcwUDzb6W7uVBjhX4fjy6FAyhtXrap
IgT+gKr6LUhx288IgLrPcwV9YTp/SfJNFnH5/x0C4nhISnjvY0ulXnNs0JYT+DzZ
eGo8pQF/9HQOHhbvCNkNSqs76nnILeM1/Xv9GK++NncYb+Gui/tO8+k6svOQNF6G
96Rmzp1NTVhNrw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:57:15 2026 by rpki-client