Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: 0bnxhkE4qy77I61+rCYp1g3Q5kdp2RIsWf2Uv7/VWfU=
Subject key identifier: DD:E0:15:8C:AB:C6:EB:DF:45:11:C7:6F:C2:79:53:EA:8F:7C:CB:D1
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019E31BC3CDC4A9CC135B41D033A7018FAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 8E
Signing time: Sat 16 May 2026 17:01:20 +0000
Manifest this update: Sat 16 May 2026 17:01:20 +0000
Manifest next update: Sun 17 May 2026 17:01:20 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: iSGE3P+jQsTywjfzx2a/DnZYeTSzV6tJXRu+RrLLc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:3c:dc:4a:9c:c1:35:b4:1d:03:3a:70:18:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: May 16 17:01:20 2026 GMT
Not After : May 17 17:01:20 2026 GMT
Subject: CN=dde0158cabc6ebdf4511c76fc27953ea8f7ccbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:19:3d:28:9b:87:a2:f8:dc:68:e1:ff:6a:
d6:5f:8a:dc:9b:77:84:7f:de:23:07:88:d0:44:4a:
68:c9:4d:ca:52:2b:47:d9:67:3e:07:92:05:90:c6:
7b:1c:b1:97:63:62:c6:02:4f:55:af:e4:95:98:3a:
73:67:6d:c9:c3:cc:d0:ea:b0:00:6d:4e:7e:c1:36:
61:20:31:c7:1d:e7:ec:37:8c:76:1f:75:9e:7f:49:
ca:25:ff:06:6a:2f:83:dc:05:5a:bf:02:b7:52:da:
06:f1:7a:f9:21:e5:50:cf:d9:08:db:e5:d0:48:f6:
43:93:04:51:32:29:01:fe:29:a3:77:32:c0:fd:61:
ec:03:f9:a5:e5:1f:71:81:2f:37:8f:e2:33:17:ca:
45:73:c2:c0:c0:ce:1e:ba:59:9c:ea:8c:66:0e:e7:
86:96:e7:fd:1f:21:67:b3:0f:2a:28:a0:51:c0:51:
df:8b:82:ca:01:98:a3:44:51:e9:a7:00:d3:12:84:
41:0c:e9:b1:50:1f:5a:57:84:93:0f:16:69:1a:66:
87:fe:a9:84:70:77:49:e8:c6:2a:3d:c6:b0:27:91:
7e:9b:27:34:3f:0b:11:db:3a:73:cf:a5:68:2c:55:
dd:7b:0a:6a:e0:35:ec:b2:db:ea:18:48:93:63:35:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:15:8C:AB:C6:EB:DF:45:11:C7:6F:C2:79:53:EA:8F:7C:CB:D1
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:b1:da:45:42:33:9d:54:9e:76:b8:cb:bc:e9:64:59:7c:
53:e2:58:88:90:6d:1f:e2:d2:e6:36:ae:45:eb:74:e3:1b:d7:
6e:c2:2d:3e:69:b0:d7:d5:2d:c7:c6:b8:c3:84:49:88:2a:72:
ff:9a:fd:86:c0:09:e4:8a:ff:1a:9b:28:3e:fd:05:93:fe:76:
99:d0:ea:d9:a9:31:3a:9b:a1:76:11:ca:89:42:22:10:26:0f:
a5:05:e7:7f:40:ad:c3:3a:93:87:01:63:8c:be:d0:eb:4a:94:
1f:02:db:54:9a:40:49:e6:b0:b3:16:73:cc:53:45:b7:ab:79:
32:1c:58:c9:0f:de:b3:c2:24:90:61:a4:6f:e0:fd:b8:d7:69:
84:c9:9b:60:6a:2c:0a:87:55:06:14:70:a4:97:53:de:2b:6a:
d0:91:3d:51:2d:8c:c4:c2:59:e0:ad:53:de:9a:c2:f3:a1:fb:
44:9c:0d:4d:06:c9:0a:82:27:ba:4f:d5:62:09:65:fd:03:8b:
f9:30:16:e5:ab:21:97:8a:c9:4e:aa:4c:97:80:b1:01:83:a8:
7d:4b:4d:02:40:99:07:ce:d5:59:86:f7:29:bb:d1:0d:7c:ad:
af:b6:3f:b5:f7:b6:26:73:1c:fb:f2:06:5e:1e:8a:7b:04:ee:
33:ff:b3:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvDzcSpzBNbQdAzpwGPqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjFhNDg3OGJkYzViM2VjZGNmY2MyNDVjYjI2MWYyYzc3
NWJlOTYwHhcNMjYwNTE2MTcwMTIwWhcNMjYwNTE3MTcwMTIwWjAzMTEwLwYDVQQD
EyhkZGUwMTU4Y2FiYzZlYmRmNDUxMWM3NmZjMjc5NTNlYThmN2NjYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwcZPSibh6L43Gjh/2rWX4rcm3eE
f94jB4jQREpoyU3KUitH2Wc+B5IFkMZ7HLGXY2LGAk9Vr+SVmDpzZ23Jw8zQ6rAA
bU5+wTZhIDHHHefsN4x2H3Wef0nKJf8Gai+D3AVavwK3UtoG8Xr5IeVQz9kI2+XQ
SPZDkwRRMikB/imjdzLA/WHsA/ml5R9xgS83j+IzF8pFc8LAwM4eulmc6oxmDueG
luf9HyFnsw8qKKBRwFHfi4LKAZijRFHppwDTEoRBDOmxUB9aV4STDxZpGmaH/qmE
cHdJ6MYqPcawJ5F+myc0PwsR2zpzz6VoLFXdewpq4DXsstvqGEiTYzVGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3gFYyrxuvfRRHHb8J5U+qPfMvRMB8GA1UdIwQY
MBaAFIVhpIeL3Fs+zc/MJFyyYfLHdb6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMt
NjlhNjQzYjZmYWQ1LzEvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMtNjlhNjQzYjZmYWQ1
LzEvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXix2kVC
M51Unna4y7zpZFl8U+JYiJBtH+LS5jauRet04xvXbsItPmmw19Utx8a4w4RJiCpy
/5r9hsAJ5Ir/GpsoPv0Fk/52mdDq2akxOpuhdhHKiUIiECYPpQXnf0CtwzqThwFj
jL7Q60qUHwLbVJpASeawsxZzzFNFt6t5MhxYyQ/es8IkkGGkb+D9uNdphMmbYGos
CodVBhRwpJdT3itq0JE9US2MxMJZ4K1T3prC86H7RJwNTQbJCoInuk/VYgll/QOL
+TAW5ashl4rJTqpMl4CxAYOofUtNAkCZB87VWYb3KbvRDXytr7Y/tfe2JnMc+/IG
Xh6KewTuM/+z3A==
-----END CERTIFICATE-----
Generated at Sun May 17 01:09:08 2026 by rpki-client