Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: +3JCfvH7HVC0n3cd/QrBmKaZfF5GVdq/NW5vvwT9ex4=
Subject key identifier: FC:54:9E:8C:AB:D0:27:2C:BD:6C:94:E5:1B:9C:57:0F:5C:9A:0D:A2
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 01A172134584516ED8EEA80E8E90DBD3E131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 023D
Signing time: Sun 25 Oct 2026 08:00:27 +0000
Manifest this update: Sun 25 Oct 2026 08:00:27 +0000
Manifest next update: Mon 26 Oct 2026 08:00:27 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: DYmVvs7yX/u3O6Q+GtNxP8K24ubxrnK6CbHzeg+cggE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:45:84:51:6e:d8:ee:a8:0e:8e:90:db:d3:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Oct 25 08:00:27 2026 GMT
Not After : Oct 26 08:00:27 2026 GMT
Subject: CN=fc549e8cabd0272cbd6c94e51b9c570f5c9a0da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:bd:06:f3:0f:e2:ac:e5:64:86:18:79:f4:
bc:a2:21:a4:6c:16:0b:01:60:3f:41:d8:1c:a6:32:
8a:d4:16:f1:38:62:db:54:05:da:40:e4:1f:fe:7d:
33:5f:5e:0b:44:90:20:7c:6a:3b:98:27:c3:e0:73:
e0:5b:8a:38:83:cd:71:21:1d:bf:c3:e2:12:17:b5:
fe:29:8c:ff:74:5b:b6:63:bd:d1:af:10:35:c1:da:
dd:7f:d8:78:05:32:f0:e1:46:29:7b:c8:8c:ca:a6:
02:ac:c7:87:53:a2:0f:f2:f1:7e:e5:e1:9c:64:b5:
a6:e0:a7:53:77:ab:7c:b4:1e:d3:7a:e6:d0:ba:8b:
1a:4b:3b:c4:38:93:4e:a2:ac:03:a0:df:cd:b2:a8:
00:56:a0:38:b5:fd:2d:90:67:87:f1:70:c3:1e:30:
b9:a5:f2:ea:2c:fb:fc:69:cf:27:8d:97:61:78:d4:
1b:31:14:46:02:55:95:51:e7:90:ed:42:df:b4:d7:
5e:2d:23:7f:b9:eb:19:1d:4c:c8:99:70:23:4e:6c:
8a:f0:11:85:0a:20:c9:0b:7a:eb:3e:24:0a:c2:65:
81:94:e3:b4:3b:ca:58:1a:c6:bb:d5:83:24:8f:94:
90:e6:34:71:44:59:6e:82:e0:6d:3a:b4:94:6d:c0:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:9E:8C:AB:D0:27:2C:BD:6C:94:E5:1B:9C:57:0F:5C:9A:0D:A2
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:52:57:e7:38:58:02:03:03:79:c9:f1:76:81:8f:75:d7:af:
2d:8a:4c:d1:a6:5c:35:9e:07:f1:db:e6:69:74:6c:0a:0a:8c:
5f:11:00:36:e4:a7:36:4b:6e:77:c3:3b:f2:07:31:9a:d2:78:
19:1f:e3:96:00:f5:d9:4f:d3:a8:a5:e6:25:47:0d:7d:aa:46:
82:1f:45:ad:bd:37:e4:33:87:1c:53:77:b5:67:04:f8:e0:e6:
08:22:16:c8:b0:7c:e2:c4:8c:4d:27:15:35:44:f6:05:c1:f1:
c0:31:c7:26:49:fd:6e:f9:1a:12:c2:b9:d0:c5:09:e4:8c:00:
72:18:5a:aa:b9:c7:2e:8f:fb:68:55:6c:4c:89:90:92:ee:92:
57:3d:07:ac:d2:b2:fb:57:6e:9e:4c:98:77:fc:71:82:d7:eb:
b0:51:23:71:8b:ba:f5:f7:fe:17:71:61:33:04:01:07:01:a3:
21:cc:df:d6:28:6a:b0:c8:a3:68:eb:2f:29:3b:6f:06:7d:5b:
12:43:cb:82:e8:46:f6:7b:17:49:55:dc:2e:17:de:30:95:be:
57:b2:4f:57:59:a9:2e:c2:3e:31:86:c0:37:76:78:2a:df:05:
69:d1:24:52:54:2b:ac:f7:86:d1:02:11:65:42:51:32:e0:b7:
bd:80:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:42:50 2026 by rpki-client