Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: oxXnQJCkRwNdb9R5teVOhAMuarnrxZkGfajfiqXxwbY=
Subject key identifier: E9:32:2F:7F:3A:8E:4C:36:99:3A:32:CB:D0:E1:F7:68:BB:58:24:51
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019D389C17C4BA25B9AD1A26B1F46F6029E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 0D
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: AxWPo36xdTovykv8etM6xNoZ3PCeZ/XHLkDQ4Zz2DUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:17:c4:ba:25:b9:ad:1a:26:b1:f4:6f:60:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=e9322f7f3a8e4c36993a32cbd0e1f768bb582451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:4d:b1:60:19:e1:e6:43:56:b9:1d:06:00:
75:4e:88:2a:ae:2b:17:a6:8e:37:e7:96:f5:2e:ad:
ba:07:5c:e5:c2:97:10:ee:ae:d5:eb:86:4a:53:42:
ff:28:73:1b:7a:74:49:85:ac:66:30:0c:33:b0:6d:
5b:86:4c:91:db:d5:6d:87:89:31:39:f6:19:63:da:
4a:44:c0:a4:d3:ff:bc:64:b3:7e:36:dd:8a:11:ca:
33:5c:ac:11:83:26:6e:9d:f3:38:1d:63:1f:f7:9f:
da:1c:dd:0e:0c:6d:78:ab:16:89:d2:d4:da:da:77:
e6:21:b8:0d:56:4a:2c:a0:92:79:1a:39:e6:db:ff:
75:2b:d8:21:37:ab:ee:9f:02:9a:65:e6:42:43:9c:
51:cf:d6:76:95:fb:1b:36:15:d2:89:74:35:b0:b0:
fc:24:e2:99:68:9f:ed:23:85:b4:cc:1c:bf:12:0e:
7f:e6:2a:3c:70:5d:00:8d:39:90:d5:60:fc:83:79:
18:7b:25:86:ea:ed:0f:d8:6d:b4:ae:a0:d2:06:2b:
60:11:95:00:67:95:d2:cd:1e:8e:66:a3:01:bc:7a:
83:39:7b:94:a8:d6:75:f1:cf:cb:57:c2:37:62:48:
f2:72:b9:a8:b8:18:ff:c0:c6:6a:2e:dd:90:b4:5f:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:2F:7F:3A:8E:4C:36:99:3A:32:CB:D0:E1:F7:68:BB:58:24:51
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7a:ce:a0:d2:d4:69:53:4b:49:88:22:15:16:6a:3c:7a:92:
6c:d7:e6:2c:3b:6c:07:27:00:a6:b3:ed:f3:9a:e8:6d:83:07:
d3:1e:3b:83:ad:8c:b2:ec:8d:79:6e:3d:1e:61:b3:72:86:5b:
44:fb:32:95:cf:d3:76:a0:67:ad:9c:69:31:d7:60:74:b7:db:
22:78:e6:80:9e:78:5d:97:d4:a6:34:81:4f:51:f7:2d:39:65:
6f:77:41:4b:72:c4:42:8f:cd:05:47:2c:7e:59:aa:f3:5c:c9:
35:d4:8a:fc:3a:78:b9:ab:ec:c6:db:31:4f:9c:2c:63:bb:c0:
f6:9f:00:a8:64:27:18:ff:c1:b1:90:34:86:fc:88:af:72:db:
b9:d6:ec:2a:96:b5:d0:b7:13:d2:f5:7f:ab:af:c9:fd:73:ad:
37:04:1a:79:5e:5b:68:59:3d:aa:f7:2b:d0:33:06:4f:49:4e:
6b:2f:64:98:de:7a:cb:f9:4e:47:73:fe:57:19:fa:99:2f:45:
cc:42:47:ee:b5:0a:62:bb:1d:16:ef:6d:48:eb:1c:c2:f0:05:
80:3d:69:07:71:ba:55:43:08:a4:29:95:a3:27:61:20:59:5c:
f8:18:44:18:86:65:a4:7c:7d:34:60:c9:54:e0:ff:b3:fd:2e:
bc:7f:53:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBfEuiW5rRomsfRvYCniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjFhNDg3OGJkYzViM2VjZGNmY2MyNDVjYjI2MWYyYzc3
NWJlOTYwHhcNMjYwMzI5MDgwMDQ2WhcNMjYwMzMwMDgwMDQ2WjAzMTEwLwYDVQQD
EyhlOTMyMmY3ZjNhOGU0YzM2OTkzYTMyY2JkMGUxZjc2OGJiNTgyNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRNsWAZ4eZDVrkdBgB1TogqrisX
po4355b1Lq26B1zlwpcQ7q7V64ZKU0L/KHMbenRJhaxmMAwzsG1bhkyR29Vth4kx
OfYZY9pKRMCk0/+8ZLN+Nt2KEcozXKwRgyZunfM4HWMf95/aHN0ODG14qxaJ0tTa
2nfmIbgNVkosoJJ5Gjnm2/91K9ghN6vunwKaZeZCQ5xRz9Z2lfsbNhXSiXQ1sLD8
JOKZaJ/tI4W0zBy/Eg5/5io8cF0AjTmQ1WD8g3kYeyWG6u0P2G20rqDSBitgEZUA
Z5XSzR6OZqMBvHqDOXuUqNZ18c/LV8I3YkjycrmouBj/wMZqLt2QtF/PvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkyL386jkw2mToyy9Dh92i7WCRRMB8GA1UdIwQY
MBaAFIVhpIeL3Fs+zc/MJFyyYfLHdb6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMt
NjlhNjQzYjZmYWQ1LzEvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMtNjlhNjQzYjZmYWQ1
LzEvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3rOoNLU
aVNLSYgiFRZqPHqSbNfmLDtsBycAprPt85robYMH0x47g62MsuyNeW49HmGzcoZb
RPsylc/TdqBnrZxpMddgdLfbInjmgJ54XZfUpjSBT1H3LTllb3dBS3LEQo/NBUcs
flmq81zJNdSK/Dp4uavsxtsxT5wsY7vA9p8AqGQnGP/BsZA0hvyIr3LbudbsKpa1
0LcT0vV/q6/J/XOtNwQaeV5baFk9qvcr0DMGT0lOay9kmN56y/lOR3P+Vxn6mS9F
zEJH7rUKYrsdFu9tSOscwvAFgD1pB3G6VUMIpCmVoydhIFlc+BhEGIZlpHx9NGDJ
VOD/s/0uvH9TtA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:15 2026 by rpki-client