Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
File: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft (raw, json)
Hash identifier: s+CE9e4zdkiTrGUB+UYuxQYcrgkneDzJuDxALF/hae4=
Subject key identifier: F8:6B:EA:9F:4E:D0:CE:26:3A:2B:DF:BC:E7:D3:5C:D7:FC:1A:C7:C8
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019F197A177C99DA8541E11684D30CE088C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
Manifest number: 0106
Signing time: Tue 30 Jun 2026 17:00:59 +0000
Manifest this update: Tue 30 Jun 2026 17:00:59 +0000
Manifest next update: Wed 01 Jul 2026 17:00:59 +0000
Files and hashes: 1: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (hash: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=)
2: hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl (hash: /Me5C8f9JRDXOENuktuZQaNf0KFhz8GKEjpc66dpBTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:17:7c:99:da:85:41:e1:16:84:d3:0c:e0:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Jun 30 17:00:59 2026 GMT
Not After : Jul 1 17:00:59 2026 GMT
Subject: CN=f86bea9f4ed0ce263a2bdfbce7d35cd7fc1ac7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:3c:55:6c:37:bb:28:5e:60:3c:62:2d:c3:
95:df:52:8d:c8:df:e1:51:58:50:b6:4e:5f:71:d6:
49:87:23:3b:ae:29:0d:03:e7:02:6e:03:22:81:78:
e4:b2:7e:ec:93:fb:74:1d:d9:78:4b:41:84:cb:18:
b4:39:98:98:29:7b:a8:ea:a6:bf:5c:a3:2b:c3:1a:
32:ca:9a:85:9d:4a:88:80:ac:bd:14:d7:b8:46:11:
ad:ab:0a:1e:f8:19:d4:42:76:52:59:e0:7a:4e:ed:
03:11:0a:fe:ed:c9:9d:db:1f:4a:af:ff:4e:af:43:
67:46:0c:c8:58:fa:7b:56:7f:03:26:32:50:a7:cf:
0b:e4:86:5b:6d:e0:c4:04:87:4d:6a:7b:50:7d:4b:
e2:f6:97:d2:51:48:0e:48:eb:62:df:bc:51:cc:b5:
5a:cd:44:e5:b9:db:bf:ee:28:e2:ff:1d:80:09:cc:
8e:60:58:f6:72:98:f0:6b:d5:da:0b:86:cc:ad:9f:
98:73:60:89:03:eb:4e:0b:a9:c8:07:ba:e2:60:25:
5f:a4:43:5d:15:ec:b8:0c:e1:ec:e5:b1:dc:71:2c:
99:e5:15:32:7f:fa:c1:ec:8e:db:ce:a5:77:1f:b3:
40:2c:3a:50:40:88:3d:a4:23:1f:65:53:9d:94:b6:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:EA:9F:4E:D0:CE:26:3A:2B:DF:BC:E7:D3:5C:D7:FC:1A:C7:C8
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d8:51:1e:d5:c1:46:11:b3:fc:69:3e:45:25:9f:3b:f5:84:
44:30:bf:fd:47:46:aa:24:d5:ee:02:f0:05:83:f9:46:52:18:
81:03:cf:e5:66:dd:e3:4f:a8:e1:9e:a8:f6:98:60:81:4e:3d:
4c:d1:a6:59:3b:7a:c8:8c:33:f7:04:ef:7d:81:ab:53:fa:63:
74:9c:a0:d6:da:10:d4:eb:e4:f7:c6:48:61:5f:12:b5:b7:4c:
2b:81:16:ec:50:c8:23:70:ab:28:75:ca:da:07:6f:a8:6d:93:
cb:68:0b:b3:a5:c2:e2:22:09:3a:40:0d:15:5f:92:b7:13:c1:
9a:5c:4e:ff:17:81:95:92:53:88:eb:96:79:dd:b5:08:a4:ef:
8b:9b:01:3d:72:a9:59:5c:60:dd:52:83:23:3f:29:e0:0a:27:
5b:0c:4b:20:9a:c4:c4:1e:86:dc:99:0b:bf:d8:aa:4e:3d:5d:
9c:55:cc:44:5e:05:19:2a:a2:c8:c8:e9:12:91:76:ae:cf:95:
cd:7f:60:8d:95:1e:2d:1f:45:51:81:e3:9c:3e:9e:da:71:8d:
c2:b2:00:72:aa:6b:a4:2e:7b:ef:34:55:ea:de:ca:cc:cf:ee:
e9:4b:48:d2:55:06:c5:d9:d2:3f:7a:9c:df:b5:7f:70:7c:71:
16:23:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:40:58 2026 by rpki-client