Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: E1uLSo48j7fxZzVkqaXLUtsQhRIWerGxREadjx0fuPc=
Subject key identifier: 1E:9E:07:27:B7:2E:CF:F0:8C:32:BF:24:35:A4:45:4A:D0:6C:13:06
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 019D386630D73189DB87D2949D7D382F7F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 1620
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: 4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa (hash: JkbE2ukkvOX9Yb+5O016nUW2TqsNKcHpk0PraLymPbM=)
2: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: egR8AqDrOgv+71DkmBoXRkvnujE7eqg7RpJD8RooTyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:30:d7:31:89:db:87:d2:94:9d:7d:38:2f:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=1e9e0727b72ecff08c32bf2435a4454ad06c1306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:80:57:75:2f:08:d7:21:94:7b:8b:25:e9:
f0:a6:b9:21:29:6a:72:cb:b3:d5:87:e9:db:99:6b:
6a:8c:a3:ce:fe:30:53:1d:0f:6f:6d:83:e5:e3:16:
80:2e:86:83:3e:6b:12:f1:14:f2:c2:2b:8e:dc:9e:
82:a8:dc:a1:34:55:2e:1f:92:b7:c0:6d:6c:5e:f6:
4a:7e:57:37:28:b8:99:b7:e7:06:ac:a5:60:04:48:
ce:dc:a3:63:03:c4:ee:34:66:44:9e:64:0a:fc:d1:
b5:c9:72:17:db:a7:d4:63:32:cf:fb:b8:d0:ea:49:
7f:4b:1d:c6:bc:d7:b8:1b:21:1d:e0:b6:b4:82:a1:
a7:9c:e8:32:26:92:37:a9:8b:43:8e:91:54:90:e0:
f0:ab:71:68:9f:4b:56:44:70:24:56:9c:6e:be:23:
42:54:54:21:cd:01:d2:f7:ed:c4:5d:fb:e5:2b:03:
09:44:1d:df:48:f3:a9:6b:5a:73:41:4c:d2:93:97:
5f:00:8d:14:37:43:16:cb:ab:8e:d2:4a:7d:03:44:
9b:ac:e9:24:26:09:92:44:41:e9:4a:6c:8b:1e:4a:
dd:bc:77:49:71:73:ee:e0:49:b2:09:aa:b2:1a:8d:
2c:80:a7:91:0d:8e:19:80:ec:06:44:e3:65:15:9c:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9E:07:27:B7:2E:CF:F0:8C:32:BF:24:35:A4:45:4A:D0:6C:13:06
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:5e:d7:d2:8a:50:0f:74:5b:3c:a6:76:35:1d:7c:2b:6f:
82:26:be:32:ea:3a:ad:f3:fa:fc:fc:58:c1:84:93:5d:74:d6:
eb:25:38:7a:08:b6:3e:36:90:fa:b0:3b:4c:ea:7a:c4:e0:cd:
a5:1d:e5:bc:6a:43:11:8b:f4:cf:e2:76:85:a2:ec:66:16:83:
ef:47:fa:fe:ae:9c:b9:48:d7:54:19:58:a3:a5:db:02:e2:3a:
c8:44:92:e3:9d:cf:d9:9a:3a:ea:00:25:03:35:e2:88:77:58:
10:d4:30:15:22:69:ea:b4:cc:e6:4f:34:47:92:df:2c:42:70:
e8:3f:2f:ac:d5:5c:db:40:91:b9:4a:26:fd:4d:e4:15:ce:92:
23:10:50:f6:fe:37:25:07:fc:58:48:0c:74:5a:81:e2:42:18:
2c:80:b4:22:fc:bc:bf:a8:1e:d6:57:a4:18:3c:8e:68:54:b1:
53:22:6a:8b:16:f0:b4:7a:58:cf:a4:b5:64:4f:c0:b7:20:34:
ff:0d:81:aa:7a:4d:9a:b1:22:1e:a3:e4:6b:93:db:e3:0d:8b:
40:6f:a7:39:3c:77:67:a7:95:73:45:8b:29:dd:b7:20:e3:ef:
90:3b:3b:27:39:27:26:00:a4:92:d8:37:ec:e8:5f:40:06:82:
e7:0a:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:44 2026 by rpki-client