Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: kIffGwFsnGPyeZr9VCaPkTLaT0MvL9uqNITTnXG4DKg=
Subject key identifier: C2:8C:6D:5E:D0:B0:D7:EE:84:21:E7:73:58:84:20:86:4C:EA:03:53
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 01A001A5DE2019E90F76BB70AA2C783A5933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 0752
Signing time: Fri 14 Aug 2026 19:00:42 +0000
Manifest this update: Fri 14 Aug 2026 19:00:42 +0000
Manifest next update: Sat 15 Aug 2026 19:00:42 +0000
Files and hashes: 1: 9aRTzcNv5guAsQiFnGIvU6cyVjw.roa (hash: yxAswLOvy7NpNtBGcnZYbW1+LR5oOn3Rqal1sA9FoVg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: DDoBD1ymbU4fKLqxj8+CLL8gD4K68nT2qlWXkikylwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:de:20:19:e9:0f:76:bb:70:aa:2c:78:3a:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Aug 14 19:00:42 2026 GMT
Not After : Aug 15 19:00:42 2026 GMT
Subject: CN=c28c6d5ed0b0d7ee8421e773588420864cea0353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:31:73:34:4c:a3:b8:5e:b0:89:d3:9b:4a:
39:7a:a1:83:6b:42:21:84:59:9a:a7:68:eb:dd:de:
fc:57:28:ac:5e:a0:34:12:32:40:73:d6:6a:af:86:
b8:b1:48:0d:0a:ae:0c:f7:10:4c:52:cf:8f:fc:7b:
2f:d7:00:11:d8:ea:dd:fd:fd:70:ba:82:b1:b0:e3:
98:ec:7d:07:47:04:8d:3e:c9:37:74:95:16:4f:41:
c6:b6:aa:08:bc:29:5f:ce:5d:ab:ba:43:c5:a9:d9:
61:bd:7e:74:be:ff:fa:60:cf:46:38:1c:b9:4b:ce:
54:cc:4b:b5:39:4c:cf:64:50:59:d3:f4:f3:7d:1d:
ac:77:95:df:04:08:81:a0:44:69:76:f6:6a:78:cc:
37:a1:e7:12:f6:60:dd:05:81:d3:10:e8:a9:d4:44:
df:9b:33:a5:f2:3f:94:b2:80:c3:ed:42:f7:3e:95:
18:7c:64:34:8d:93:55:d7:ae:4a:4c:9e:88:e0:5d:
88:1e:53:fe:58:f9:de:7b:b1:53:50:e3:db:41:d4:
1b:3e:9c:fd:51:f7:14:84:af:fd:2b:3d:ff:76:c2:
51:e2:ab:20:70:50:20:05:c1:51:73:c2:0b:49:54:
00:35:66:af:b6:7d:55:d5:e0:65:86:15:2b:0f:3d:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:6D:5E:D0:B0:D7:EE:84:21:E7:73:58:84:20:86:4C:EA:03:53
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:83:24:0c:8b:4b:d2:3f:de:f3:c5:52:ed:5f:ef:6d:10:fb:
10:bc:b1:2c:9b:77:53:94:eb:7c:d8:2e:31:c7:2f:2a:5d:64:
cc:99:1a:d6:96:be:4c:89:46:56:48:b6:25:ad:a0:72:65:4f:
c5:77:3c:dc:a1:90:14:96:90:de:32:27:c6:f8:2e:a4:3a:19:
37:86:1e:54:19:59:8d:fa:5a:e0:1e:3f:c8:68:95:89:f0:0e:
56:53:14:11:92:8a:06:a1:68:e9:b2:cb:1d:ae:4a:31:9c:79:
f0:9b:62:ae:d6:c7:cf:32:34:46:dc:05:06:ee:8c:fb:f8:2b:
1b:f0:61:a2:d3:a0:29:1f:f6:4e:ff:25:fd:81:09:21:c9:a7:
33:63:d2:cc:e6:a2:43:36:40:84:e4:25:e6:1c:70:2a:f8:aa:
39:53:53:75:b8:52:ba:43:9f:d4:a8:9b:1e:49:77:98:af:7f:
e4:f7:8d:cc:98:af:76:95:6a:90:13:5a:da:1b:8b:73:3c:37:
80:73:84:54:48:d5:5d:a5:29:3c:2f:38:5c:0f:29:f0:04:3c:
be:6b:14:b1:f8:6a:ed:57:92:8e:9b:53:c9:1b:a6:82:81:44:
f3:2f:59:f6:84:53:00:d4:70:50:f1:9b:06:4b:02:d7:70:9c:
89:d6:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:05 2026 by rpki-client