Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: cYQmbGwdVchBJyo8o4+3Z1+VKlpBXbVxIKfqpNQ1FOM=
Subject key identifier: 00:E1:B8:70:53:D6:26:E6:8B:9C:31:9B:3C:E7:C8:8A:9E:30:86:AA
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 01A17ADF6C0EB6C76618B3AB984C57DE867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 194B
Signing time: Tue 27 Oct 2026 01:00:24 +0000
Manifest this update: Tue 27 Oct 2026 01:00:24 +0000
Manifest next update: Wed 28 Oct 2026 01:00:24 +0000
Files and hashes: 1: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (hash: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: /SvPprqqEaIHlL9ZLpz7GJRFSjwqgUO4fOPtkZOMZlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:6c:0e:b6:c7:66:18:b3:ab:98:4c:57:de:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Oct 27 01:00:24 2026 GMT
Not After : Oct 28 01:00:24 2026 GMT
Subject: CN=00e1b87053d626e68b9c319b3ce7c88a9e3086aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:7d:2b:e7:a5:ee:61:0e:96:e9:eb:78:d8:
1d:a3:ce:7e:02:58:7c:e1:cd:4f:e2:f9:ce:72:e0:
14:fe:25:c5:d1:9b:c5:62:51:e7:9d:bb:7c:4a:f2:
cd:f1:fe:51:52:22:53:b8:c9:04:9b:e3:bd:37:10:
a1:18:16:79:2b:65:59:78:43:eb:1c:71:f9:43:01:
c0:c4:52:19:a3:c1:e3:28:e6:c5:a5:ec:70:57:b4:
31:60:71:02:0e:48:4d:54:64:12:5a:bc:c0:ff:1b:
a1:d0:45:53:b1:6b:64:40:36:12:62:28:a6:22:59:
8d:5f:a1:0a:44:a2:d8:de:1c:db:7a:ff:9e:e6:06:
a1:41:bc:e3:46:63:c2:63:fd:0a:f7:ab:b0:7f:69:
fe:df:e8:4d:57:4f:1c:ca:39:d8:13:fe:39:36:52:
00:26:2d:b7:b2:1e:f9:e7:55:3e:34:51:1a:2a:6d:
95:e7:70:e1:5a:fb:d7:7b:89:5d:45:aa:ae:7c:e7:
0a:0e:7f:0b:df:46:9b:64:e0:d2:2c:a2:94:58:24:
69:d2:e5:1c:30:b1:b5:4f:ea:80:9d:0c:0b:d0:8e:
a0:c3:da:eb:86:ba:58:b4:bd:da:b1:89:a2:e4:0d:
38:14:64:f5:b0:dd:d9:17:4f:f3:f8:91:e0:9b:64:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:B8:70:53:D6:26:E6:8B:9C:31:9B:3C:E7:C8:8A:9E:30:86:AA
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d2:32:ca:a7:f3:f4:c4:bb:7f:9a:c5:2b:ef:2e:33:72:24:
3d:bc:83:4b:2e:07:bd:70:62:7b:1b:4a:70:73:7c:9f:ba:7d:
23:47:ab:50:e6:2f:93:a2:97:94:75:3b:fe:1f:95:c8:70:43:
d4:fd:08:40:fe:8c:7e:41:cd:1c:9a:78:f6:6a:67:30:31:b7:
5e:d8:66:2a:a2:47:46:ea:8c:7b:76:76:98:80:ca:15:36:7c:
46:69:24:36:35:c7:4d:9d:68:fd:cc:70:e5:28:5f:78:ea:a7:
85:d5:53:34:82:5e:08:15:e7:82:59:8b:dd:bc:12:1e:fb:93:
0d:77:14:05:4b:87:bf:fc:9a:73:56:de:b1:ca:d7:75:e6:80:
f7:a7:73:9c:3b:56:c9:1d:73:e0:5c:60:8c:95:cf:bb:5e:56:
6e:f1:20:45:d3:a9:8c:b0:bb:f4:86:41:e7:a3:95:48:5a:b4:
c4:9f:94:21:1a:6a:7e:bd:c0:77:f2:a8:f8:40:e8:a9:96:54:
bd:e4:aa:36:06:e1:3b:bb:5d:97:74:e6:de:1c:ff:e5:87:ad:
5a:29:03:e5:74:78:03:4f:a2:92:ac:3d:dd:a1:ff:ab:2c:ad:
d8:87:5b:c2:6c:c8:98:8a:dd:76:7a:94:0b:0c:36:53:18:1d:
bb:70:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:09:37 2026 by rpki-client