Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: TkV4IgXqHV5oPWZF+GT8evUKDuJ7/y3viDXEdERjxds=
Subject key identifier: FE:4E:AD:F4:18:F2:CD:1D:AC:84:CA:72:B1:6B:6A:BD:6E:CA:D4:03
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019DA2653EE6613208D1FB092DD5AA12609E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 05F5
Signing time: Sat 18 Apr 2026 21:00:37 +0000
Manifest this update: Sat 18 Apr 2026 21:00:37 +0000
Manifest next update: Sun 19 Apr 2026 21:00:37 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: 6w7XKyz0BhEpsyuz3twpWTO5vLqSMLytJ2XrswI0lgY=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:65:3e:e6:61:32:08:d1:fb:09:2d:d5:aa:12:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Apr 18 21:00:37 2026 GMT
Not After : Apr 19 21:00:37 2026 GMT
Subject: CN=fe4eadf418f2cd1dac84ca72b16b6abd6ecad403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:a9:62:cc:6b:b7:bf:26:6b:8f:3d:32:1f:
a1:8b:ca:61:40:55:76:c6:d8:d3:8f:f7:ce:68:07:
3b:b9:8e:9d:1a:f3:74:a8:c1:15:cf:9c:24:79:0a:
bc:8f:ba:18:9d:72:da:25:02:c1:43:70:30:07:f8:
bf:c7:53:c3:83:8d:0b:b0:ed:61:f2:70:b0:99:74:
27:a3:5d:9d:6a:89:cb:d5:f5:b1:78:81:e9:af:83:
d5:1e:85:b0:3d:4f:59:ce:ee:85:6d:a2:30:13:71:
6a:bc:b5:e8:ed:01:72:f1:e4:83:95:64:75:d0:b5:
f5:05:57:b4:8a:71:7d:c0:02:c0:4a:71:13:1a:8f:
70:e3:c6:fd:7e:5c:c0:79:c6:69:a9:eb:a2:c4:25:
6e:a4:d7:7b:9a:47:58:62:eb:a2:c5:5e:e7:0b:8f:
94:e1:0f:91:9d:58:18:1d:0c:d3:0f:9e:75:9b:45:
1b:3c:38:60:06:92:da:70:5f:ad:64:69:3f:44:d7:
eb:6e:60:72:40:4d:a1:fa:b2:30:9e:71:ce:77:63:
45:98:e2:a2:ee:c4:18:85:d2:e8:cd:45:1b:b9:2e:
d9:9e:6a:29:bf:90:29:c7:05:cc:f6:38:5b:63:09:
9f:83:be:81:9a:1c:c1:13:bc:91:c8:c3:ff:1c:5e:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:AD:F4:18:F2:CD:1D:AC:84:CA:72:B1:6B:6A:BD:6E:CA:D4:03
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:c8:57:ee:4e:aa:e0:0d:75:b4:02:68:72:6c:ce:fa:6f:
cf:4f:67:30:94:e9:a1:ac:96:3b:2e:02:f0:f5:c5:ff:03:41:
7c:93:6a:ca:1d:db:37:c6:33:10:a7:ba:91:f5:8d:f5:47:de:
53:50:9a:13:e9:67:86:7c:8b:47:e2:c4:af:28:39:1b:89:73:
1a:63:f2:77:3e:5e:8b:cd:b1:e1:83:26:93:30:16:a2:6a:94:
36:2d:4c:d0:92:b5:f9:4a:d5:c4:1d:90:56:af:4e:c7:8d:3b:
0b:23:56:8e:51:18:1c:2f:da:d2:d1:db:34:8f:d8:8d:4c:8b:
7b:f5:85:92:8a:dd:92:c8:01:c1:11:f3:df:ef:6d:43:10:0f:
39:57:85:ed:cf:59:ff:0a:2c:bd:e8:86:1d:a3:d8:7e:59:5e:
5a:f6:42:74:da:23:40:9b:68:78:98:5c:7f:b0:f6:14:86:db:
67:5e:74:34:8b:76:0f:e9:67:28:eb:53:50:53:8c:2f:a5:0a:
37:e8:2f:86:e7:2c:20:aa:f9:e2:da:da:ba:aa:70:27:32:93:
98:7c:fc:d7:c0:b3:95:a8:e5:f2:2a:78:6d:82:a5:af:16:bc:
54:84:a8:1d:c9:7d:93:47:f1:48:8c:88:45:e2:63:d0:7c:2b:
bf:7c:e0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2iZT7mYTII0fsJLdWqEmCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw
NDAyNmQwHhcNMjYwNDE4MjEwMDM3WhcNMjYwNDE5MjEwMDM3WjAzMTEwLwYDVQQD
EyhmZTRlYWRmNDE4ZjJjZDFkYWM4NGNhNzJiMTZiNmFiZDZlY2FkNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ypYsxrt78ma489Mh+hi8phQFV2
xtjTj/fOaAc7uY6dGvN0qMEVz5wkeQq8j7oYnXLaJQLBQ3AwB/i/x1PDg40LsO1h
8nCwmXQno12daonL1fWxeIHpr4PVHoWwPU9Zzu6FbaIwE3FqvLXo7QFy8eSDlWR1
0LX1BVe0inF9wALASnETGo9w48b9flzAecZpqeuixCVupNd7mkdYYuuixV7nC4+U
4Q+RnVgYHQzTD551m0UbPDhgBpLacF+tZGk/RNfrbmByQE2h+rIwnnHOd2NFmOKi
7sQYhdLozUUbuS7Znmopv5ApxwXM9jhbYwmfg76BmhzBE7yRyMP/HF5l7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5OrfQY8s0drITKcrFrar1uytQDMB8GA1UdIwQY
MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt
MDczZTNiN2FkODUwLzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw
LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVATIV+5O
quANdbQCaHJszvpvz09nMJTpoayWOy4C8PXF/wNBfJNqyh3bN8YzEKe6kfWN9Ufe
U1CaE+lnhnyLR+LEryg5G4lzGmPydz5ei82x4YMmkzAWomqUNi1M0JK1+UrVxB2Q
Vq9Ox407CyNWjlEYHC/a0tHbNI/YjUyLe/WFkordksgBwRHz3+9tQxAPOVeF7c9Z
/wosveiGHaPYflleWvZCdNojQJtoeJhcf7D2FIbbZ150NIt2D+lnKOtTUFOML6UK
N+gvhucsIKr54trauqpwJzKTmHz818Czlajl8ip4bYKlrxa8VISoHcl9k0fxSIyI
ReJj0Hwrv3zgUg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:12:40 2026 by rpki-client