Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: DND7FLQp4DqXscej7yNlVDjVRmUPjrbpC1lEV77GF3k=
Subject key identifier: FA:7F:61:5A:D2:D1:FA:12:49:7A:7E:F8:60:83:C2:00:37:02:C6:B7
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 01A06CF00668FF69573C5CD033DB322C16B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 0767
Signing time: Fri 04 Sep 2026 15:01:04 +0000
Manifest this update: Fri 04 Sep 2026 15:01:04 +0000
Manifest next update: Sat 05 Sep 2026 15:01:04 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: BdHudrqeSbzerQqrctZwC40Q1CFPLGESpUIFvA+kAWY=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:06:68:ff:69:57:3c:5c:d0:33:db:32:2c:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Sep 4 15:01:04 2026 GMT
Not After : Sep 5 15:01:04 2026 GMT
Subject: CN=fa7f615ad2d1fa12497a7ef86083c2003702c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:7b:8c:13:16:4f:8b:80:f8:5b:da:43:80:
51:c9:29:f6:f9:2c:96:94:76:95:48:4a:c0:a1:80:
2c:61:1f:f2:d5:e4:19:bb:a1:c7:87:8a:5b:74:c9:
3f:89:69:8a:bb:6b:dd:75:a2:b5:63:4b:4a:72:49:
70:60:94:12:5a:49:d7:b9:e4:5b:62:96:fc:09:72:
13:8b:5d:23:c7:1e:cd:9d:0f:7f:61:e4:5e:b0:88:
39:b3:11:de:e3:8a:e6:a2:fb:fd:bc:cf:3d:3e:43:
38:d2:06:89:c7:12:af:18:17:fd:b9:c6:1e:db:b5:
12:98:7c:3f:29:6c:d3:30:91:40:c1:44:56:4b:04:
41:e0:4e:72:15:58:20:47:18:29:93:cc:7c:dd:cc:
b2:6f:78:2b:dd:d6:03:e4:ed:b6:a1:59:0b:58:23:
13:33:52:c3:b8:4c:6d:71:fd:4d:ce:36:16:96:7f:
e2:4f:9c:4a:fb:3e:9f:3b:54:da:1f:c9:db:78:07:
af:74:b9:ef:ac:92:7a:4e:30:5a:e0:a0:d6:c5:f4:
7d:6e:18:02:7f:a5:6b:88:34:fb:93:00:47:91:e0:
2a:a3:5e:ad:fd:23:65:23:32:f8:4c:b6:da:64:db:
f4:38:3f:8f:12:96:34:48:d8:2d:01:5e:43:d2:56:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:61:5A:D2:D1:FA:12:49:7A:7E:F8:60:83:C2:00:37:02:C6:B7
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:27:96:2d:2a:31:ba:5a:bf:dc:3d:6d:a2:88:e5:1f:7c:
c0:75:58:94:0e:85:31:94:fd:6a:d2:43:7e:1a:24:fe:f5:4f:
5b:2f:a2:04:84:49:37:a3:a8:da:e8:6a:01:74:f6:e8:0e:5d:
d9:71:6b:76:03:6d:53:b2:ee:db:ea:28:54:be:9c:cb:54:87:
c6:0a:44:60:78:60:b8:2b:a0:f9:b2:00:c3:f4:d9:d5:51:e8:
cc:3d:86:df:08:97:f1:ec:18:2e:54:40:fe:9d:92:c8:7c:2e:
8e:f7:c6:a0:3b:d9:39:7e:b8:0f:0f:10:84:0a:88:b7:52:7f:
a2:eb:f8:a7:68:91:6c:81:0c:62:81:16:8a:a7:09:8d:06:e3:
0d:1f:41:91:f7:f3:8e:f3:fd:f8:80:19:c8:ce:3b:7a:d6:09:
d9:d5:b6:6f:b7:9f:d4:7b:16:3b:16:e7:9e:c3:44:1b:23:12:
86:f2:4e:ff:9b:6f:95:7e:3b:6b:4d:d9:26:85:ac:a9:30:50:
f5:a5:c8:65:2e:9c:7a:8e:d2:6d:d7:38:62:62:da:9e:8f:29:
cd:cf:10:d2:3e:41:88:67:11:81:ad:05:8a:ff:29:09:dc:55:
c2:3e:be:83:cb:eb:b7:a0:c9:33:29:18:cb:ae:a8:15:ea:bc:
6c:db:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:56 2026 by rpki-client