Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: +kl/OkR63T3OTiCcOfxFhW4lDdIQYdgWLQbcRzJOJ88=
Subject key identifier: 17:F9:A8:FD:71:7A:6E:AB:F7:E9:80:09:DC:8A:A7:61:C0:A9:64:9F
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019CBAA7BB16F87E93D435E001ACE0F9363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 057D
Signing time: Wed 04 Mar 2026 21:01:20 +0000
Manifest this update: Wed 04 Mar 2026 21:01:20 +0000
Manifest next update: Thu 05 Mar 2026 21:01:20 +0000
Files and hashes: 1: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: FczhUb4ooNm0GmNVUuRHW/s6ztHiCfRcVIfDhETcHiQ=)
2: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (hash: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ=)
3: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (hash: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:a7:bb:16:f8:7e:93:d4:35:e0:01:ac:e0:f9:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Mar 4 21:01:20 2026 GMT
Not After : Mar 5 21:01:20 2026 GMT
Subject: CN=17f9a8fd717a6eabf7e98009dc8aa761c0a9649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:7f:47:3e:ec:d8:28:42:04:0b:0c:8f:c7:
f0:f1:20:07:be:f1:b3:bb:98:c1:bd:f1:94:83:64:
19:15:0c:f5:44:e6:bf:b6:d2:a8:09:d4:1f:1d:f3:
37:8b:e2:08:7d:2e:60:12:2c:cc:05:dc:c6:02:45:
d2:7a:59:7e:74:d8:1b:83:be:97:ce:56:a0:8f:2e:
53:b0:95:b9:96:76:7c:7e:5b:85:7d:5c:41:da:2c:
9e:70:93:b1:70:2b:89:3b:9d:ac:33:06:77:a8:c7:
f3:49:be:ca:8e:6b:dd:48:6f:aa:dc:2d:6e:35:f6:
be:3b:d4:37:40:13:5c:df:79:75:7c:8e:d5:fc:5f:
b5:69:20:4b:de:6d:72:05:05:f4:e7:45:ac:3b:d9:
43:d8:f1:08:e0:40:62:3b:3e:25:ae:7f:86:fc:47:
ea:e1:2b:e0:58:62:78:0b:e0:bd:86:42:21:6e:12:
1d:9c:94:f4:28:df:e3:7b:41:0a:02:10:4f:1c:b3:
55:6b:31:d5:39:e1:bd:b5:12:9f:19:9f:c1:03:78:
fb:33:b7:e4:79:c5:e6:d1:8f:e1:75:2e:b1:35:cf:
8e:88:6d:3b:d8:9c:08:b4:4c:ef:7d:de:a4:df:b2:
e0:0a:60:b6:4f:af:4c:3c:62:0e:0d:81:a0:ce:0c:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:A8:FD:71:7A:6E:AB:F7:E9:80:09:DC:8A:A7:61:C0:A9:64:9F
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8e:6a:4b:4e:b1:5c:5b:35:aa:f4:62:4b:b1:f5:a4:f7:78:
6f:2a:1b:ad:7e:c6:59:fa:1a:a6:9f:27:88:ed:04:c3:46:e1:
36:d6:cf:42:7d:6e:f6:fc:31:38:f7:10:de:15:f9:65:57:83:
00:68:7a:e5:0d:44:8e:db:91:48:7d:6d:95:ab:ee:33:a0:ea:
5d:27:eb:23:a6:95:98:9e:f7:87:3c:eb:c7:cf:99:37:6c:0e:
a3:bc:3b:9b:23:04:bd:4f:16:5c:e8:d4:aa:86:da:5e:05:79:
55:30:7a:5c:41:aa:c1:35:40:7f:a2:c7:9d:33:11:62:6f:c3:
f0:f6:f4:d5:bf:6f:b3:81:81:d1:b7:53:06:48:c3:2e:6e:d8:
1e:02:35:ec:c7:d1:d2:c0:f2:dd:ce:a8:96:a6:19:5f:41:f7:
d7:b9:60:f1:a2:77:70:1c:36:cc:9f:f6:b9:11:e5:db:07:05:
4e:35:22:80:ad:4d:78:f5:57:53:63:88:dd:f2:4e:04:84:2d:
3b:d4:02:2c:4c:0f:5e:88:49:62:dc:a3:f4:0b:b0:8b:ce:e1:
89:72:74:42:21:a1:ab:ef:04:55:f2:ef:75:ea:36:bb:fa:bc:
70:a1:23:01:2b:5a:3a:02:9b:fd:39:bf:09:e4:be:99:59:80:
68:d2:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:37:42 2026 by rpki-client