Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: xHypQe07/9gCu/rs525avT9ObCA6W0yg8IpM/nt8aG8=
Subject key identifier: DE:98:11:CA:32:DF:F2:81:D1:C2:F1:6E:8B:0D:45:05:CD:31:17:FD
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 01A13711DDADBD0BF49A05375D70119301D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 21:01:19 +0000
Manifest this update: Tue 13 Oct 2026 21:01:19 +0000
Manifest next update: Wed 14 Oct 2026 21:01:19 +0000
Files and hashes: 1: 2nQB2E6BUhwfRdMk7xQATWi9kI0.roa (hash: O2K+jT0p/eGe0P+/wXfc4p3/RWSSlNcPnUldJ8hZwb8=)
2: ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa (hash: i/9UjekMAEXyuNGuXA/iLPrAIaabwapuTorDmhrfiqM=)
3: gRe574DN90lJZ-bbAAqI3B__Ym0.roa (hash: mI4D0v2VpyRqI8+dI4PhrtBe5RLqPKBNt/GXRECvJ9M=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: eeKO1CNTIqzXINV0+YRvADTVlV78QWN86HckbllQkyQ=)
5: kmgi0y0U1bYAcoirOlv5le_3CJY.roa (hash: kZuMUfLrtvikcC+U07DOQIGo8YvIw/QLR8yELB49vDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:dd:ad:bd:0b:f4:9a:05:37:5d:70:11:93:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Oct 13 21:01:19 2026 GMT
Not After : Oct 14 21:01:19 2026 GMT
Subject: CN=de9811ca32dff281d1c2f16e8b0d4505cd3117fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:68:6c:e8:84:7f:17:93:64:7b:3f:b3:b4:
d2:36:87:93:d4:e7:4f:10:85:42:c9:08:f1:a1:4d:
59:c4:9e:9c:b7:fd:ed:f0:95:72:87:46:20:2e:bd:
34:5e:5e:ba:92:73:2c:10:0f:a5:4c:92:41:dd:b7:
de:16:ce:b6:b8:eb:89:4b:ed:a0:bb:0b:9e:04:fc:
ad:e9:66:b2:88:05:e7:cc:24:93:58:ab:5f:76:34:
32:7a:0d:60:ce:8b:f8:02:e8:f4:79:57:46:ba:91:
62:88:eb:20:35:3f:de:e2:42:09:1f:eb:67:ae:d0:
e6:b2:39:69:92:18:9e:b9:69:46:51:7d:d2:2a:fa:
6e:ea:a1:9b:a4:f1:68:31:e4:f8:87:85:ec:e0:4a:
61:a6:39:5b:d7:af:64:56:f1:d1:2e:10:b3:bf:1a:
ad:67:8d:56:34:b2:02:fc:a8:85:ac:9b:40:59:0c:
58:4b:82:60:ad:4c:af:40:e6:8e:8a:28:1f:f8:0b:
25:41:2a:a7:1f:d0:5e:0e:84:e1:72:52:99:37:53:
82:a1:66:cb:4d:df:14:87:7a:fc:2e:e2:da:59:ad:
93:ee:8b:42:1c:20:b7:a4:d4:bd:5b:b1:dd:7a:9f:
89:71:e3:d7:87:13:16:2a:d4:f0:5a:ae:16:79:94:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:11:CA:32:DF:F2:81:D1:C2:F1:6E:8B:0D:45:05:CD:31:17:FD
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:ef:c2:37:05:39:93:2e:14:19:e7:7e:3b:ed:26:83:b3:
e3:47:cf:f5:8e:83:bf:38:d3:91:61:ec:c1:30:33:35:4c:2c:
ed:9d:49:4a:b3:9b:59:48:4e:fc:0c:05:0c:56:50:ea:5f:11:
1f:39:79:7e:4d:0a:bd:5b:28:36:15:89:b6:3e:0e:7b:93:97:
c2:32:2c:d2:4e:25:4c:bb:ac:2c:04:2f:77:5f:8b:5d:1d:dc:
4e:78:b9:f5:0c:4e:d4:c1:26:25:ff:6b:bc:96:a7:ac:3f:f7:
32:98:6d:e5:21:01:ce:f7:4a:30:3f:f6:97:21:e4:09:70:c2:
31:3a:f4:31:67:92:64:6a:ed:ea:04:bb:00:e4:bf:05:d1:49:
d4:1d:64:c8:db:5d:d1:49:5f:98:06:c1:4f:65:8f:41:fe:93:
9a:f5:37:63:50:8f:25:a0:ea:6d:32:3a:ff:1f:7f:5e:0c:bc:
a6:a4:e4:b8:1f:a9:e6:ce:2c:be:02:7e:85:76:07:ed:4b:36:
ea:a5:84:ec:43:e7:87:1b:c4:79:85:46:92:dc:74:72:36:84:
5c:a9:20:ba:2d:b1:34:b6:a6:8c:c8:f2:61:f9:8e:68:13:51:
5b:a4:37:8f:a0:46:28:00:0b:b3:5d:01:20:96:a8:f2:d2:67:
ea:a1:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:55:17 2026 by rpki-client