Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: K/S90m/0SVpXxI0TyRXm/ILhuClnTcVTQs8uRxaMH0A=
Subject key identifier: 42:F1:7D:CD:FE:74:B7:ED:05:19:B6:16:A8:B0:A2:24:BF:83:A7:26
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019DD0BE7CAE3C1B727C2DA7962BD13DD9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 188E
Signing time: Mon 27 Apr 2026 21:00:37 +0000
Manifest this update: Mon 27 Apr 2026 21:00:37 +0000
Manifest next update: Tue 28 Apr 2026 21:00:37 +0000
Files and hashes: 1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: 16dyTS/gZTyCbOMMQ55m+bCv9X4V2pxa6FxLx3DDWf4=)
3: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:7c:ae:3c:1b:72:7c:2d:a7:96:2b:d1:3d:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Apr 27 21:00:37 2026 GMT
Not After : Apr 28 21:00:37 2026 GMT
Subject: CN=42f17dcdfe74b7ed0519b616a8b0a224bf83a726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:4c:53:77:b4:62:68:a0:f6:f5:2a:4e:3d:
1d:94:d5:63:75:f0:36:7e:5e:5b:ca:51:08:30:45:
1e:ca:e9:09:8f:92:83:5d:88:6c:60:74:17:d7:3f:
f5:30:2b:a4:18:eb:ed:36:02:33:db:88:53:fb:ac:
c3:d1:be:66:c0:cd:48:fe:b0:4e:67:61:2c:79:64:
d0:e0:15:ab:d9:7e:61:b0:1e:6f:bb:70:a1:6c:73:
20:ba:7d:69:18:56:22:1d:5c:d4:8e:49:a0:5f:f2:
64:dd:6c:15:9e:d5:d0:9e:06:72:49:bf:4f:29:7a:
08:8f:09:ee:fb:7e:5a:c5:96:1b:e3:f6:30:51:e7:
33:cf:a7:58:d7:f1:2b:bf:29:72:5c:fd:62:87:db:
8a:83:61:18:1e:50:d1:11:8e:a2:5d:04:8b:54:aa:
c6:c9:12:e3:0d:4f:a6:3a:91:0b:b6:58:1e:12:9e:
19:46:27:6e:5b:30:b7:15:5b:e9:b5:ae:3e:bd:d1:
d9:cc:fe:25:82:f4:6d:b5:6a:7c:2f:4a:98:7d:68:
53:27:6e:1a:ff:e9:45:65:3a:02:16:5d:a6:8e:a7:
12:d4:fb:02:90:56:6c:30:af:4e:a8:c2:1e:fe:93:
71:df:8d:1a:f6:00:0d:40:8d:99:fa:8c:a2:63:ab:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F1:7D:CD:FE:74:B7:ED:05:19:B6:16:A8:B0:A2:24:BF:83:A7:26
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:ec:3c:62:ca:9e:68:a2:fc:e4:b8:7e:09:5e:0f:aa:87:
d8:89:00:5d:1e:cd:1c:1b:6a:60:7e:53:a9:38:c3:d0:7e:87:
36:b7:c2:21:3f:40:53:e3:70:07:cf:2e:05:41:a4:cc:0c:24:
c2:62:66:d8:2d:7f:53:b6:42:c0:c1:ab:31:a8:55:b1:fe:50:
c8:a2:1c:c9:68:71:bd:f9:2c:cc:e6:f1:c6:f8:42:c8:ff:2e:
b2:95:2c:ba:02:86:b3:4a:e8:11:07:c6:35:83:40:dd:d4:2d:
44:17:cf:be:76:ba:f0:a8:d7:0a:76:27:2e:82:dc:8e:63:85:
03:42:f9:cb:3d:e5:5e:ac:a9:59:e5:cf:4d:4c:05:c9:03:2a:
38:cd:85:61:13:e4:9a:e7:2b:4d:f3:0f:d5:2a:8e:51:d8:08:
25:e5:3d:e8:da:89:30:05:58:1c:54:cb:19:b4:69:53:0a:f3:
b9:99:f2:4b:a9:48:aa:57:29:00:a7:05:68:07:6f:43:0e:22:
28:69:65:35:96:5b:45:15:d8:5b:68:a7:54:17:4b:27:95:8f:
ac:49:e2:9a:78:3a:6e:17:62:0c:93:43:5c:c6:a1:21:c9:4e:
cd:97:f6:00:c4:ce:a9:b2:1a:dc:7a:ab:88:bb:41:0f:73:14:
1d:42:75:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QvnyuPBtyfC2nlivRPdnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjYwNDI3MjEwMDM3WhcNMjYwNDI4MjEwMDM3WjAzMTEwLwYDVQQD
Eyg0MmYxN2RjZGZlNzRiN2VkMDUxOWI2MTZhOGIwYTIyNGJmODNhNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqopMU3e0Ymig9vUqTj0dlNVjdfA2
fl5bylEIMEUeyukJj5KDXYhsYHQX1z/1MCukGOvtNgIz24hT+6zD0b5mwM1I/rBO
Z2EseWTQ4BWr2X5hsB5vu3ChbHMgun1pGFYiHVzUjkmgX/Jk3WwVntXQngZySb9P
KXoIjwnu+35axZYb4/YwUeczz6dY1/ErvylyXP1ih9uKg2EYHlDREY6iXQSLVKrG
yRLjDU+mOpELtlgeEp4ZRiduWzC3FVvpta4+vdHZzP4lgvRttWp8L0qYfWhTJ24a
/+lFZToCFl2mjqcS1PsCkFZsMK9OqMIe/pNx340a9gANQI2Z+oyiY6vvywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELxfc3+dLftBRm2FqiwoiS/g6cmMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrzsPGLK
nmii/OS4fgleD6qH2IkAXR7NHBtqYH5TqTjD0H6HNrfCIT9AU+NwB88uBUGkzAwk
wmJm2C1/U7ZCwMGrMahVsf5QyKIcyWhxvfkszObxxvhCyP8uspUsugKGs0roEQfG
NYNA3dQtRBfPvna68KjXCnYnLoLcjmOFA0L5yz3lXqypWeXPTUwFyQMqOM2FYRPk
mucrTfMP1SqOUdgIJeU96NqJMAVYHFTLGbRpUwrzuZnyS6lIqlcpAKcFaAdvQw4i
KGllNZZbRRXYW2inVBdLJ5WPrEnimng6bhdiDJNDXMahIclOzZf2AMTOqbIa3Hqr
iLtBD3MUHUJ1vA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:23 2026 by rpki-client