Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 7RYEB10JqWV0Frmlh1PqQ+DETwOoa+v4ykbHIDehQJs=
Subject key identifier: 31:C8:2F:88:E8:81:61:B7:D3:6D:55:7A:A8:80:3E:F0:FB:A4:1F:5E
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019F9F5F042CC3BD0EBCF312937A6F8CC63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 06AD
Signing time: Sun 26 Jul 2026 17:00:31 +0000
Manifest this update: Sun 26 Jul 2026 17:00:31 +0000
Manifest next update: Mon 27 Jul 2026 17:00:31 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: v694w8CmOPya+JBTo6P6xG8PNo7Pr1THoOnAumguSVs=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:04:2c:c3:bd:0e:bc:f3:12:93:7a:6f:8c:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jul 26 17:00:31 2026 GMT
Not After : Jul 27 17:00:31 2026 GMT
Subject: CN=31c82f88e88161b7d36d557aa8803ef0fba41f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:12:19:72:1e:cc:b0:7c:b0:b4:e5:e8:5f:
0d:f3:66:4f:5a:f2:cb:e2:93:77:79:bb:68:3f:b3:
e4:4b:cb:be:4f:20:cd:3f:80:a4:99:c9:31:52:5c:
fb:1c:6c:37:fc:62:a5:c5:a2:5a:e9:2f:bf:8f:df:
7b:81:b0:71:97:a8:00:42:b4:f0:72:f2:60:03:af:
ad:8f:8f:47:49:16:0c:85:fb:02:0a:c8:72:8b:34:
89:d3:c7:56:ea:96:4b:06:fd:6a:af:79:bc:7c:a6:
6f:d0:b9:0d:5b:86:48:6c:dc:1f:02:02:84:19:27:
31:2f:cd:4d:7e:ae:db:e7:80:2b:e1:cd:7e:e5:fa:
16:60:58:d6:fb:0d:f0:28:fa:d1:5c:6c:33:11:47:
14:02:6f:1d:b6:16:10:73:57:63:c5:3b:3f:31:6b:
dc:c8:9d:94:77:22:1d:9e:c6:10:47:7a:ad:43:12:
c1:af:5c:0a:ad:b0:51:91:84:c3:9d:48:1f:a3:5d:
ea:00:66:56:9a:16:3d:53:3c:77:4b:a4:87:d9:64:
3a:a9:2a:24:6a:86:73:7e:22:54:cc:46:18:53:05:
49:af:ba:b0:a0:33:a9:62:95:21:ec:d8:55:2f:ee:
e4:3c:1e:22:d2:40:7b:3c:4f:47:fc:c7:d8:af:b1:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:2F:88:E8:81:61:B7:D3:6D:55:7A:A8:80:3E:F0:FB:A4:1F:5E
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:24:89:62:08:d8:fe:41:b2:35:fc:da:3e:62:c0:7a:bc:0e:
53:8f:c2:34:8e:98:98:a2:e4:b8:91:7a:03:e2:a5:1d:15:93:
43:14:51:3e:af:65:15:f1:01:91:c1:1b:30:59:b9:3d:0a:4f:
e4:3e:40:9f:c9:55:bd:43:6a:91:22:53:40:20:c1:17:b6:dd:
2a:4e:24:2b:bf:45:9b:a3:f3:50:42:c1:d2:67:63:56:7f:42:
a4:26:0b:19:31:2f:90:6e:e8:5f:40:fe:57:35:79:05:77:ea:
16:c1:a7:e1:83:6e:0d:e6:91:1f:f3:f3:b8:d4:6a:2e:09:4a:
fb:cc:7d:96:56:a0:83:e2:6b:87:9c:4f:b8:96:40:cd:01:73:
4e:18:95:99:ad:18:64:76:f4:ba:7e:c5:25:4b:af:bb:d1:71:
b3:dd:5c:2b:1e:e6:f4:f4:d0:38:3d:c2:fb:42:39:ff:c1:f9:
ad:55:ce:5c:23:89:29:fa:d1:3e:82:f6:1e:50:cd:ac:b9:f2:
1c:45:75:8f:3d:97:69:2e:5e:8c:69:9e:3d:6d:d6:5d:a7:92:
25:2a:4b:28:40:f0:a8:71:55:c6:f4:6b:c6:84:7a:77:e5:0b:
2d:e6:f3:2f:d4:e0:34:56:40:22:d5:f1:5e:bc:18:ee:78:12:
0c:06:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:13 2026 by rpki-client