Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 5UIvgQQ2Z8HhZ3DE2bsLGnMRHp3wlV2XHVM9ksxj+yc=
Subject key identifier: 87:97:30:D0:B5:57:6B:3C:41:B1:77:27:C5:80:11:1E:89:67:BA:D0
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01A08AFAFD62EFC2CD6DDD4E5FBF052A47F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0727
Signing time: Thu 10 Sep 2026 11:01:39 +0000
Manifest this update: Thu 10 Sep 2026 11:01:39 +0000
Manifest next update: Fri 11 Sep 2026 11:01:39 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: lPS6ueDmeL0uxefVsy760By9eB9I+XoKbcGo/eA1MKw=)
3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:fd:62:ef:c2:cd:6d:dd:4e:5f:bf:05:2a:47:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Sep 10 11:01:39 2026 GMT
Not After : Sep 11 11:01:39 2026 GMT
Subject: CN=879730d0b5576b3c41b17727c580111e8967bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:40:02:a8:4a:d3:da:bc:20:db:5d:9e:ca:56:
79:e2:45:d7:25:60:f2:03:a0:33:94:7c:85:04:0b:
7e:ef:62:0d:2a:c6:93:15:e6:cc:e3:7d:65:7c:b0:
56:2d:4d:ff:76:67:64:b8:d7:5c:ac:4a:9c:67:ba:
2a:0f:1b:f0:9b:db:17:62:c8:2e:10:13:ae:94:12:
e6:1d:ee:f7:f5:d6:19:ea:73:e4:17:e5:a9:41:2b:
52:eb:2a:65:03:8b:93:7b:6f:3d:39:59:8f:72:9f:
1c:8f:1c:4a:7f:64:79:d4:6a:f4:c3:44:80:23:ac:
02:ed:13:04:18:24:74:8d:ee:29:03:e1:57:36:96:
f5:29:e4:f2:07:f7:ea:bb:02:c5:aa:ba:11:8e:a5:
3f:c2:10:28:64:b9:af:be:d0:88:f1:30:5b:0f:0c:
69:5c:cf:b1:f9:d1:63:e5:6f:31:46:aa:cb:a4:3e:
9c:e0:09:7e:cd:6e:04:ee:ad:3b:b3:f4:57:e8:72:
cf:8c:2f:2f:5b:28:81:45:58:72:cf:46:e3:9f:57:
4c:54:f4:d7:6d:32:e4:2b:15:e1:09:e0:23:3d:a5:
79:02:82:a9:b3:4f:7e:1a:63:21:da:3c:88:d7:4b:
e1:30:7c:a8:35:2c:0d:74:c3:28:60:3f:14:64:bb:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:30:D0:B5:57:6B:3C:41:B1:77:27:C5:80:11:1E:89:67:BA:D0
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0b:e7:75:1c:3f:de:8d:73:2b:2f:5b:f5:4c:77:b2:03:7d:
e2:89:b7:38:c7:54:21:f9:37:b1:41:b6:cd:ab:83:05:11:09:
95:9b:13:75:76:3f:57:60:8c:2a:56:84:23:7d:ac:ba:2a:d4:
7c:20:9d:94:80:b6:46:ac:22:88:b8:86:ff:7b:94:ac:85:a1:
96:c1:7e:40:12:99:28:b5:5e:35:d1:66:4b:49:8c:61:ad:59:
f7:4a:ee:82:d3:40:1f:19:af:41:ec:4f:bd:da:b2:a2:09:9a:
80:48:52:ab:ee:63:79:3e:48:04:51:8a:0f:86:fa:9f:30:87:
f7:5d:6b:64:f2:5f:ec:f9:9c:36:f1:35:df:c4:da:74:d4:77:
a6:3c:0f:76:b1:c9:e9:77:bf:5f:52:bd:d1:1f:6c:e6:d6:5d:
d3:b4:77:2f:5a:36:43:8e:2a:26:2d:3b:53:75:ef:96:c7:7c:
86:c2:32:b4:3b:d8:69:d8:35:64:f4:5d:d3:e8:ad:6a:d1:3a:
6c:5b:f1:a3:af:05:89:f8:bf:59:db:ef:d6:6e:1d:4a:f3:6c:
ae:40:a0:a5:b5:da:d6:f5:82:a8:f2:e5:53:77:c5:b5:2f:e6:
f3:5b:56:75:8d:e6:47:4f:ea:ad:7c:dc:32:64:0a:80:f5:97:
53:af:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:29:57 2026 by rpki-client