Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: TXT1K5OGWdx3qslRuDOqcgpCfhsnGVxwkGgka2MCM9Q=
Subject key identifier: B5:A1:6A:2F:D4:12:52:36:C5:2A:30:04:B7:46:09:57:32:51:7C:23
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 019FA0E08AF9C52374646CCF6F223F2BE991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 195F
Signing time: Mon 27 Jul 2026 00:01:37 +0000
Manifest this update: Mon 27 Jul 2026 00:01:37 +0000
Manifest next update: Tue 28 Jul 2026 00:01:37 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: Ghh+P28Niy6bgLcEgGqQxTA+xwUjC73yBgyFHQfFswo=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:8a:f9:c5:23:74:64:6c:cf:6f:22:3f:2b:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jul 27 00:01:37 2026 GMT
Not After : Jul 28 00:01:37 2026 GMT
Subject: CN=b5a16a2fd4125236c52a3004b746095732517c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:74:c5:01:84:49:ab:79:99:1d:f3:2a:1a:
81:8b:6f:c1:22:d2:12:e7:a6:a2:81:9b:41:21:b7:
65:ab:6c:15:e8:43:fb:07:35:5b:2a:3b:a2:cd:2b:
22:e1:bf:e1:d1:69:b8:06:60:51:83:d0:d9:46:0b:
ea:56:89:07:e2:bd:ce:7e:3e:fc:e8:d6:f1:f8:45:
32:f7:42:fc:e9:10:6d:d3:23:d9:d4:2b:24:6c:3f:
28:47:d3:ee:73:64:fe:9d:04:85:37:4e:60:8b:bd:
a0:78:7e:dd:62:ab:81:fb:25:e5:bc:5f:a3:f7:ad:
63:20:5c:9c:3e:4c:25:62:9e:04:82:46:35:c4:87:
53:df:e7:fc:b8:d1:db:0a:39:78:cb:48:32:0e:d8:
44:d9:a3:a8:88:94:74:63:f1:a5:04:b6:50:ad:ba:
9d:83:34:e0:97:95:7f:70:9d:6e:2a:de:ad:b6:c7:
2d:d2:df:82:bd:23:5b:1e:aa:38:b5:74:07:e2:0e:
5b:b1:10:12:ff:ab:cc:4b:be:7c:34:1d:fe:16:00:
71:46:66:ea:b3:e9:64:15:30:25:ab:41:cb:99:ec:
56:75:93:f3:b2:fe:7e:b3:d3:7d:af:e8:22:6f:bc:
49:3a:51:b2:c4:74:b9:5e:f3:75:ad:98:6e:98:03:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:6A:2F:D4:12:52:36:C5:2A:30:04:B7:46:09:57:32:51:7C:23
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:46:89:76:1b:b3:6f:94:ab:98:0f:09:78:b6:2a:64:95:
e7:2c:f3:19:38:c3:a4:3a:33:6d:c8:d7:50:95:c5:f6:57:09:
00:86:5e:80:ed:b7:66:57:cd:60:50:4d:e9:98:6e:18:02:42:
19:e6:5a:6a:bb:cc:29:b6:e7:37:19:0c:d9:0a:09:80:12:bf:
7d:3e:43:08:35:8b:0f:2f:09:b7:d1:f7:70:72:a1:f6:b8:52:
b8:43:13:12:20:f8:f0:67:a9:6e:02:3b:0b:32:33:0c:b1:9a:
46:de:af:ed:74:44:0d:1b:6a:5b:cd:13:2e:08:6e:07:c7:bb:
f3:fb:ad:c0:ba:4c:a1:36:a4:49:16:23:7d:ce:66:04:d3:02:
ec:50:c2:c9:10:f8:ed:e8:18:43:76:6d:a7:5c:4e:9e:c3:95:
52:a5:41:1d:b5:df:53:b8:39:17:b8:f1:3f:21:90:d1:68:23:
41:ad:9d:4a:b7:e3:f1:27:5f:2b:f7:13:fa:5b:15:fc:f7:a5:
dc:91:6f:12:3a:d2:db:c4:5d:2b:55:97:4f:39:4c:91:40:96:
fd:ac:0c:4e:bf:22:9f:ca:20:c4:c8:81:8d:d7:f4:d0:0a:c6:
ca:33:b7:c5:30:6b:5e:32:66:e3:a7:0a:62:d7:67:03:86:e8:
a2:95:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:41 2026 by rpki-client