Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
File: RWHebKadwhUADLmmfGVcZIT7Vwo.mft (raw, json)
Hash identifier: 9zWWqxsluE3cll17DkwtT0RbAHBi9x3joA9LlCwIiJ4=
Subject key identifier: 0B:0C:B5:17:60:A3:61:96:E0:05:4B:EE:AD:AA:D2:F2:43:43:86:C7
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Certificate issuer: /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial: 019FF72273AF2B2E1669156C2E6B0128B96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
Manifest number: A8
Signing time: Wed 12 Aug 2026 18:00:57 +0000
Manifest this update: Wed 12 Aug 2026 18:00:57 +0000
Manifest next update: Thu 13 Aug 2026 18:00:57 +0000
Files and hashes: 1: HhFHFL1OCw8ofMtLsaP_9nbfrFU.asa (hash: BRYKkkg4LsI+ogvaJ9O62G5uw5km4Yza0HAxhzb4kTU=)
2: RWHebKadwhUADLmmfGVcZIT7Vwo.crl (hash: G/LT8dg/DxBbqbpaK1u0eOA4nM3Lw2VEHeFj3F5MDEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:22:73:af:2b:2e:16:69:15:6c:2e:6b:01:28:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Validity
Not Before: Aug 12 18:00:57 2026 GMT
Not After : Aug 13 18:00:57 2026 GMT
Subject: CN=0b0cb51760a36196e0054beeadaad2f2434386c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:17:9f:9f:2c:0f:44:58:3e:2a:44:9e:98:
26:56:fe:48:63:2e:61:f6:da:77:1c:c6:e7:92:18:
39:ba:5e:58:a3:9e:64:17:aa:69:64:f8:c8:8d:de:
d6:c2:41:f9:f8:f1:68:30:6f:4e:a7:c5:35:fa:96:
41:7f:f8:0c:21:30:96:a0:6a:a7:60:08:3b:43:25:
3d:0a:49:30:12:b2:5d:57:d3:b0:62:55:d2:dc:a6:
5c:8f:f1:01:a6:90:7c:d6:0d:2b:b3:0b:71:0d:36:
87:eb:98:99:ea:70:db:7f:ad:5d:be:f1:69:dd:e3:
7f:c1:2e:41:d0:f8:c6:13:e1:ef:db:17:f6:0c:b5:
23:43:f6:ed:cf:68:fe:2b:eb:5d:0b:3e:8b:ae:20:
2a:57:3a:52:ba:7b:5b:79:fa:23:92:5d:a2:cf:80:
96:ec:c2:43:05:1d:aa:0f:25:b1:04:c5:48:5f:fa:
60:b4:a3:e9:94:00:40:d5:68:95:7c:1b:a9:80:76:
f8:96:32:e3:a0:30:05:7a:d5:9e:4e:b2:aa:68:8e:
f9:9a:9a:f9:c4:d6:fe:12:e6:d2:a8:25:6b:94:34:
8d:3b:4f:c9:2c:15:76:13:1e:4e:cc:0c:16:12:18:
1f:85:fd:0f:e6:46:35:2f:6e:33:b6:bd:21:aa:f0:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:B5:17:60:A3:61:96:E0:05:4B:EE:AD:AA:D2:F2:43:43:86:C7
X509v3 Authority Key Identifier:
keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:85:65:76:5e:fa:12:8c:b9:26:d2:72:d9:69:f1:19:a6:fe:
ae:29:c4:c7:7a:a2:f7:ee:f7:bf:b8:4d:3c:d4:ef:7a:bb:26:
9c:9b:97:82:8f:c2:0f:6f:4b:2f:c4:f2:4a:da:76:1f:ab:de:
17:7f:c2:ad:0b:b2:27:7e:43:12:f6:af:42:34:73:a5:20:2b:
70:de:43:80:86:b0:6d:55:4d:9c:26:c9:8e:cf:f9:e8:48:1d:
da:93:36:d3:6d:4c:2d:fc:1f:3c:77:78:6b:31:42:ab:7a:12:
fd:61:5a:06:77:d8:be:e1:8c:fd:ec:85:6a:96:9f:6e:e7:db:
2d:4b:e8:62:ca:29:59:2b:0b:0a:2d:ff:bb:6e:f6:5a:4c:f8:
79:f7:94:f9:ec:e0:0d:72:68:c4:50:ac:d7:99:7b:30:6a:49:
07:af:8d:ac:6a:5a:7c:52:f1:a5:d4:42:ab:fb:18:7b:70:35:
2b:9c:7e:f0:c8:bc:c9:0d:90:14:5e:e8:89:79:a4:af:24:ea:
b4:37:7f:80:28:70:e3:10:f0:0f:93:74:f4:b2:ae:97:b2:08:
3a:3a:31:be:87:89:b6:2c:2a:69:3c:f0:cf:cb:4e:ff:43:31:
ec:a6:be:dd:99:f1:88:6a:ec:29:58:af:73:d7:f2:f5:34:cd:
0f:de:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:32:28 2026 by rpki-client