Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: M7ya3laqb4ejB7pQdV4RAXohwBN03SgzP6x9s1/HO/o=
Subject key identifier: 2E:C7:F9:0E:5C:9D:FF:97:CB:97:D0:B4:01:E2:05:72:F6:B0:6B:A6
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 019D3AF84FF7719ED5AB1FF3974598100F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 1773
Signing time: Sun 29 Mar 2026 19:00:44 +0000
Manifest this update: Sun 29 Mar 2026 19:00:44 +0000
Manifest next update: Mon 30 Mar 2026 19:00:44 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 2mDvrz8XAbb0GYCQpKxxqsBrac3ejrhtVwsrBaBSxXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:4f:f7:71:9e:d5:ab:1f:f3:97:45:98:10:0f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Mar 29 19:00:44 2026 GMT
Not After : Mar 30 19:00:44 2026 GMT
Subject: CN=2ec7f90e5c9dff97cb97d0b401e20572f6b06ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:df:66:87:0e:c4:df:43:e0:e2:8c:d4:ae:8f:
f9:0d:a0:33:3e:74:12:10:3b:3f:ef:1a:5f:95:81:
a6:fd:e9:9c:76:5c:57:9d:2c:ab:37:70:a8:48:8d:
13:fc:14:18:0f:07:e0:6a:0d:41:93:1f:b3:fd:97:
3f:98:ef:c4:6c:7a:e2:66:78:93:63:44:ab:48:0f:
e7:32:c6:c8:af:34:68:82:74:4d:13:c4:d6:13:e4:
cd:2b:5a:d6:cd:1b:2a:8d:31:3c:56:a5:48:da:b8:
2d:97:58:58:45:45:0b:59:37:1a:02:33:3d:76:ea:
d5:17:bc:8a:48:93:6c:e1:39:2e:06:7e:26:84:66:
71:ed:d0:b0:09:75:6a:af:17:f3:cb:5e:82:e6:9b:
94:78:25:36:80:99:86:86:ea:a7:43:48:13:bf:c9:
62:94:ba:10:34:b9:9b:ca:ea:ce:6b:34:66:3f:5d:
7e:57:30:df:50:ee:4a:05:be:15:cf:35:a8:be:e0:
19:5d:87:d6:e2:f2:c3:61:ca:53:97:cb:17:0f:66:
2f:77:39:4b:cd:9e:fc:7f:f8:64:b6:30:f6:19:4a:
81:3d:89:ba:88:02:a2:f2:67:a7:0e:d5:3e:fc:8a:
63:6d:7f:e9:01:e7:8f:5e:cc:bc:d6:25:4b:62:7c:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:F9:0E:5C:9D:FF:97:CB:97:D0:B4:01:E2:05:72:F6:B0:6B:A6
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fa:d8:aa:4c:b4:d7:41:4b:b7:d8:08:eb:8d:bd:8a:88:c4:
dc:62:45:7b:ea:9e:ed:bc:c6:62:b4:7d:f1:c5:f7:d5:ff:2f:
ca:4e:ef:d3:0a:1e:61:bb:ca:a3:67:88:eb:f9:1d:fc:2b:6f:
39:be:71:6a:f9:8d:7d:97:b3:33:42:50:6c:01:fc:3a:de:49:
44:d0:de:22:f2:4f:8e:bb:0e:e5:20:f9:51:47:17:a3:db:a2:
4e:33:ba:29:15:ec:9e:65:6d:2f:1a:eb:2e:9c:19:9c:35:ed:
9a:18:da:9b:17:f5:4d:7a:e0:8b:a3:ea:ed:f6:8e:3f:63:5f:
17:3b:b5:c6:e8:e6:6f:b5:be:9a:16:52:56:a8:9c:7a:5a:90:
2d:cd:86:7f:bb:a6:e1:fb:19:57:88:a2:54:35:bd:ce:ce:ea:
8d:ad:2f:70:45:b2:b6:f7:e1:67:fb:b9:bf:cf:92:a3:66:13:
9d:27:96:d1:2b:ce:11:fe:a5:73:86:aa:56:20:79:bc:b6:4b:
21:b7:26:f2:1e:6f:89:83:ca:24:27:42:b1:34:04:94:28:cc:
6d:d1:1a:05:7e:3b:cb:2f:72:96:03:93:ad:f7:18:6e:70:d9:
a9:ba:2b:33:f3:81:b5:26:8b:1a:88:3f:3b:1e:3a:30:7d:f1:
23:12:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:44 2026 by rpki-client