Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: GLZZfVyTzNLFaNE8/qxwWlJ93rIa+eOccZlLUIiUHGY=
Subject key identifier: 89:C7:D2:9C:C5:C1:E0:58:A6:81:10:82:DF:40:07:89:1F:41:86:AE
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 01A16EA4E54F253EA3CEB4770E30EAF55DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 19A0
Signing time: Sat 24 Oct 2026 16:01:02 +0000
Manifest this update: Sat 24 Oct 2026 16:01:02 +0000
Manifest next update: Sun 25 Oct 2026 16:01:02 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: cXgAQEAYiaEOhLxI9AZSIAt2UCkIycTEqTo8c+6EKN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:e5:4f:25:3e:a3:ce:b4:77:0e:30:ea:f5:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Oct 24 16:01:02 2026 GMT
Not After : Oct 25 16:01:02 2026 GMT
Subject: CN=89c7d29cc5c1e058a6811082df4007891f4186ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:b6:29:7b:00:5f:fd:51:ce:8f:be:1e:4e:
28:11:d1:93:6f:ba:ab:d7:a9:4d:73:cc:a0:ae:ce:
03:ce:3b:40:02:82:9a:9c:ad:96:73:f2:7e:d2:a5:
80:15:75:7e:53:d4:e3:e5:95:d4:f9:ef:b6:08:88:
eb:4d:de:b2:90:25:3b:36:30:98:f0:7b:7d:db:c3:
f7:0f:0f:e3:35:9a:aa:19:0a:b2:4e:ca:ba:74:06:
2a:ee:2a:f2:91:ef:19:cd:12:58:a4:f7:07:15:79:
c5:57:f6:ae:c1:02:55:45:be:98:96:72:01:1b:45:
b0:f2:93:8e:71:52:e5:c0:d4:c2:56:b9:d3:4e:6b:
58:61:c8:37:81:a0:5e:2f:14:70:57:b7:fa:b4:87:
fe:33:6f:95:b7:df:30:2c:2b:06:34:36:f5:c6:31:
0c:72:69:e5:40:45:b0:9d:58:1d:65:00:d3:e6:84:
18:86:87:6c:9b:8d:2d:6f:6e:4d:5d:82:91:a1:3f:
73:a2:13:f9:ac:e5:ec:26:25:fc:de:15:56:3f:4c:
17:51:83:77:5a:42:64:40:91:a7:65:62:ff:15:73:
80:e5:1f:7a:7b:26:19:e2:d8:a9:c7:c4:ab:8c:3b:
d7:6b:4b:80:95:4c:0e:92:7b:7b:e6:98:95:bd:ed:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:D2:9C:C5:C1:E0:58:A6:81:10:82:DF:40:07:89:1F:41:86:AE
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:ca:b1:0c:30:7b:de:e8:26:4c:76:ed:b9:37:df:ce:ce:
68:ca:f7:9e:83:66:32:d5:8e:6e:64:74:e8:d1:91:50:ba:9f:
1d:af:94:90:8f:e4:4e:b1:3f:4c:fd:3c:aa:d9:23:0e:66:63:
8d:ad:08:19:32:76:e5:3a:81:dc:ab:aa:b5:c0:14:75:11:2f:
8c:c9:a8:e4:c2:84:25:ea:fb:9a:86:2d:4e:fd:d2:b3:24:0a:
1f:ee:66:78:a6:56:d3:2d:01:f2:53:c1:54:8f:62:b3:61:58:
0f:2b:56:07:fe:cf:62:29:ad:7a:d7:d4:a3:24:a4:7c:b5:32:
e1:90:32:f2:05:74:3c:9d:38:0a:24:78:8a:9d:22:81:cd:f7:
ce:59:1b:82:5f:10:a0:00:25:d5:05:df:f9:99:57:a4:8f:97:
e2:21:c4:00:21:2c:6b:f3:0c:f9:3b:04:4e:a9:c4:65:04:27:
4d:44:1f:a7:f1:c2:c5:80:3b:d1:6b:ce:9f:68:4c:b4:7b:8e:
ad:33:fc:67:57:8a:ec:71:77:43:a4:c5:70:75:e9:a5:20:ed:
29:64:f8:b3:56:f1:eb:e9:86:c2:43:0b:38:c5:2d:c5:4a:ec:
13:9b:e9:67:f7:65:d7:61:5b:f8:a2:4a:6c:41:52:c5:5f:56:
bf:4c:fe:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFupOVPJT6jzrR3DjDq9V3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2
NWMwNWEwHhcNMjYxMDI0MTYwMTAyWhcNMjYxMDI1MTYwMTAyWjAzMTEwLwYDVQQD
Eyg4OWM3ZDI5Y2M1YzFlMDU4YTY4MTEwODJkZjQwMDc4OTFmNDE4NmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDi2KXsAX/1Rzo++Hk4oEdGTb7qr
16lNc8ygrs4DzjtAAoKanK2Wc/J+0qWAFXV+U9Tj5ZXU+e+2CIjrTd6ykCU7NjCY
8Ht928P3Dw/jNZqqGQqyTsq6dAYq7iryke8ZzRJYpPcHFXnFV/auwQJVRb6YlnIB
G0Ww8pOOcVLlwNTCVrnTTmtYYcg3gaBeLxRwV7f6tIf+M2+Vt98wLCsGNDb1xjEM
cmnlQEWwnVgdZQDT5oQYhodsm40tb25NXYKRoT9zohP5rOXsJiX83hVWP0wXUYN3
WkJkQJGnZWL/FXOA5R96eyYZ4tipx8SrjDvXa0uAlUwOknt75piVve3I0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInH0pzFweBYpoEQgt9AB4kfQYauMB8GA1UdIwQY
MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt
N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj
LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLXKsQww
e97oJkx27bk3387OaMr3noNmMtWObmR06NGRULqfHa+UkI/kTrE/TP08qtkjDmZj
ja0IGTJ25TqB3KuqtcAUdREvjMmo5MKEJer7moYtTv3SsyQKH+5meKZW0y0B8lPB
VI9is2FYDytWB/7PYimtetfUoySkfLUy4ZAy8gV0PJ04CiR4ip0igc33zlkbgl8Q
oAAl1QXf+ZlXpI+X4iHEACEsa/MM+TsETqnEZQQnTUQfp/HCxYA70WvOn2hMtHuO
rTP8Z1eK7HF3Q6TFcHXppSDtKWT4s1bx6+mGwkMLOMUtxUrsE5vpZ/dl12Fb+KJK
bEFSxV9Wv0z+DQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:08:26 2026 by rpki-client