Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: ZncX89FetnuiDiKTJTSw6j0iEnC9vWYX2RPy8v+rviU=
Subject key identifier: 6C:6F:08:09:D2:FF:9B:37:03:85:56:9B:86:CC:CA:6E:6A:95:FB:07
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 019D3909BD3269270558CF6B92CE3EA8F683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 1772
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: XTYQr7lDjcgUUK9MtJbzfjYp09Mb0UUQUVVasWQOw8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:32:69:27:05:58:cf:6b:92:ce:3e:a8:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=6c6f0809d2ff9b370385569b86ccca6e6a95fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:1c:cf:30:b0:0a:d6:c1:8a:a8:7f:d3:31:
d4:b5:2a:e0:a4:dc:44:3d:9b:f1:cf:3f:bc:f6:19:
90:dd:0e:72:4e:46:18:2d:54:ac:53:34:ff:09:28:
4d:70:3a:f2:eb:69:e9:00:9b:dd:0e:a4:85:82:41:
cf:72:a0:b5:e3:c3:67:76:cb:9b:fa:a8:ac:55:a8:
1f:b5:0e:84:1a:88:ad:e0:ce:68:3d:b9:8b:7b:97:
58:b2:18:40:9a:7a:6a:c4:4a:8a:77:e9:96:ac:d8:
5c:ab:0a:6d:f4:43:ee:38:cd:78:de:1c:66:28:09:
d2:71:e5:c4:99:5f:c2:aa:e9:02:55:3b:b9:c9:8c:
73:6b:29:97:9c:04:0a:07:ed:44:96:cd:6a:0b:9d:
2f:d9:97:5c:f5:bf:6f:6a:dc:ee:45:b9:a2:87:a7:
9a:00:8e:61:d9:cc:21:ef:f8:32:c7:5d:dc:3d:68:
4d:22:cf:23:11:a7:3a:d2:40:43:f0:87:09:83:24:
bc:49:14:e4:3d:9e:dd:55:bc:57:3f:42:8e:90:8d:
71:3c:0d:69:e1:11:7b:c9:5f:f2:78:33:d8:bc:40:
2e:ad:41:f1:f4:85:d0:45:db:bb:28:24:43:ad:5d:
85:12:8c:c3:aa:7c:71:48:07:ca:6e:63:01:6b:e2:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:08:09:D2:FF:9B:37:03:85:56:9B:86:CC:CA:6E:6A:95:FB:07
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:14:7f:b7:dc:31:84:28:83:35:5b:9c:16:fe:00:84:7e:
c1:1f:b1:e5:ab:0a:4d:36:b2:7a:fa:5c:f3:64:5d:be:2c:58:
ec:31:b0:58:a1:2c:e7:a8:b9:76:67:aa:2a:75:9e:9e:29:62:
59:ed:a5:e0:13:0a:d5:0c:49:b7:93:ef:4e:b2:4c:98:21:e4:
86:25:e2:b4:10:74:b1:c9:3e:27:b5:64:77:9d:27:24:b1:06:
35:7e:e8:68:b8:e9:8f:18:48:43:d3:4b:f6:6a:cd:b8:b1:7c:
9f:06:5a:b8:04:46:ac:f9:19:10:12:23:75:f1:e5:cc:67:b3:
db:4c:05:2d:b0:61:14:e0:ea:43:0c:51:85:e5:0a:9d:90:37:
ad:17:32:49:b4:55:47:ab:f8:5f:a0:86:f0:3e:7e:b1:3a:d0:
99:d9:09:f0:f6:0e:b4:2a:ec:d2:a0:63:a4:c4:c2:41:cf:fa:
6a:96:aa:a3:e5:dc:40:0c:ca:30:d0:49:54:66:80:34:0b:3a:
94:66:35:24:4b:cd:b3:43:29:07:77:f6:fe:52:f4:d5:cd:ed:
9a:2a:c8:98:95:77:82:ac:78:9c:28:f6:31:db:02:f7:ef:22:
93:6e:66:df:98:6c:ca:a7:da:a7:0c:15:9f:2d:0c:1d:90:16:
b2:5e:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:38 2026 by rpki-client