Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: X/ubLXVev4RuBb74jjQqGUP2LEViTSnLdHsBh4fVqhI=
Subject key identifier: 86:F1:35:FD:EF:06:2B:02:4B:DD:70:6A:DB:44:89:67:D8:17:2B:90
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 01A14FBEA01844F0853E2E664C30A88C5B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 1990
Signing time: Sun 18 Oct 2026 16:00:55 +0000
Manifest this update: Sun 18 Oct 2026 16:00:55 +0000
Manifest next update: Mon 19 Oct 2026 16:00:55 +0000
Files and hashes: 1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 43nW9l1BBaw3lfVlp3wMJPploLUmCOZkCsWw4+b+Otk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:a0:18:44:f0:85:3e:2e:66:4c:30:a8:8c:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Oct 18 16:00:55 2026 GMT
Not After : Oct 19 16:00:55 2026 GMT
Subject: CN=86f135fdef062b024bdd706adb448967d8172b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:64:0b:b9:a0:8a:ad:39:47:ce:3a:6b:6b:
02:2d:3f:8b:87:3d:db:8c:da:e8:9a:f4:54:ca:94:
0a:68:be:7f:00:5d:1f:7f:93:9c:33:b5:0b:b4:d8:
da:61:c1:47:0e:6d:9e:bf:e3:26:f6:f1:6d:35:cd:
9b:c4:b7:a7:a2:ca:93:43:6d:84:33:7f:29:7f:bb:
5b:96:ab:05:02:fe:f5:88:68:54:97:6f:98:0f:69:
b3:07:c1:32:26:3c:4b:33:92:08:0b:90:f4:c0:dc:
11:8b:85:a4:fd:44:fa:30:64:7e:ac:0a:2d:8d:86:
ff:e9:5d:41:08:50:f2:38:1f:12:d0:0b:45:60:5c:
7c:37:7b:4d:eb:5f:e6:bd:db:d2:d5:2a:5c:c2:28:
df:54:a5:88:2a:c6:be:01:a5:7e:bc:3f:1f:a1:ea:
70:e7:54:77:af:b1:6f:fe:00:22:06:7a:92:0c:47:
15:a1:30:69:1a:9b:60:6d:e8:ce:74:a1:e2:fe:2c:
01:26:0d:33:b2:d5:69:c6:60:8f:3a:ed:10:c0:a1:
39:e2:b0:09:7c:0f:e5:9f:dd:ba:6b:07:bc:b7:d2:
2c:4f:6c:e2:22:75:d9:ef:e1:c6:b0:2b:e6:9c:ae:
36:35:3e:6a:83:62:3e:49:64:be:97:be:3e:ee:50:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:35:FD:EF:06:2B:02:4B:DD:70:6A:DB:44:89:67:D8:17:2B:90
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:43:8a:36:2b:67:5f:f4:e1:1a:72:e8:8c:cf:7b:cd:5f:45:
ba:0b:84:36:c5:e4:f2:66:d5:a4:76:4a:cb:cd:df:ca:1c:ac:
74:e2:42:cd:b8:e0:fb:fa:39:fc:14:ed:61:a0:fe:28:b8:65:
88:dd:43:f7:04:fc:67:1a:bc:f8:32:9b:52:ec:a8:7c:c3:fe:
ad:8b:b7:62:65:a7:1b:00:3a:51:73:94:8b:f0:bd:d4:23:de:
df:7a:be:ab:49:f9:d0:a2:6e:d0:0c:24:8a:9d:9b:54:59:c7:
7d:6f:c4:83:31:0a:dc:b5:1d:cb:56:19:0e:f5:53:eb:ab:3d:
1f:3f:e3:79:b9:77:f3:74:1a:df:87:8c:bb:95:e5:d7:9b:db:
cc:25:7d:68:af:11:a6:83:cd:85:76:d2:39:5b:5b:f0:cd:b8:
1e:3b:7a:40:aa:8e:24:6b:3e:b8:50:f2:d3:5b:8a:79:fe:24:
9a:3a:20:6a:74:9d:5f:c0:56:49:68:8a:9e:d5:82:95:b4:e6:
a0:98:4f:33:d1:7f:75:09:fc:6c:46:ce:46:b1:62:83:ee:9c:
49:12:03:f5:21:a8:0c:6b:5c:d9:a1:57:c0:e5:1d:31:96:77:
78:5f:d2:67:b0:b5:e6:a5:d5:30:e5:b5:78:ba:e8:9a:cc:ac:
a5:68:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:43:18 2026 by rpki-client