Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: p46LtNNjVhHwKLJMeaVAhvO2cOgNbEcxOcHnkSXxWFQ=
Subject key identifier: 7B:E1:7A:D0:3A:1B:6E:E3:DE:9F:C1:87:F4:C1:7F:B0:3D:CB:51:20
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019D39E5E4ADEC08CA02C2D3DB4EC77D810C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0F6C
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: TDvOGJXsa2qFg9iUqgKB+BtjRRz35bv2BvUGss7k4sQ=)
2: h5rIzWzGmQpXwRoeIBlSFX0pQ_o.roa (hash: NauXsdOPLqU7sZPDKzPlpcD+oR3XFVkJad/CIxV2JUw=)
3: hYPIQ6KCwLYidc5jqGOZ-EVW5h0.roa (hash: iK2Ok7EMd4gppSvWcsHHP8Tlafr+5R3o2rZRMVBVrVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e4:ad:ec:08:ca:02:c2:d3:db:4e:c7:7d:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=7be17ad03a1b6ee3de9fc187f4c17fb03dcb5120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:8a:fa:3a:82:3c:de:b1:8b:9d:4f:47:99:
a7:b1:74:10:45:b9:08:a6:1f:df:29:48:ff:6a:0a:
1a:7d:2e:3d:cf:7b:08:9e:27:60:af:d3:dc:47:4b:
09:4d:6d:cd:25:7f:01:7a:38:a2:13:b2:6a:4b:fb:
38:49:42:9f:57:b1:b3:45:c4:ca:a9:f0:bf:85:2d:
be:ae:03:b4:ce:cb:c5:11:76:3c:d2:f2:d6:c7:f4:
fa:c1:49:c1:ff:94:fc:73:7a:f3:4e:96:e9:3a:3b:
c3:d8:92:fa:23:30:78:cf:77:f2:70:75:a0:c7:a4:
c8:34:34:53:cf:46:57:c5:e5:e0:65:f8:60:62:82:
ef:28:10:f4:66:c9:05:20:d6:fc:04:6a:a7:16:f4:
fe:55:cb:81:15:6b:7d:5a:30:7d:c9:63:68:1f:12:
40:82:87:dd:79:d7:d7:40:75:de:d4:9c:73:8f:3e:
e8:45:ff:b5:8c:c4:0b:a7:6a:34:1a:b3:db:e0:2f:
74:fb:34:9d:f3:2d:cd:16:4d:06:6e:c4:c6:1b:ef:
89:b3:e6:a2:f0:9a:a7:29:0b:92:0f:fd:96:1b:96:
77:4d:28:3f:9f:6e:7e:45:1c:a2:66:19:6b:0b:d1:
9c:b4:03:ad:af:d6:5b:66:09:1b:87:4a:79:91:a6:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:7A:D0:3A:1B:6E:E3:DE:9F:C1:87:F4:C1:7F:B0:3D:CB:51:20
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:7b:90:b7:32:51:3a:1f:81:b9:2e:e6:fb:f6:68:56:b0:
e0:6f:fd:c5:de:ed:3a:4a:96:7a:8e:2b:e7:c0:ee:c4:bb:e8:
a3:65:df:54:07:ba:03:7f:67:0f:e0:37:47:36:8a:48:d9:af:
93:64:05:2c:06:ec:5e:f9:55:bc:51:5c:1f:8a:9a:e3:98:cd:
82:be:86:a3:b1:fa:94:90:fd:54:40:70:6f:ab:4b:a9:ab:f1:
b6:c5:52:98:99:d5:ee:c8:02:55:68:4c:f2:56:93:10:67:90:
11:50:e2:8f:c7:c3:e7:65:ee:40:c1:23:de:50:05:e0:bb:b2:
d7:5a:09:01:eb:e8:d8:9b:22:75:8b:ac:d7:b0:22:34:b8:b8:
23:b8:e1:ef:09:c7:6e:48:1d:a4:88:f7:c8:20:79:55:87:5e:
3b:a4:56:c3:ac:0e:54:e2:21:fe:a2:a4:b8:6d:e3:6f:68:90:
cf:d3:01:8e:ab:1f:55:9d:05:be:e7:b2:90:aa:c8:ce:00:0d:
2a:3e:59:14:78:a9:a1:d6:76:1f:2f:9e:d9:91:17:2a:0e:44:
58:ae:ac:20:69:00:65:55:6c:89:41:a3:ac:37:3c:a5:ab:71:
e6:8f:6e:c7:04:9f:fe:b5:49:70:16:68:c1:27:34:b7:f7:55:
8c:1e:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:31 2026 by rpki-client