Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: vIkEDWW8F3tcGEVxq5jKpd6FIDOw0gW945YKpDd3WGw=
Subject key identifier: 29:1A:E0:E5:1C:35:05:C0:50:0D:91:0C:87:6A:C9:18:81:23:16:F6
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 01A06E70DCD0F5FC3FB5F678CFF3993F36C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 22:01:25 +0000
Manifest this update: Fri 04 Sep 2026 22:01:25 +0000
Manifest next update: Sat 05 Sep 2026 22:01:25 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: qy90ckc/8ft9IS6k6W4ALqgIVn9BuigfGgzzQqEgRrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:dc:d0:f5:fc:3f:b5:f6:78:cf:f3:99:3f:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Sep 4 22:01:25 2026 GMT
Not After : Sep 5 22:01:25 2026 GMT
Subject: CN=291ae0e51c3505c0500d910c876ac918812316f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:69:0a:b9:71:a0:57:03:75:e6:5a:6f:1a:
31:50:d3:80:22:7f:b5:5e:2f:3f:5c:38:46:9e:1c:
03:56:51:ba:65:22:4e:58:f2:c7:a4:29:1d:78:52:
79:f1:f5:93:15:1f:3b:a9:11:79:d8:62:42:03:b1:
cc:44:99:ea:0f:78:e9:7c:73:d8:dc:15:ae:e2:8a:
e4:92:01:68:76:54:71:29:15:17:ba:30:ae:ba:e3:
16:b7:85:f7:0d:23:19:c8:ba:57:ef:19:2e:68:27:
d8:1f:66:e2:3f:cf:15:41:84:95:5b:24:a5:fa:57:
57:0e:61:01:34:d9:81:42:5a:18:ae:63:64:71:b5:
e8:da:b3:6a:ee:22:a3:18:05:1f:e4:00:85:4d:8d:
07:cb:00:4b:b3:c3:1c:b7:8a:60:10:40:8f:73:4a:
92:db:e1:63:6e:ef:b9:d2:81:60:ef:6a:66:5e:f1:
85:dd:61:da:43:37:90:a0:6e:8c:3f:dc:3c:49:6a:
8a:b8:49:f4:0e:70:8b:c9:38:b0:42:b0:09:67:86:
ff:0d:b1:ea:21:73:cb:86:ef:86:4c:30:df:93:37:
1a:b0:b5:bc:7b:8c:f5:14:0a:1b:b5:b5:bb:48:e0:
19:b0:53:e1:e6:59:10:2b:97:49:62:a1:ad:9f:8f:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1A:E0:E5:1C:35:05:C0:50:0D:91:0C:87:6A:C9:18:81:23:16:F6
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:82:95:da:19:7a:3d:49:5b:54:3a:b3:d1:e6:8d:47:3f:
fe:a8:e1:6b:dc:7b:2e:c0:0d:93:51:cf:08:86:d1:4e:c6:f6:
0f:e4:e2:10:47:a3:c7:d9:2c:ea:d4:b3:d7:e3:6f:e4:3c:45:
0d:d2:b6:91:a7:a6:9a:34:9a:53:19:90:08:3d:96:ed:65:b1:
18:8e:ab:a0:10:4f:70:d6:5a:77:4d:95:9d:8c:8a:0b:40:33:
48:7e:5e:4d:0c:26:44:9f:cb:4d:5b:50:0d:d8:5d:c5:63:5b:
c7:87:93:60:32:70:12:ea:76:8a:ba:93:35:4d:30:e4:80:d8:
7e:b5:90:fe:bf:69:a6:25:a0:0f:48:23:30:bd:88:81:4b:30:
ec:88:8f:59:c7:89:39:0b:4d:21:89:f6:94:8b:cb:ac:e5:08:
28:02:f5:20:6a:4e:0a:85:65:0f:a1:35:b6:36:e1:3c:7f:02:
4a:27:9c:c6:4b:2d:c6:f8:1c:b6:ce:ba:3f:44:ab:71:b0:50:
50:67:e7:be:08:b3:35:13:34:13:af:fb:fb:9c:0b:06:b2:39:
cb:6b:61:de:55:1a:80:71:df:0f:7f:cc:ec:e2:fa:ef:99:bf:
3e:47:8b:2d:5f:ef:ef:86:fd:95:ba:b6:ce:0d:0b:fa:2b:46:
da:ea:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:41 2026 by rpki-client