Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
File: HwGmewzRspUViU7OlrUurL4EG9Q.mft (raw, json)
Hash identifier: Z2LteNZaP+ffW5wbfOFbZtZDMxsXP7MnPWn4WBM/HR8=
Subject key identifier: D6:84:9F:08:08:4D:61:A0:EC:9F:6A:44:00:9D:67:2A:2B:1A:CA:D7
Authority key identifier: 1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
Certificate issuer: /CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
Certificate serial: 019D382EA3A1B63CA3076AA507535DE1E59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
Manifest number: 0BC1
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: HwGmewzRspUViU7OlrUurL4EG9Q.crl (hash: hTibgS/8U85TGXBmJ85zEzCiuIM94NvrmzGySngfI4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a3:a1:b6:3c:a3:07:6a:a5:07:53:5d:e1:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=d6849f08084d61a0ec9f6a44009d672a2b1acad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:ba:c8:60:ef:67:52:6e:e3:e4:94:3c:41:
8e:99:72:50:56:02:c1:a4:3e:ad:b2:11:1c:6a:ce:
18:4d:27:e8:66:bd:be:69:59:f5:3c:0b:0f:d9:c2:
e7:0d:4f:e9:6a:84:f1:6f:a6:58:9a:e4:66:6c:29:
53:58:5a:e8:a8:be:2d:8b:29:03:8f:a8:e4:53:ef:
44:8d:c7:d7:45:9d:14:a2:f6:29:81:b6:b5:66:d4:
a9:6e:3c:3e:c7:ec:1f:a8:68:04:1f:53:2d:20:6a:
e4:0c:7a:66:80:0b:eb:c5:64:82:24:89:d5:9d:f5:
38:79:40:17:17:81:13:a3:7a:71:52:0b:8e:56:a9:
c3:00:87:8e:32:dd:a5:27:3f:49:30:da:70:ce:8b:
34:37:1f:49:cb:c9:a3:e9:77:3b:e6:58:c9:73:b9:
c0:dc:9d:fc:32:dc:c7:95:2d:90:24:c4:bd:cf:ee:
89:0d:0c:87:6b:86:2d:88:5e:1d:23:34:14:27:4f:
47:4a:ea:f4:ec:f8:4c:86:f6:9d:fa:9d:8e:f0:35:
21:79:71:ed:1c:d6:f9:3b:6f:f5:54:7d:ac:bc:d0:
3d:06:2d:46:b3:75:db:2d:26:74:8a:ab:d3:32:49:
51:e4:e1:cc:57:33:e6:d8:89:b6:3b:ac:70:a9:c4:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:9F:08:08:4D:61:A0:EC:9F:6A:44:00:9D:67:2A:2B:1A:CA:D7
X509v3 Authority Key Identifier:
keyid:1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:72:d9:04:94:83:59:0b:c5:43:dc:51:ab:fb:b6:3a:98:
1d:6f:09:40:7d:ce:18:ec:6d:b4:56:f4:51:bc:cf:29:70:41:
d1:99:ed:90:6c:d2:41:e8:ec:bf:3e:c2:a1:3d:8c:10:32:a7:
43:98:98:20:24:c9:50:c9:83:16:f9:86:8d:f4:5b:88:82:c0:
03:ba:ab:0d:f8:e5:bb:c2:61:92:bb:ee:9f:36:2a:84:47:9e:
ba:ee:20:0c:6b:ed:57:34:e6:fd:ab:74:c4:49:b9:1f:bc:94:
f4:ef:4d:91:62:27:4a:f5:2d:32:41:31:2e:b3:ef:a2:cf:8a:
ec:f9:69:84:e8:12:04:d7:ba:bf:08:51:5e:1f:54:4e:00:2d:
b2:12:e5:ac:05:80:1a:cb:e0:fb:57:2d:56:40:6b:af:e9:d8:
cc:6c:e0:52:0e:4c:ea:e7:ef:74:f6:13:57:2e:82:e6:08:89:
34:1c:c8:ce:22:7a:4b:56:68:f4:c1:bb:fa:21:b2:d1:63:39:
95:00:e7:5e:4d:bc:bd:ba:9d:08:e0:13:f7:0e:48:b6:f2:c5:
7f:eb:46:94:d4:e0:e4:c5:31:35:ff:2c:cc:87:8d:cb:8a:dc:
53:8e:59:00:1d:3e:27:f6:51:bd:78:10:49:34:65:a8:b9:0e:
1a:27:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:51 2026 by rpki-client