Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier: k6ocpJss79bDTJcmbUlTdPvB8+Kh9gh0sfO0u2olkMw=
Subject key identifier: 25:92:5D:BB:95:57:8B:3B:95:99:D6:26:66:F7:F1:E2:D6:65:FF:09
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 01A0897A363CF6D1A5780E26EEFFF9643F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number: 05C9
Signing time: Thu 10 Sep 2026 04:01:22 +0000
Manifest this update: Thu 10 Sep 2026 04:01:22 +0000
Manifest next update: Fri 11 Sep 2026 04:01:22 +0000
Files and hashes: 1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: 4PeiE7j5D0eYBtiJSvpkDUWXIJ+S785+cmYPaobOJg0=)
2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:36:3c:f6:d1:a5:78:0e:26:ee:ff:f9:64:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Sep 10 04:01:22 2026 GMT
Not After : Sep 11 04:01:22 2026 GMT
Subject: CN=25925dbb95578b3b9599d62666f7f1e2d665ff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:18:43:4e:e7:a2:14:aa:43:bf:5f:96:39:
9e:75:57:af:56:08:f3:e4:38:ae:a5:cc:bb:67:f0:
7c:1a:27:15:93:b1:12:26:79:96:cf:d8:ee:e2:0a:
bf:ca:68:0f:c1:3a:c3:ae:61:bd:cc:c3:7b:0a:8d:
da:9c:cd:21:61:37:59:75:7c:82:14:57:fe:e1:6b:
6d:90:d8:7c:6e:f8:24:35:37:77:41:b9:4d:52:40:
75:76:e6:4d:4c:e1:bb:1f:33:21:57:ae:0b:d5:d7:
88:a6:56:8a:76:fa:18:3a:0d:75:b4:8f:37:b8:49:
83:58:cf:01:52:f7:4f:46:37:05:cd:48:fa:73:97:
53:e3:dc:12:7f:3a:ea:87:36:dc:3d:c6:d3:4a:47:
b6:af:36:73:56:ac:7d:99:40:23:20:33:e7:bf:ac:
28:77:86:3c:e4:c9:21:f3:56:06:0c:ff:f5:e5:3d:
4d:f9:58:ce:7c:17:c0:90:a4:83:e8:bd:45:51:9b:
a9:4f:84:83:5e:8b:ec:09:d3:77:61:76:6d:a9:5c:
96:cd:d3:7e:20:60:ba:2d:f4:75:a0:de:c4:33:bb:
26:7d:08:cc:1e:b3:64:cf:9b:57:a8:16:3c:c4:60:
8e:af:bf:68:df:c0:63:b5:b7:9a:94:7a:bb:f8:86:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:5D:BB:95:57:8B:3B:95:99:D6:26:66:F7:F1:E2:D6:65:FF:09
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:cf:24:0f:14:37:7f:1a:08:2f:d0:e5:14:81:a1:18:32:
e2:bf:a6:46:a1:b7:93:83:b9:86:ee:13:49:bb:0f:75:95:83:
ed:ae:f3:51:86:62:fa:02:95:ef:6b:1e:6a:9c:62:05:92:39:
88:69:9c:82:8b:50:49:69:55:0f:65:32:9b:83:60:96:60:b7:
de:b8:03:c3:f3:c8:95:3a:34:5d:07:10:07:10:18:1e:fd:4d:
7f:a2:db:32:7f:51:0a:cb:78:c9:0d:eb:c4:6d:de:63:15:3e:
cf:bf:c4:b2:98:f1:f0:20:4c:3c:c7:db:45:d0:f6:cf:33:35:
cf:78:91:37:da:5b:66:e9:c6:91:f2:5e:1a:33:3a:03:96:71:
8f:11:9d:e7:ca:ba:8f:1a:31:68:c1:d3:72:d7:32:ef:d1:45:
6c:c0:cd:8c:74:58:b8:32:94:f7:83:b2:29:71:25:ae:f5:20:
4a:b4:4f:77:d5:be:dc:18:32:be:9f:78:41:01:85:7c:83:28:
31:17:2c:4d:1e:02:9f:d7:1e:a1:6d:0d:32:3d:6a:b7:63:9e:
81:bc:e9:15:23:d9:7f:eb:a7:b4:12:eb:eb:bd:29:7c:82:b6:
e9:1f:64:73:b1:bc:fe:ff:8b:d8:1f:f0:cb:b6:e3:b4:9d:ef:
ca:48:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:12 2026 by rpki-client