Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier: WkCZ5+58wYlX9WQb+6IjqbPc+gNR+cC/FJhCa6cpSXg=
Subject key identifier: BC:E9:FC:7C:7F:C8:12:C6:39:9B:1A:09:C6:B5:13:34:FC:00:C7:6D
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 01A17EBCBC53F2E5F29EF65F99FBF9855737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number: 0648
Signing time: Tue 27 Oct 2026 19:01:00 +0000
Manifest this update: Tue 27 Oct 2026 19:01:00 +0000
Manifest next update: Wed 28 Oct 2026 19:01:00 +0000
Files and hashes: 1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: oVDdJ3eAIa4lRAJTxL2i0oXbllsf88ld8Hf6re8lwSw=)
2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:bc:53:f2:e5:f2:9e:f6:5f:99:fb:f9:85:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Oct 27 19:01:00 2026 GMT
Not After : Oct 28 19:01:00 2026 GMT
Subject: CN=bce9fc7c7fc812c6399b1a09c6b51334fc00c76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:93:e9:85:89:1b:dc:1f:3f:e2:31:dc:61:
73:dc:3f:90:10:4f:d8:43:e8:5b:1f:82:bf:38:ac:
5b:46:ea:96:9e:a8:03:ca:a7:7f:75:4b:5a:35:2f:
90:69:d9:2e:5b:38:1e:df:43:0a:b5:45:36:fb:82:
04:d5:fe:4a:89:cb:5e:92:8b:8f:89:ce:e5:de:42:
e8:de:37:f0:a2:22:dc:a0:76:f4:2f:0b:2c:55:d9:
2f:47:0a:e0:f9:4f:df:6c:e9:ff:44:6d:55:3b:74:
52:d7:0f:ca:65:f4:6b:2e:da:a7:56:82:21:2d:f0:
30:4f:a7:f4:fb:fd:bc:78:6c:e6:f1:83:43:ce:15:
ef:1e:bd:95:de:ac:e9:5c:7d:23:41:95:a5:fa:b6:
da:28:97:b7:eb:05:7f:e0:63:79:12:0a:da:dd:98:
80:c1:e2:ac:b2:3b:00:98:63:71:e6:30:f8:7f:52:
9a:3c:9c:3a:f1:e1:00:77:5a:27:b0:00:02:a2:09:
63:46:c0:7c:28:e9:d3:91:9a:b3:e0:8c:fa:0a:90:
b4:2d:db:51:a0:eb:0c:21:2c:53:51:69:b0:72:80:
75:6a:bd:fe:0b:6c:63:c5:ef:0a:a9:91:98:b6:2d:
1d:86:e0:ce:48:9f:c5:8d:84:ec:15:eb:f0:e5:4c:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:FC:7C:7F:C8:12:C6:39:9B:1A:09:C6:B5:13:34:FC:00:C7:6D
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:5b:9b:03:c8:f6:0c:7e:af:0b:91:4c:ae:58:c5:46:48:
9a:f5:7f:9b:15:a4:d6:c8:0c:79:79:ad:b3:53:36:94:31:69:
56:78:57:6b:ee:05:e8:32:20:e7:de:3e:42:4b:5e:a9:7d:7c:
8b:ad:4b:46:8e:97:19:02:32:c9:f0:d6:41:cd:13:27:a6:5a:
78:a6:76:38:bd:51:43:25:84:47:36:3e:08:bc:b0:dc:5a:e2:
20:2f:97:82:6b:3c:75:eb:63:7b:87:0e:09:b8:e4:ee:76:0d:
af:46:ca:47:1b:d0:89:b4:a8:3b:58:b5:67:0c:18:2d:c7:0e:
ec:64:fc:7d:ad:e0:2a:a7:4d:c7:d4:71:7b:7f:36:16:38:a0:
a9:97:cd:86:22:dd:fc:b3:fd:68:f9:3c:11:86:64:d7:4d:23:
87:37:60:4a:4a:ef:df:69:61:38:4f:96:41:d7:d8:e9:22:b3:
9d:35:39:8d:e9:9e:9e:92:aa:b6:6a:4a:4a:73:ca:33:79:db:
16:7c:a1:d5:32:71:63:cf:b1:4b:33:6b:4d:af:64:79:9a:7a:
e4:5d:87:94:22:7e:23:8a:95:3b:8f:d2:ed:9f:e3:50:99:be:
c2:16:69:e9:f4:27:aa:21:2a:9a:a7:c5:37:d0:06:cb:f7:7b:
f8:cb:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:41 2026 by rpki-client