Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File: HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier: Vn3DAA2UxNf80Dm7HU2/hYw+M71616SW8E+ubaswd6c=
Subject key identifier: 88:C4:C7:42:35:A7:03:3D:A6:AA:55:E7:C6:26:E0:8A:39:FE:CE:F7
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: 019D3A1C6B635E13F1049427A41F1490190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number: 11E9
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: Gmr6DvFecGNz7K0pxzX4Fgvg1Ek.roa (hash: vp2rFqOY6nmUicsFoLP4/cfheUkk9r3+DgY732ObGfU=)
2: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: BVREILXmeDqvAljkOdL76qozyJLXJ9i4qnL81DCR6sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6b:63:5e:13:f1:04:94:27:a4:1f:14:90:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=88c4c74235a7033da6aa55e7c626e08a39fecef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:2c:36:e5:30:0e:75:03:b0:9a:62:52:a5:
03:be:f7:80:89:20:87:45:1d:8f:49:08:f9:2f:d0:
a0:a7:61:83:c2:42:6b:bd:93:5a:1d:8a:29:08:36:
e7:fc:d1:10:a7:d6:25:1d:e5:5c:4c:24:26:33:f7:
38:bb:57:ad:62:ef:4d:ba:de:23:dd:e8:b5:d8:a5:
9d:eb:f8:50:b9:03:d6:ae:50:b9:a1:68:8f:e9:16:
35:28:06:33:5e:ac:cb:c3:68:27:95:de:a9:ce:a7:
6b:84:25:f6:37:4e:e3:18:ba:e6:bd:27:d5:b4:0f:
8e:0a:3f:88:c6:90:12:cd:93:10:2d:7a:2c:66:15:
b3:e4:a0:de:f8:c1:c4:f5:b7:d3:f4:38:8c:b8:e7:
79:41:de:11:17:64:16:d2:a4:e2:2a:6a:8b:09:1d:
e7:22:90:13:c1:25:37:43:7d:b3:90:20:9b:0d:98:
ea:92:1f:37:61:7e:85:64:74:2b:70:2d:08:ad:29:
00:7e:37:c0:c0:dc:19:2e:91:54:58:36:2a:35:60:
3f:f6:b1:fc:12:52:bb:53:8c:42:c9:e7:69:86:52:
48:c0:ef:ee:74:7c:85:eb:6a:53:04:35:61:8e:f1:
52:d9:90:d1:7c:37:43:74:d1:ad:2f:53:f7:aa:fc:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:C7:42:35:A7:03:3D:A6:AA:55:E7:C6:26:E0:8A:39:FE:CE:F7
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:ad:0d:e3:f7:2f:3b:5d:3a:15:92:3b:a4:6e:bc:12:09:
d0:ce:d8:bb:53:f9:15:3c:a7:7f:99:05:53:10:93:b6:eb:91:
fb:97:1d:3c:22:40:c6:5d:b3:89:6a:e7:0d:dc:39:8d:2b:e8:
f7:cf:e4:5a:51:f4:e6:90:42:be:77:0c:aa:27:84:3d:02:fe:
ca:f8:27:36:61:12:ba:13:4a:6a:00:11:02:ae:f8:16:19:54:
51:84:99:2d:d1:bf:18:2a:7c:c4:e3:e0:d0:3a:9e:63:20:33:
b7:9f:d3:21:76:b9:0d:3e:3a:02:b3:ac:3f:f2:0e:b3:15:76:
47:65:39:3b:79:26:c1:2c:17:70:4b:aa:7b:75:d3:c7:79:1b:
79:3a:61:4e:16:98:44:b5:f1:47:71:34:06:e7:96:f8:54:45:
f2:6b:88:47:0f:69:dd:72:12:20:57:2b:22:d0:42:ce:9d:3b:
16:5b:6b:91:0a:9d:2c:78:a7:90:be:86:55:41:15:e6:5c:ed:
80:a9:90:89:fa:29:45:5f:3f:00:25:03:74:89:37:d8:1e:0e:
5a:8f:e2:af:8a:6f:89:5d:e2:f2:a6:a9:e7:91:fd:7a:55:84:
75:3d:94:cc:b3:0f:f2:bf:82:70:97:96:c3:3d:59:36:36:45:
8a:38:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:50 2026 by rpki-client