Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: H5EZeRZWbh2hGwrguZoGFLY+U7GegqgZKrFxPXv/k+g=
Subject key identifier: 98:75:09:6B:C7:2A:83:54:4F:09:18:F3:A0:A7:AA:56:02:C8:A5:F3
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019D04E57B550021EAF00AD6FD6C5F30939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 13A1
Signing time: Thu 19 Mar 2026 07:00:41 +0000
Manifest this update: Thu 19 Mar 2026 07:00:41 +0000
Manifest next update: Fri 20 Mar 2026 07:00:41 +0000
Files and hashes: 1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: AlkTZnLkb9mtksRu+ZnDelNBxDU3rQl2Tz27aGKDZxs=)
2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:7b:55:00:21:ea:f0:0a:d6:fd:6c:5f:30:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Mar 19 07:00:41 2026 GMT
Not After : Mar 20 07:00:41 2026 GMT
Subject: CN=9875096bc72a83544f0918f3a0a7aa5602c8a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:b0:73:70:ed:6e:59:5d:f2:5d:0f:cf:f3:
23:7c:30:51:1e:2c:41:c6:79:ca:7f:9a:0d:39:58:
73:a9:ec:fb:f9:18:2b:74:b0:1b:24:70:25:c4:36:
15:1d:ca:b6:50:80:57:ad:e1:cd:61:fc:37:e1:b2:
27:12:6d:4e:16:83:74:fb:55:9a:7d:34:de:fb:e6:
07:b3:a1:4c:e9:32:c5:c9:5f:32:5b:ba:b3:84:d6:
09:1a:22:b8:79:d8:a1:0e:eb:9f:1e:c8:15:c2:a7:
58:fc:7c:a4:02:a4:dc:87:4e:f6:c5:60:75:1a:d2:
48:7d:b0:13:27:f7:fa:92:12:df:18:c0:5a:0c:76:
4d:3b:db:d3:b3:04:8e:0f:9c:61:d0:71:32:bc:4c:
04:e1:41:b4:ca:df:e0:af:d7:61:30:46:83:3b:bf:
3c:8f:d8:2f:cd:d2:62:90:d7:20:80:5f:26:af:0b:
cb:64:5d:44:a2:39:40:90:de:09:1a:f0:ed:2e:69:
f3:ac:19:39:b1:e1:1a:47:c4:9c:0d:ad:b0:aa:ff:
db:a5:6b:8c:da:00:ed:a5:fe:c0:62:80:44:45:fc:
9e:38:3c:8d:36:22:07:13:ef:17:41:1b:37:7a:7b:
a4:f9:b2:c2:3d:c5:72:a4:d8:fd:32:7d:2e:de:84:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:09:6B:C7:2A:83:54:4F:09:18:F3:A0:A7:AA:56:02:C8:A5:F3
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:ce:c5:d2:db:6e:4d:0c:03:e1:8b:32:2c:f6:1c:44:a0:
9b:ac:f6:91:33:7d:6a:15:bd:5b:97:e5:9c:38:73:df:83:6c:
cf:6d:55:51:55:93:72:56:e9:76:94:61:9e:0a:82:ad:44:c0:
8c:66:b2:a2:37:92:b4:50:1d:42:f1:47:e7:22:48:35:0d:cd:
b3:e2:48:5b:6b:4c:1b:e5:c8:c9:d8:e8:9b:35:4c:13:56:55:
2f:86:0d:da:40:db:43:fa:66:25:eb:bc:cb:53:ed:cb:72:86:
28:1c:11:2b:fd:fa:22:00:b9:c9:7a:d0:56:ab:6d:84:d3:f2:
22:98:bc:a6:97:3c:c2:36:b5:58:87:16:e9:e6:69:d6:56:a8:
fe:fc:b6:e2:b4:10:a5:96:af:8d:0a:67:d7:4d:f1:62:b7:c5:
39:0d:ed:48:7e:5e:71:e2:1b:5c:6f:d8:17:eb:ba:4c:9a:e6:
80:ef:03:2e:f2:67:ef:12:dc:25:2c:ed:e0:d4:fe:eb:b3:ea:
53:ba:94:c1:d9:d6:91:2e:ba:59:4d:51:3f:ee:10:2c:04:fd:
30:ac:fb:f0:e2:58:77:00:c9:0e:bd:0b:b9:d1:de:05:d8:f0:
3d:22:23:04:fc:be:4b:62:10:b8:a8:36:21:cb:e8:41:81:5c:
b6:b6:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:50:23 2026 by rpki-client