Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: MFq0gUf7+DBd6WTItWQ3Qt8pyIRia535b7lix+6DBkA=
Subject key identifier: D4:19:B3:21:84:E9:D9:FA:53:41:0B:73:3B:07:0E:86:61:F7:14:FF
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 01A08AFA35FB7001340850147581E723886F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 04AB
Signing time: Thu 10 Sep 2026 11:00:48 +0000
Manifest this update: Thu 10 Sep 2026 11:00:48 +0000
Manifest next update: Fri 11 Sep 2026 11:00:48 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: VuJJY8dS1CxJDI6xJ3Mdko+TSp7Crul4HaIxbxtBKz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:35:fb:70:01:34:08:50:14:75:81:e7:23:88:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Sep 10 11:00:48 2026 GMT
Not After : Sep 11 11:00:48 2026 GMT
Subject: CN=d419b32184e9d9fa53410b733b070e8661f714ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:cb:e1:33:70:ef:e8:5d:50:74:7b:42:58:
90:0d:0b:bb:42:3f:89:d1:3a:5e:f6:b3:90:6d:11:
14:12:e5:23:e8:46:3c:d5:60:eb:9a:71:66:60:a6:
8d:a9:6a:19:cf:c0:19:5e:6d:9c:30:0d:f3:ee:21:
f7:7e:a3:f6:0f:d3:4d:c8:04:66:45:5d:d2:70:a1:
b9:e9:64:a6:5d:07:eb:be:1e:c1:d8:da:57:8b:31:
00:2b:25:c0:3f:fe:0e:e6:50:47:43:ff:1d:61:75:
4d:ca:00:33:bc:4f:d5:0e:1a:e1:ac:f9:c4:6d:3f:
de:9d:db:35:e9:f9:c7:4a:d5:17:ac:e8:6b:12:0a:
bf:82:d5:68:ee:f0:84:0f:02:be:af:6c:01:4a:5e:
15:2c:c1:f3:c7:85:4a:0a:27:ca:86:3e:ec:8a:b2:
76:cd:7c:e1:cb:4f:60:e9:c7:4d:a3:72:95:35:7a:
25:9b:f3:1b:49:f4:11:7d:dd:3d:27:cd:83:2c:ea:
11:71:6e:62:f0:f8:dc:ae:c9:5f:15:6c:f3:13:f2:
62:d6:01:8f:f8:fc:f1:9a:52:42:92:31:ce:0e:4c:
18:88:38:44:c3:d1:ca:d8:32:2c:16:c0:75:fc:43:
7c:22:b4:52:56:57:7d:fc:fc:3b:c9:14:a2:8d:52:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:B3:21:84:E9:D9:FA:53:41:0B:73:3B:07:0E:86:61:F7:14:FF
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b9:d0:01:b4:3f:29:bf:85:d9:fe:a1:7f:42:21:77:90:11:
a5:e8:d4:c1:5f:c0:ed:a1:02:e1:5f:3d:7f:df:17:32:51:b5:
eb:a1:cb:a2:22:37:7e:c7:7c:8d:39:71:ee:96:38:2d:d7:92:
b8:4f:94:d1:93:27:7f:17:cd:0f:43:ac:02:e6:2f:c3:60:1f:
1b:ec:fd:9c:dd:1b:e4:ac:9c:b6:0a:4e:15:94:53:b5:ee:a1:
32:62:0c:16:23:da:79:3e:a4:62:64:32:a7:cb:8f:5f:3d:12:
60:cb:c5:f3:e4:31:de:bc:9b:c6:1b:45:6e:f5:31:6a:06:48:
64:3f:d8:a9:37:2e:cd:e8:d1:88:1c:eb:30:bf:82:4d:a3:03:
2b:3e:c5:8f:e5:aa:b7:0f:96:38:38:95:2c:b3:61:91:5f:8c:
a7:00:a3:71:d3:01:93:8d:ff:8e:1d:ca:7c:b5:81:18:40:b5:
bd:92:94:e1:00:d4:22:ac:49:63:70:e7:f6:67:91:39:cf:ce:
36:19:24:62:b9:26:b8:98:90:0c:bf:82:06:e2:9f:d4:5b:c3:
bd:48:5a:4f:bc:07:92:26:f1:15:9b:8f:65:f5:ed:c9:3c:f7:
cf:a6:af:97:98:aa:e8:f1:b5:ee:f9:2d:f4:03:14:73:1d:65:
74:f5:e0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+jX7cAE0CFAUdYHnI4hvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjYwOTEwMTEwMDQ4WhcNMjYwOTExMTEwMDQ4WjAzMTEwLwYDVQQD
EyhkNDE5YjMyMTg0ZTlkOWZhNTM0MTBiNzMzYjA3MGU4NjYxZjcxNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoArL4TNw7+hdUHR7QliQDQu7Qj+J
0Tpe9rOQbREUEuUj6EY81WDrmnFmYKaNqWoZz8AZXm2cMA3z7iH3fqP2D9NNyARm
RV3ScKG56WSmXQfrvh7B2NpXizEAKyXAP/4O5lBHQ/8dYXVNygAzvE/VDhrhrPnE
bT/ends16fnHStUXrOhrEgq/gtVo7vCEDwK+r2wBSl4VLMHzx4VKCifKhj7sirJ2
zXzhy09g6cdNo3KVNXolm/MbSfQRfd09J82DLOoRcW5i8PjcrslfFWzzE/Ji1gGP
+PzxmlJCkjHODkwYiDhEw9HK2DIsFsB1/EN8IrRSVld9/Pw7yRSijVJ6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQZsyGE6dn6U0ELczsHDoZh9xT/MB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALnQAbQ/
Kb+F2f6hf0Ihd5ARpejUwV/A7aEC4V89f98XMlG166HLoiI3fsd8jTlx7pY4LdeS
uE+U0ZMnfxfND0OsAuYvw2AfG+z9nN0b5KyctgpOFZRTte6hMmIMFiPaeT6kYmQy
p8uPXz0SYMvF8+Qx3rybxhtFbvUxagZIZD/YqTcuzejRiBzrML+CTaMDKz7Fj+Wq
tw+WODiVLLNhkV+MpwCjcdMBk43/jh3KfLWBGEC1vZKU4QDUIqxJY3Dn9meROc/O
NhkkYrkmuJiQDL+CBuKf1FvDvUhaT7wHkibxFZuPZfXtyTz3z6avl5iq6PG17vkt
9AMUcx1ldPXgVg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:46 2026 by rpki-client