Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: FrFORwabSqhilyMdJLM9VkPXV6NO92qsmoNbQv55XCs=
Subject key identifier: C6:45:ED:92:7D:08:A2:0A:F4:C3:BF:4A:C9:76:A1:47:CE:DF:A4:18
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019FA33C917E1C8E314B540A981FD5DEB118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 0433
Signing time: Mon 27 Jul 2026 11:01:23 +0000
Manifest this update: Mon 27 Jul 2026 11:01:23 +0000
Manifest next update: Tue 28 Jul 2026 11:01:23 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: XsMz+5HcBn2lp1BdObd6y7kpeHJypy8yBZ4F82Y03Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:91:7e:1c:8e:31:4b:54:0a:98:1f:d5:de:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Jul 27 11:01:23 2026 GMT
Not After : Jul 28 11:01:23 2026 GMT
Subject: CN=c645ed927d08a20af4c3bf4ac976a147cedfa418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:2c:cc:0d:4d:a1:2c:79:60:de:e2:69:82:
52:21:c8:ff:c3:3a:a5:70:ba:ca:92:70:ab:eb:9a:
f1:f5:11:47:1e:4c:72:1f:80:11:53:a9:55:eb:b1:
3f:c1:08:68:d4:5d:d1:cc:10:fa:d2:12:fb:8d:2d:
36:7d:6e:1b:03:62:88:da:55:a0:4b:76:07:01:d5:
47:83:22:62:68:aa:ad:db:af:38:25:45:77:d7:ab:
23:eb:42:be:2d:d2:ba:ea:05:aa:89:9c:d3:80:92:
14:22:a7:65:5a:b5:0a:10:fc:db:8a:2a:7f:25:75:
b5:75:89:88:a0:b0:21:77:c6:93:41:21:69:32:9d:
c1:4f:61:ae:0c:f5:05:7f:8a:1b:5f:8b:93:5e:50:
29:b8:7e:dc:c8:11:55:9e:27:00:86:53:a6:20:90:
61:df:29:1b:b2:b3:9f:89:2e:57:6a:6a:57:9c:8a:
d9:e3:63:35:60:a1:d9:9b:b4:25:d4:39:d6:0c:ba:
4a:7c:86:6a:1e:77:31:14:0e:39:59:73:78:bd:e0:
57:fb:a0:73:a7:d9:53:1f:0f:4c:a4:28:57:52:cf:
1f:ce:9a:37:9a:1a:82:72:ce:7a:5a:07:fd:ac:d6:
e9:4f:8c:ca:63:a9:25:02:68:23:71:eb:0f:87:5c:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:ED:92:7D:08:A2:0A:F4:C3:BF:4A:C9:76:A1:47:CE:DF:A4:18
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:d1:a1:e1:2d:1d:dd:f4:ef:12:ad:2a:07:2c:1e:12:9b:
e6:f8:83:dc:fa:fc:8e:3a:38:3a:c9:94:9b:89:69:55:eb:b0:
70:6d:b0:62:be:6e:fd:01:59:ed:7a:07:3e:81:c4:56:0d:95:
a8:3b:68:d2:f3:56:a5:c9:7d:cc:bf:4a:5a:f3:ca:1d:b2:13:
d8:57:cc:c9:cd:b5:77:d6:4f:ee:6e:4b:d8:8b:0e:07:06:0c:
b9:77:66:64:93:ae:58:0b:b1:b9:ac:6b:14:3a:ff:4c:e7:ff:
2d:4d:a5:f4:db:9f:2a:bb:f9:4a:b8:26:a1:8f:a1:65:90:c0:
fc:9f:23:26:36:44:2c:ac:a8:c9:42:6a:5d:76:90:a9:00:69:
06:dc:3b:64:6e:6c:e2:61:16:c0:88:4d:c4:1a:ad:a6:3b:0a:
ce:8e:b1:3d:27:b6:3f:57:92:53:75:99:82:9f:e1:21:18:5a:
92:ce:24:9a:ba:6d:df:f4:42:a3:c9:e1:e3:76:70:0d:40:4d:
bc:96:49:98:93:dd:5b:18:d7:7b:6c:97:f5:9d:5b:4f:54:e1:
eb:0a:cf:04:df:70:dc:54:16:1c:fe:f0:b0:73:9c:87:19:5e:
18:f3:3d:45:c2:28:10:09:92:a3:ff:60:62:ff:53:17:05:a2:
a0:b6:44:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPJF+HI4xS1QKmB/V3rEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjYwNzI3MTEwMTIzWhcNMjYwNzI4MTEwMTIzWjAzMTEwLwYDVQQD
EyhjNjQ1ZWQ5MjdkMDhhMjBhZjRjM2JmNGFjOTc2YTE0N2NlZGZhNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyQszA1NoSx5YN7iaYJSIcj/wzql
cLrKknCr65rx9RFHHkxyH4ARU6lV67E/wQho1F3RzBD60hL7jS02fW4bA2KI2lWg
S3YHAdVHgyJiaKqt2684JUV316sj60K+LdK66gWqiZzTgJIUIqdlWrUKEPzbiip/
JXW1dYmIoLAhd8aTQSFpMp3BT2GuDPUFf4obX4uTXlApuH7cyBFVnicAhlOmIJBh
3ykbsrOfiS5XampXnIrZ42M1YKHZm7Ql1DnWDLpKfIZqHncxFA45WXN4veBX+6Bz
p9lTHw9MpChXUs8fzpo3mhqCcs56Wgf9rNbpT4zKY6klAmgjcesPh1w7vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZF7ZJ9CKIK9MO/Ssl2oUfO36QYMB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuLRoeEt
Hd307xKtKgcsHhKb5viD3Pr8jjo4OsmUm4lpVeuwcG2wYr5u/QFZ7XoHPoHEVg2V
qDto0vNWpcl9zL9KWvPKHbIT2FfMyc21d9ZP7m5L2IsOBwYMuXdmZJOuWAuxuaxr
FDr/TOf/LU2l9NufKrv5SrgmoY+hZZDA/J8jJjZELKyoyUJqXXaQqQBpBtw7ZG5s
4mEWwIhNxBqtpjsKzo6xPSe2P1eSU3WZgp/hIRhaks4kmrpt3/RCo8nh43ZwDUBN
vJZJmJPdWxjXe2yX9Z1bT1Th6wrPBN9w3FQWHP7wsHOchxleGPM9RcIoEAmSo/9g
Yv9TFwWioLZEvg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:47:14 2026 by rpki-client