Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: ixMrvF5pqxXpos9R3O/yfOHVE/0BQFwSqonguzyq2e8=
Subject key identifier: 0D:6D:C9:AB:D6:EF:7C:C0:01:61:F1:B1:78:D0:E7:24:EA:58:D7:A4
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 01A1938D0A89115782883606E6CE562108FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 0534
Signing time: Sat 31 Oct 2026 20:00:56 +0000
Manifest this update: Sat 31 Oct 2026 20:00:56 +0000
Manifest next update: Sun 01 Nov 2026 20:00:56 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: DeyS161Jpc7rv4OVPdcHqAxgiQ4ThLS/HUjxe+T/YLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8d:0a:89:11:57:82:88:36:06:e6:ce:56:21:08:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Oct 31 20:00:56 2026 GMT
Not After : Nov 1 20:00:56 2026 GMT
Subject: CN=0d6dc9abd6ef7cc00161f1b178d0e724ea58d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:ea:d2:8f:4e:4d:7d:c7:30:e1:46:b0:11:
64:0a:ce:58:6a:fe:bc:a5:f4:33:ce:bb:ad:fd:66:
ec:29:c8:4a:64:b0:22:44:fa:5d:e3:0b:34:09:5b:
4c:fe:c9:92:60:42:fa:5c:9b:ca:1f:81:66:09:79:
d5:1b:19:01:8b:4d:d3:6a:27:b2:5b:fd:7f:33:bb:
14:4d:a4:b3:31:87:be:b3:70:66:fe:04:84:34:f2:
63:9b:a5:9b:49:c5:b3:b0:9d:2e:e2:dd:de:a6:bc:
11:6b:9e:3f:b8:00:74:90:46:09:ca:cc:8b:27:84:
25:74:78:61:c9:a6:7d:71:43:49:a4:ba:30:0e:93:
63:db:05:8e:ef:0f:b9:da:71:40:52:b1:87:64:56:
c4:48:8f:f4:3a:c3:5c:c9:2f:62:c2:12:7a:d0:1e:
8c:60:c0:1e:c9:41:5c:61:c8:33:f1:3f:83:cb:1c:
8c:b3:d5:9c:51:64:b0:7e:a7:6f:01:d0:e7:97:cb:
7e:87:76:03:45:a1:b6:20:61:53:1e:08:f7:57:c7:
9a:fa:af:20:df:3a:2a:7a:8a:56:5a:c2:d6:c0:25:
d4:de:b9:ca:1a:6c:44:ee:f8:0c:30:c2:cc:23:78:
c9:54:be:d9:6d:3e:67:70:e6:6e:9f:7c:cc:35:7f:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:C9:AB:D6:EF:7C:C0:01:61:F1:B1:78:D0:E7:24:EA:58:D7:A4
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:f4:15:c9:7a:ac:50:6c:09:c5:84:73:3c:1d:cc:c8:34:
3a:45:dd:87:d1:de:e0:d1:61:89:0a:2c:11:2d:ae:9e:d0:74:
ed:c5:18:1e:d3:23:2c:cb:ca:55:4a:47:1b:ec:92:32:35:8b:
4a:22:e3:62:73:4b:f2:db:4f:1d:aa:04:78:e3:25:2a:a5:b3:
80:33:8a:4a:b6:d3:61:e4:6a:b7:7d:7a:66:03:ff:ab:c6:ba:
01:03:c5:56:ae:71:0b:3e:93:47:d0:f3:9c:d3:2d:33:b6:90:
e2:e1:5a:67:b6:dc:b0:eb:e8:71:70:45:91:74:a3:98:7c:e2:
cc:1d:f9:06:91:e9:ef:f5:cc:e0:99:ad:b3:b0:e5:80:dd:cf:
ea:27:eb:5b:47:bb:9b:df:f3:ea:b0:0a:ba:96:bd:31:4f:c1:
70:8a:37:79:27:0c:4e:6d:05:ca:8e:08:90:c5:6f:6c:53:42:
b6:14:45:fb:91:dc:a4:01:f8:78:10:88:65:7a:ba:05:4a:71:
28:e8:76:59:e8:b9:2d:12:35:d2:07:d1:41:3c:6a:ac:ab:d7:
66:fa:f5:2c:f2:8c:3e:47:c0:62:4d:6e:ae:72:0f:77:f9:14:
b4:f4:29:7a:22:11:ca:48:da:5b:3b:81:4b:2f:cd:a9:48:30:
28:4c:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:30 2026 by rpki-client