Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: o3+Wf8LP1yX0sxs5rGR0CbewT6ZKK3vf2gScZtrRvFw=
Subject key identifier: F7:E6:83:69:35:F3:47:D7:30:17:BA:1A:AF:30:47:DD:8E:20:A3:D4
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 019DB20F20409AB0141B8A331D74B54DDA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 1563
Signing time: Tue 21 Apr 2026 22:00:28 +0000
Manifest this update: Tue 21 Apr 2026 22:00:28 +0000
Manifest next update: Wed 22 Apr 2026 22:00:28 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: n+A2zEGAAeM/mAdtYMun3sGje1YGRqcidfSuCk8NULs=)
2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:20:40:9a:b0:14:1b:8a:33:1d:74:b5:4d:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Apr 21 22:00:28 2026 GMT
Not After : Apr 22 22:00:28 2026 GMT
Subject: CN=f7e6836935f347d73017ba1aaf3047dd8e20a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:22:86:fa:65:f9:1b:84:9a:9e:9e:09:2a:
7b:ea:ab:11:c1:29:b9:65:14:d8:7d:5a:9d:10:c1:
5f:16:7c:3f:d0:14:fe:91:b2:f6:43:11:e4:8f:46:
a1:e0:11:ac:0a:43:27:ee:f3:7f:33:9e:ba:8f:ad:
e5:fb:bf:f2:9a:51:40:0c:9f:b0:24:a3:9d:1c:1c:
26:0b:b9:b1:25:e5:fc:4c:85:05:7d:04:de:aa:33:
cd:d9:3f:da:cd:75:fd:a2:77:e6:d4:df:2e:70:c3:
a3:b5:cd:7e:d1:29:03:49:0f:29:d7:5f:1f:b4:fe:
a9:1f:df:f9:76:92:59:1e:04:b4:72:68:84:b9:09:
b1:29:46:44:46:64:ce:66:e7:35:1d:26:63:bf:2a:
f4:b5:fb:3b:9f:1f:19:54:df:85:9b:a4:00:b7:d6:
11:59:74:a0:db:38:e2:3d:a6:c8:32:b2:cc:fe:31:
7e:87:d1:d7:ea:6f:51:c2:ff:b4:e2:24:1c:b2:29:
c5:72:a3:7c:63:40:dd:88:f5:74:cf:cb:27:7c:08:
00:91:22:8c:3e:5b:cc:55:3f:f8:10:26:57:26:20:
9b:8e:e1:92:4a:f9:30:41:6b:45:c5:87:8d:6e:8b:
06:db:f0:94:b0:c6:ef:93:24:97:1f:a6:a5:9b:47:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:83:69:35:F3:47:D7:30:17:BA:1A:AF:30:47:DD:8E:20:A3:D4
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:19:ad:23:d4:21:a1:e0:77:f0:59:8a:61:d6:a0:c1:2a:
c8:80:4f:02:ba:ba:7f:46:29:47:34:59:d3:51:08:9e:89:05:
ca:30:46:b0:cc:19:f3:c6:38:89:3f:60:09:fc:a7:a8:33:ab:
57:2b:41:3a:67:ad:29:6f:e5:58:25:1a:2b:74:d5:ff:b2:2a:
08:05:ba:53:25:08:04:4d:d3:dc:f9:31:44:6a:72:25:1d:25:
63:14:2a:f3:f1:7e:a5:1c:a4:d6:73:5b:c1:07:e7:69:c9:74:
0f:ac:05:d1:79:72:3a:e8:02:3d:80:63:06:ff:33:d3:02:14:
2a:28:11:1b:71:f5:77:bc:4e:83:02:6e:a6:a9:49:dd:e1:85:
a2:08:41:50:51:14:d2:2f:8c:d9:2a:91:5b:23:cb:00:8b:49:
ee:08:fd:82:18:bc:4e:cc:70:7f:ef:36:46:dd:4d:0c:21:05:
6f:e7:3b:be:dc:3e:87:c2:55:9a:2f:14:ac:b2:8b:a2:7b:9c:
85:4c:62:fb:1d:86:2c:0d:df:01:56:4d:b6:ce:1a:ab:82:49:
52:1d:f4:e8:ea:0b:c8:d3:8d:be:c1:83:59:1d:4e:5f:83:c4:
c3:83:28:ec:87:90:5b:a1:ff:84:b7:e6:04:37:c8:3a:52:a7:
b0:44:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:30 2026 by rpki-client