Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: EZz+6mjweJP8vvp9EEw3a3F74ZfsQb9m5TtrmedglnA=
Subject key identifier: 2F:84:E6:47:79:CE:AF:84:91:FA:11:1C:54:46:0F:65:D9:13:80:28
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 019CC86337916A45D417CC45FD8AE6FB06C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 14EA
Signing time: Sat 07 Mar 2026 13:01:11 +0000
Manifest this update: Sat 07 Mar 2026 13:01:11 +0000
Manifest next update: Sun 08 Mar 2026 13:01:11 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: cg7NXH6JGfgggBmsFcNX/Euy5d3Li3egQLKD/TwsizA=)
2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:63:37:91:6a:45:d4:17:cc:45:fd:8a:e6:fb:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Mar 7 13:01:11 2026 GMT
Not After : Mar 8 13:01:11 2026 GMT
Subject: CN=2f84e64779ceaf8491fa111c54460f65d9138028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:bc:97:80:03:9b:95:84:c5:1e:c6:45:77:
21:9c:bb:37:2b:7a:71:cb:3c:df:b9:b9:46:e3:34:
e8:cd:e8:b0:93:12:5e:b7:86:86:9f:f3:0a:82:ee:
5f:97:22:5e:0b:f1:77:29:ba:85:39:0b:19:ff:77:
2d:64:07:d5:84:88:b6:f8:00:2b:0f:1a:26:01:1d:
e2:3e:02:aa:18:ed:ea:82:89:ad:e0:2e:2a:23:b5:
a9:0e:3c:c6:25:0b:76:9f:88:df:c3:f6:24:fa:b8:
83:ad:80:cc:f7:fa:97:85:31:d8:92:c0:98:8e:d8:
0f:a5:da:c1:37:c2:33:ca:7b:ec:a2:d0:3a:34:2d:
ef:84:b7:2f:3a:30:66:c4:bb:78:a8:47:56:b7:58:
94:7f:6a:d8:ad:9f:86:6b:24:79:30:c1:73:40:38:
83:45:cb:42:d5:ce:9f:70:85:06:07:b8:c3:22:93:
9b:fc:7a:9d:48:88:1c:41:f8:dc:63:a7:28:dc:9b:
52:8e:c1:80:3a:9a:50:fa:1a:90:9d:cd:09:29:a4:
1a:a9:5a:05:f3:05:de:cd:82:bb:c4:3d:6e:ea:57:
4f:49:2e:e9:13:27:34:4f:32:6c:44:5c:0c:5c:b2:
0b:ff:1d:20:bc:84:34:43:7d:45:46:a6:e0:35:8d:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:E6:47:79:CE:AF:84:91:FA:11:1C:54:46:0F:65:D9:13:80:28
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f6:c8:70:49:7d:84:15:f4:93:4c:2b:3a:1b:21:8f:79:df:
d1:d7:51:e3:08:71:48:49:04:ae:b3:e1:52:58:c6:ec:f6:1c:
23:40:52:05:4c:b2:e5:f8:56:8f:28:34:a4:3c:ad:68:b4:9e:
c4:3e:e0:c9:6d:e3:06:60:ed:ca:d3:59:ed:71:79:e9:f1:f2:
bb:a5:09:db:73:94:de:b2:41:9e:5d:17:77:ec:49:33:a4:b5:
85:03:a4:45:c1:f8:10:b0:ee:1c:27:1f:90:68:89:c3:89:ff:
17:2b:77:42:ea:af:93:4d:fe:92:a6:23:7e:27:c0:91:d5:10:
19:a9:46:d8:cb:1b:54:96:bd:9c:3a:66:31:6f:1d:4b:a0:62:
2f:1f:7a:62:bc:c7:ea:bf:d4:35:c3:b2:75:08:86:0f:6a:b2:
41:92:5c:a7:26:6b:4d:bd:bb:fa:7e:83:fa:32:96:7b:7b:9c:
27:c9:05:8a:0b:2b:b2:d4:84:b2:02:ad:bb:75:46:9e:1f:4d:
2e:d1:48:55:91:5b:2b:9a:8d:59:f9:5a:e8:b4:94:b5:9e:93:
82:53:c5:27:d8:f6:a8:3e:ac:4c:ef:8e:dc:df:16:de:59:63:
72:13:84:0f:6d:3e:c8:1b:c4:7b:2b:6e:a7:9c:57:68:0a:7d:
74:6b:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:05:11 2026 by rpki-client