Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: HXKkSuq1wHTqFGX8o/azt4ASV7+9UY3zBpeuIvX5qaI=
Subject key identifier: 96:56:F9:CB:2A:A1:12:B5:E6:EB:E2:58:83:FC:E9:80:80:13:D9:E1
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 01A06E03647C3BA65142105D2B9172EAD32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 20:01:50 +0000
Manifest this update: Fri 04 Sep 2026 20:01:50 +0000
Manifest next update: Sat 05 Sep 2026 20:01:50 +0000
Files and hashes: 1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: Drgld3eIBcKuwCY/YB9Lf28eXDtD2E7N+t0tt0iujNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:64:7c:3b:a6:51:42:10:5d:2b:91:72:ea:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Sep 4 20:01:50 2026 GMT
Not After : Sep 5 20:01:50 2026 GMT
Subject: CN=9656f9cb2aa112b5e6ebe25883fce9808013d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:8b:f2:43:d2:67:54:51:bb:27:b2:1a:1d:
48:4e:d9:af:4f:6a:3c:2f:f2:7a:b1:b4:bc:24:f7:
07:96:ef:b5:12:ed:4a:53:55:10:65:9f:64:49:a1:
bc:c2:30:58:66:93:45:16:d9:46:62:70:40:42:9a:
de:8a:62:f0:de:34:b1:db:c2:a4:b1:7a:d6:e2:a6:
31:b8:9a:a9:20:15:f1:8d:f7:54:67:25:4c:53:c0:
8a:bc:b7:5d:71:31:ce:e6:dc:4d:b0:8f:0c:10:99:
8b:72:35:3d:09:61:f0:45:b7:bd:fd:eb:11:bb:9e:
1f:34:92:a4:2d:44:1e:15:32:3b:80:3d:29:a5:ac:
23:09:69:6d:a2:0e:95:f9:ec:8e:9f:34:62:df:cd:
a4:de:b6:c9:14:25:30:7e:52:34:b2:f3:28:43:e0:
f5:da:16:0d:5d:0a:d5:59:7f:f7:53:75:44:c3:ce:
ee:e1:59:d8:20:37:72:6a:dd:6c:f9:36:c3:19:50:
58:41:33:ba:46:45:22:d2:89:26:0e:a9:5a:98:89:
59:f1:01:bf:42:88:ea:0d:91:b1:81:65:17:7d:df:
27:22:21:56:96:2c:7f:d1:6f:3e:f3:d7:d3:58:5b:
e0:25:4a:f1:a4:d1:5b:b0:10:18:b8:85:48:29:24:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:F9:CB:2A:A1:12:B5:E6:EB:E2:58:83:FC:E9:80:80:13:D9:E1
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:df:4d:df:98:55:6a:fe:9e:74:9a:d7:59:a7:1c:f0:10:
27:46:f7:58:52:b6:cf:ee:1c:5a:4e:5c:d7:c4:d7:4b:f0:b4:
f2:0b:9a:89:7e:b3:69:1a:c2:ae:20:f4:eb:8a:a9:3d:78:91:
fe:59:0a:ac:43:f8:a1:35:bd:27:14:54:13:ba:e3:1e:81:26:
b2:6c:a0:09:e2:13:ce:f3:ac:7e:01:79:18:d0:10:c9:69:b4:
d1:13:82:5a:07:6d:d6:d5:d8:c2:47:a0:9d:03:0d:e9:c3:30:
ae:fa:cf:f9:b1:cd:b7:7d:8e:8b:1d:27:6d:9f:8d:ac:6e:eb:
74:dd:4a:9c:2e:3e:71:12:79:ee:0e:05:28:e3:b6:f9:79:a5:
ec:e8:84:0b:62:2d:40:5c:56:bf:c8:61:1c:08:5d:9f:ba:3b:
cb:96:fb:e6:91:63:14:b7:93:12:38:5a:43:d0:43:74:7d:cc:
82:2b:a5:a4:06:6c:f6:93:cd:9b:0f:09:22:c7:7a:b2:7d:42:
01:ff:eb:f5:97:46:b6:79:32:c3:15:e8:3e:7b:30:9f:4c:72:
a1:dd:9f:ba:35:5b:4f:39:e1:8e:cb:68:74:1d:43:18:e7:c7:
72:fc:2e:e1:c1:e1:5f:7d:94:ec:1e:f8:8a:3d:d7:7e:85:42:
ff:a3:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:16:48 2026 by rpki-client