Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: f5bhII62XQPfpWBfbPPmyW/OAfspW0mfzf+0C4GbxIU=
Subject key identifier: AE:6A:97:40:61:DD:A8:46:09:09:A9:29:31:E3:70:C0:09:2C:C2:4B
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 01A17B16B35A090F53B1410EE3663416581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 1A18
Signing time: Tue 27 Oct 2026 02:00:47 +0000
Manifest this update: Tue 27 Oct 2026 02:00:47 +0000
Manifest next update: Wed 28 Oct 2026 02:00:47 +0000
Files and hashes: 1: 1-PobHP3upTno8bW2i6EzwJRlSdc.roa (hash: k3oArZicPTjQ+oty+7iOYo7+c4L7ieRd9ba75n0lEZ0=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: ISMkUzP0Y5tSRxx6Ej5E+TVxybJ0mB5CEAIn7H0EVl0=)
3: dNILgOFj-FxbjD8-2fl1xvfIJOw.roa (hash: fwgzfDaeuX5cT3VophtPxTyBR91VNu0Zs4kcr+pvJUc=)
4: oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa (hash: Ek0IIB7EUCOuxacTHXe38ILHEJXneuaGMfbJ/YMGwwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:b3:5a:09:0f:53:b1:41:0e:e3:66:34:16:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Oct 27 02:00:47 2026 GMT
Not After : Oct 28 02:00:47 2026 GMT
Subject: CN=ae6a974061dda8460909a92931e370c0092cc24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:98:ce:4a:aa:eb:ec:e2:11:bb:68:dc:5a:
65:62:92:63:3f:9a:45:ec:96:66:62:49:9d:93:08:
6f:83:33:88:6d:3a:59:31:1e:3e:28:f9:30:a0:14:
90:62:fd:07:a6:e5:19:67:d2:ea:eb:a8:e4:24:dc:
28:41:ed:05:0d:15:d2:7e:c6:cc:9b:c6:d9:11:d2:
00:e3:ff:8f:d0:20:90:23:27:ee:40:9a:86:e9:fc:
2e:3d:0f:ec:5c:48:10:37:d7:de:6f:39:7d:44:8e:
10:31:c7:0a:e7:bd:63:bb:40:e0:4d:cb:3e:bb:6f:
ab:38:4c:ff:0f:63:22:08:b2:af:a6:20:d0:20:c7:
55:b6:18:b9:27:d2:dd:42:ac:9c:cf:0d:71:ce:fc:
b4:ec:86:16:da:b5:b6:b1:4c:c6:75:d0:e0:6f:09:
24:bc:29:02:ab:58:ae:ad:3e:b5:59:05:ec:40:60:
2d:c5:ce:1c:48:62:9f:d9:1b:ca:57:cf:ca:2f:30:
89:33:1a:a6:7b:5e:fb:92:42:86:94:a4:9b:b4:03:
fd:8b:c7:be:54:af:b8:ce:f8:f3:a8:16:eb:f4:46:
e8:ff:bd:3d:12:07:2c:8c:fd:bc:16:75:27:8d:12:
52:63:94:44:ce:2e:36:c7:01:06:c3:80:2c:0e:8c:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:97:40:61:DD:A8:46:09:09:A9:29:31:E3:70:C0:09:2C:C2:4B
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:33:3e:5f:9d:36:3b:53:c7:00:b8:51:d1:ea:95:3c:87:9a:
c6:20:15:ae:6c:10:20:70:87:f3:44:2c:c5:1a:5c:d5:a0:e0:
b9:4e:41:d9:d8:f3:28:7e:16:21:3b:30:9c:3c:e5:c9:d2:c4:
92:b9:ac:12:70:9f:84:35:06:f4:4d:4f:22:49:3f:e7:a2:a0:
a1:18:c9:91:79:fb:d5:4f:68:ff:a1:64:35:6e:f9:83:37:0c:
ee:92:9d:ea:6a:00:3e:5a:d5:7e:a4:bd:87:5e:3c:d6:02:b4:
7a:40:f3:25:e3:53:6b:9f:6b:59:bd:33:7f:f3:a8:28:2a:ba:
52:bf:0f:e6:8b:8b:e5:d9:88:91:72:b5:53:e2:a2:37:53:46:
8b:01:ec:67:ea:94:a5:ed:1d:79:6d:c9:3d:fa:34:83:3a:d5:
e0:c8:8f:f0:76:68:fb:35:af:e6:7e:3c:68:ca:87:3b:2a:d7:
62:ae:62:ef:a1:83:da:84:cb:54:7f:55:91:08:11:53:05:8c:
b6:bc:76:40:4b:21:17:2d:14:df:9f:36:71:21:cb:26:39:33:
93:02:06:f6:71:16:ef:6b:1d:13:9f:42:f1:bc:9e:06:1f:19:
ff:18:ba:45:17:1c:57:c4:97:7a:d2:fc:dc:f7:4d:a2:3f:61:
9b:cd:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:04 2026 by rpki-client