Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: y8rhsb9RUUDJrueGhkmYV27rqcU24QQtMj7kiejEgGg=
Subject key identifier: 09:9C:6D:CB:FE:81:CE:30:F7:32:30:42:B8:D7:4A:72:18:CE:58:9F
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019FF947F6E1720782ECF7C3AB980DE885EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0EFF
Signing time: Thu 13 Aug 2026 04:01:10 +0000
Manifest this update: Thu 13 Aug 2026 04:01:10 +0000
Manifest next update: Fri 14 Aug 2026 04:01:10 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: Jx3PwWFcHmi+DQahl6++egZlD/BBK6F12IFN1sEV7Ss=)
2: vzj6rF0z62czOMRE3LL5w-joOaE.asa (hash: aMRvdtrb5tp1XwhqqIQw7J458t/ccfLhiI6qcMyDJPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:47:f6:e1:72:07:82:ec:f7:c3:ab:98:0d:e8:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Aug 13 04:01:10 2026 GMT
Not After : Aug 14 04:01:10 2026 GMT
Subject: CN=099c6dcbfe81ce30f7323042b8d74a7218ce589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:39:6c:cc:4b:11:f8:c3:e5:bf:0b:d4:e5:
d1:9f:a6:25:0d:d9:be:d3:e7:f3:aa:cb:38:48:3f:
b7:ff:53:dd:d2:fa:66:4e:73:a8:22:a1:32:44:90:
17:ff:15:84:93:5b:20:44:fd:8b:40:30:a3:b3:7b:
bd:8f:70:de:ed:ea:14:8b:43:e7:80:63:f2:a0:1a:
67:db:47:4d:9f:d6:c3:c4:1f:b0:d7:7f:ed:86:c6:
00:89:c8:39:8c:a3:e2:47:fe:e8:0d:fc:31:e8:68:
eb:41:b8:0c:f7:c5:9c:fa:99:13:d6:86:de:d6:73:
ba:d5:83:0e:87:b9:62:04:44:19:a1:18:8c:9e:2a:
96:9e:9f:84:ac:81:36:6f:fc:f8:b2:52:51:b2:18:
63:f7:e0:92:78:2f:1f:d6:d6:bd:a7:e8:b1:35:c7:
2c:47:c0:ac:76:54:6d:16:3c:3d:61:bb:c2:b7:d1:
2e:ea:15:7f:84:26:55:65:c7:f0:bb:f2:e5:22:7c:
f9:ef:e1:b0:04:d7:68:7d:d0:69:cc:ef:b1:1a:7d:
90:19:10:c1:e7:2c:b4:4b:3c:0c:7d:2d:4e:a6:c3:
c7:00:e4:af:dc:64:0a:ca:48:99:9d:a2:b3:b4:7a:
36:e2:d5:e2:f2:2a:88:71:2b:90:f0:25:81:86:ce:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:6D:CB:FE:81:CE:30:F7:32:30:42:B8:D7:4A:72:18:CE:58:9F
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e9:a0:ac:4e:cb:a2:7e:3c:97:95:eb:65:a5:41:ec:6f:11:
b6:97:d9:15:50:29:85:d7:a2:60:ec:bc:e2:71:df:35:19:71:
db:45:e5:18:d5:c8:be:9c:eb:e3:66:c9:39:59:90:5f:95:38:
af:4b:22:67:ff:66:ce:ba:57:fd:85:7c:d4:4b:b5:61:95:83:
d3:6c:ce:5e:18:4a:70:53:10:e6:cf:0f:76:24:35:cd:78:f7:
cc:81:cf:3d:fc:a5:5c:3e:65:e8:a0:84:18:ee:32:c1:86:84:
ec:a5:08:89:b8:c0:f9:7b:27:32:f5:b9:1a:89:02:1d:55:09:
bd:13:fe:dc:e7:07:c0:31:69:60:3a:26:1a:83:7d:50:0f:59:
21:c5:03:34:32:ce:77:85:94:05:41:dd:bc:a0:81:a3:6e:37:
d3:a5:9b:28:b4:8f:68:33:12:40:d0:f7:c7:f1:4f:dc:ad:fe:
a0:63:17:5c:50:39:f7:be:6d:82:51:dc:8b:87:65:9f:2b:6a:
bb:3f:8c:1b:22:3e:6e:1d:bb:54:5c:64:a8:a3:df:db:10:a9:
cf:cd:54:95:f7:50:f1:20:e6:d9:c0:9a:f0:c1:cd:cd:56:64:
26:d0:c2:f1:77:a1:e2:4a:d5:46:01:d3:4c:02:64:e9:c8:6f:
f1:9d:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:57 2026 by rpki-client