
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: 2zCBec84aDLpjkXGQM9QgEn9IdEzPVBaTtyG/Hm7mzM=
Subject key identifier: 44:E9:66:F5:34:61:1A:47:1A:9D:8A:63:3E:AC:7E:BF:CB:A8:D2:64
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019E3229D440E6A140C531985622F130AC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0E10
Signing time: Sat 16 May 2026 19:01:02 +0000
Manifest this update: Sat 16 May 2026 19:01:02 +0000
Manifest next update: Sun 17 May 2026 19:01:02 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: HJSbewkIvB7kQX2vmB3b13cgkcGe9uIaAyEHKZ47a7g=)
2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:d4:40:e6:a1:40:c5:31:98:56:22:f1:30:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: May 16 19:01:02 2026 GMT
Not After : May 17 19:01:02 2026 GMT
Subject: CN=44e966f534611a471a9d8a633eac7ebfcba8d264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:69:58:e6:0a:46:d6:4c:6d:42:de:56:31:
e6:37:1d:be:56:ed:73:36:cf:fb:a3:bf:48:68:cf:
76:1e:e4:c0:a8:61:6b:81:db:7f:8f:ad:3e:31:f7:
23:af:4a:c1:c4:3b:ad:96:81:0b:1c:37:f7:8e:35:
23:2a:0e:99:21:3e:57:53:d5:82:5f:b7:36:39:47:
8e:4f:a5:3b:dc:b6:72:ab:f8:c3:e8:2f:8d:db:6a:
5c:56:5b:bc:94:35:39:4d:8f:85:ed:cf:38:55:6e:
b8:70:d0:e2:f4:91:9b:b7:e1:df:b7:e8:62:bd:87:
af:33:e3:a0:f7:e0:0c:1a:f5:b5:31:21:85:a4:9f:
b4:f4:01:fe:b9:74:80:86:e1:9c:31:49:d0:b0:99:
1c:14:3b:b5:1e:36:d3:bb:6c:4b:64:45:8e:94:2c:
1b:35:61:00:cb:16:c0:2f:94:07:e3:4b:90:0b:e7:
47:6a:01:b7:f3:94:24:44:ee:4f:0e:b6:e5:5a:2a:
5c:4f:cf:50:b8:3d:3d:87:a1:15:06:21:1a:ff:c5:
3b:d9:4c:00:71:50:f2:94:71:b3:28:25:d2:d4:9c:
4c:53:52:46:ff:e3:e5:a4:c6:d6:32:02:80:5b:25:
3f:7d:d0:36:7a:0f:39:c2:22:18:18:74:35:65:57:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:66:F5:34:61:1A:47:1A:9D:8A:63:3E:AC:7E:BF:CB:A8:D2:64
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:2f:93:db:ed:f0:56:46:e1:a2:31:ca:19:52:a6:60:5f:
79:f2:cd:b2:56:4f:90:aa:52:3f:05:ae:3c:90:fe:67:4c:55:
e7:73:a3:47:0a:d4:64:60:a3:20:47:e6:4d:cc:8c:5f:9e:4f:
74:1b:27:5b:3a:29:c0:c7:14:08:3e:a7:fc:11:a7:c9:71:ff:
f8:60:3c:8d:0a:96:07:7d:b2:7c:36:12:6b:1d:d9:84:87:06:
4b:2c:5e:3a:26:e6:72:49:53:d2:a1:c2:d1:ab:35:17:4a:08:
e8:5c:5b:e0:ee:ce:c7:f9:a2:fd:25:37:fd:7f:59:b0:39:1d:
3b:ec:af:3d:dd:bd:70:09:0b:44:b7:be:28:9b:38:56:7f:5d:
a2:79:c8:4e:bb:33:b5:e7:d2:24:fe:1c:c4:4e:9d:95:10:29:
ba:fa:75:14:02:62:82:0b:f4:34:be:02:02:6c:13:4d:fe:67:
de:43:26:f4:a0:41:9e:17:de:2c:73:2b:d1:2a:c8:49:fa:4b:
1b:36:71:76:72:9b:a3:18:f3:8b:52:f3:bc:48:ae:b1:fa:f3:
cd:10:15:8f:ef:47:36:c0:33:9e:de:53:8d:cc:87:6c:68:b7:
71:9b:b1:42:de:33:d9:12:4c:1c:b6:c9:a5:bb:cf:85:a0:58:
e7:26:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:59 2026 by rpki-client