Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: aTIqSKITbfFxBk8l9DS7SDPZsnfnQCrfF95Ftscf3C0=
Subject key identifier: B5:1E:28:3B:A6:AA:AA:95:54:D3:B8:DF:AF:84:A6:7C:75:6A:63:A8
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019D3909D817B61666C4F824C694AEBC5795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0D8F
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: Iv0JoNKsQxPk1lcgopPkAwAbiqQFoba4lKao6x6+7zc=)
2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d8:17:b6:16:66:c4:f8:24:c6:94:ae:bc:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=b51e283ba6aaaa9554d3b8dfaf84a67c756a63a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:bf:f5:5f:c2:17:6b:73:8a:57:66:35:1d:
1f:4c:e7:a9:ec:94:9c:00:7e:f7:0a:da:fb:ad:6a:
29:f0:99:91:3a:ee:51:3e:25:fe:83:83:8e:38:4e:
af:4c:2e:fb:9a:b8:b4:38:fc:49:ba:71:1b:36:e7:
25:e1:8a:63:f0:35:91:9d:e1:59:32:b4:59:0a:2b:
6a:34:fa:0e:c1:96:40:5b:19:52:d3:29:a7:8f:64:
8e:91:dd:0c:40:e5:1b:37:05:42:b6:70:8e:80:4c:
67:ca:f3:8c:bf:b0:d2:57:57:57:45:88:8a:01:f3:
12:96:e4:ba:9a:99:67:89:90:e4:03:b8:15:17:15:
91:96:c2:d6:80:7a:5e:f0:57:01:f2:81:98:9b:2c:
f1:61:c3:01:1d:b8:2b:77:3b:dc:c5:6f:cd:35:ab:
a0:9e:af:6f:cd:55:a9:3e:31:55:36:ce:50:88:fd:
58:93:44:0d:69:12:6f:5e:98:50:dc:b1:96:50:22:
76:2a:f6:2b:ec:3c:bf:02:27:6a:e5:0e:2f:26:d6:
4e:f4:7c:f6:a5:89:da:8d:e8:cb:91:a8:75:06:c4:
cb:dc:16:16:b1:0c:fd:07:2c:74:8e:9f:67:13:bc:
63:3e:a0:a2:d8:8c:a5:39:a9:5c:a4:9f:14:40:0e:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:28:3B:A6:AA:AA:95:54:D3:B8:DF:AF:84:A6:7C:75:6A:63:A8
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a6:89:01:a9:c5:c6:c6:63:7d:c4:27:71:f6:85:a0:40:a2:
04:40:8a:cb:f9:d9:d1:55:59:78:8b:4a:af:e2:ca:a5:76:17:
2e:a6:37:10:b9:3d:a7:5c:a4:62:47:3b:23:b6:d1:e8:9d:82:
29:50:2e:9f:b2:ff:c3:39:1d:56:49:0c:6d:92:7e:36:47:f6:
6c:39:94:65:e2:c2:64:0c:de:e8:b6:d8:57:5f:61:ce:71:28:
b6:1b:c4:80:a1:ed:c5:74:80:58:db:dc:81:ff:b6:43:fc:b9:
1c:e5:c7:bf:bc:d6:cf:73:54:b0:2f:c3:51:f0:60:14:9d:da:
5c:da:ab:e9:7a:3d:e9:e1:21:da:6a:11:a4:15:6b:a9:32:d4:
92:6f:6c:bc:a4:f7:8f:0b:80:a1:9e:59:33:10:ce:bb:30:14:
69:72:0a:e2:bf:1b:00:8e:25:b3:6f:c7:6b:b7:9c:a7:a3:51:
50:77:d9:56:ed:e6:8d:9f:75:7f:87:16:8b:d3:e6:43:3c:ec:
75:70:f0:cb:45:8f:92:06:2f:21:0f:e7:12:5e:6b:68:2e:02:
68:f5:67:97:71:a4:a2:ab:57:ee:f8:f3:bb:13:55:9f:cc:d7:
98:95:21:6b:37:7d:3c:46:a3:e3:d8:cf:7e:b4:fc:58:a9:80:
40:cf:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:36 2026 by rpki-client