Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: 1Khx8FaraiUvK6elkoBeisGcMqhNTaBYdj0ZapfZW2Q=
Subject key identifier: 1E:4A:3E:03:19:BF:66:CF:49:45:68:99:C0:78:FD:B4:C0:63:C3:F5
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019CEBCA8CA2D16AE323F5BE07E4B4DCC851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 1608
Signing time: Sat 14 Mar 2026 10:00:45 +0000
Manifest this update: Sat 14 Mar 2026 10:00:45 +0000
Manifest next update: Sun 15 Mar 2026 10:00:45 +0000
Files and hashes: 1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: LDNpy6qbqDKTKV6eMm4FcJM3F7u7VJX5dckjThHn3Ms=)
2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:ca:8c:a2:d1:6a:e3:23:f5:be:07:e4:b4:dc:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Mar 14 10:00:45 2026 GMT
Not After : Mar 15 10:00:45 2026 GMT
Subject: CN=1e4a3e0319bf66cf49456899c078fdb4c063c3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:d7:5a:b4:dc:c7:9f:4f:45:3e:f8:07:cd:
c9:98:fc:ba:41:ab:4e:9f:ba:63:38:2f:eb:e5:7a:
36:8b:4e:3e:89:bd:34:75:27:00:85:5b:25:d5:46:
c9:56:c8:68:3c:ba:9b:4b:0d:47:4a:b8:bc:6e:b5:
70:0d:42:bb:a5:05:eb:1b:de:9f:ca:38:29:dd:0b:
61:d0:12:b6:08:e6:08:88:53:37:c1:22:75:04:c8:
3b:1e:69:50:9b:c9:66:50:fb:64:a8:ec:0b:80:26:
16:88:bb:9a:a2:d2:76:32:d1:08:5a:a9:bb:6e:d5:
e6:38:10:27:89:f1:36:02:8a:c9:47:bb:be:d7:f6:
71:d0:b4:00:b0:c2:ec:3c:b4:14:43:15:c4:47:30:
e1:c1:ce:ed:49:62:e1:10:cb:de:2a:44:24:13:bb:
4d:39:15:ee:a5:9b:a7:d0:30:f8:e8:29:ff:9a:8b:
b7:ad:26:d7:d6:97:77:2e:81:c0:ff:0d:7b:4a:88:
a4:1e:11:46:d0:c6:04:13:79:90:2d:de:4f:04:a5:
79:36:e5:1a:12:9a:bd:9d:b8:b4:48:b6:61:42:bd:
00:ad:9c:25:2e:98:d6:e7:11:c1:5e:9c:50:97:6b:
b5:11:d8:59:63:66:7d:44:a9:0e:ae:cb:ad:31:8e:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:3E:03:19:BF:66:CF:49:45:68:99:C0:78:FD:B4:C0:63:C3:F5
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9a:ac:ea:5c:55:ef:6b:b7:2d:0f:0d:bb:d7:a4:b8:d8:07:
16:87:ab:4e:30:fa:bf:d4:5a:41:1f:3a:73:ec:2d:54:b7:b8:
ff:81:29:bb:80:39:f6:2f:49:98:0a:91:c0:59:15:6b:9a:5a:
b1:ca:ea:42:3b:f8:5d:b7:28:37:79:fc:a8:b3:83:5e:4d:b1:
4a:5c:d8:0d:47:24:19:fd:6e:77:95:cc:26:f5:e9:24:e5:d4:
2d:ae:f4:34:93:a6:b6:85:90:bc:0c:03:73:7d:e2:ef:be:25:
d6:22:b0:9e:53:c7:50:23:87:29:a3:28:64:cb:cb:ec:30:31:
e6:ca:f9:25:17:ea:3c:35:0e:30:0a:a3:51:83:7e:4d:5a:ee:
ab:81:81:99:73:e0:92:d2:c9:a9:f1:27:b9:c1:22:94:d2:0a:
3b:0c:99:8e:1d:8f:a8:b1:53:de:56:42:85:34:5c:64:93:f0:
68:b8:0d:69:b6:aa:96:0b:3d:e0:f6:40:9e:e8:d2:83:9c:00:
24:05:58:2b:b1:8c:93:58:90:89:f9:3d:5d:fa:84:da:c6:09:
54:74:46:b8:45:84:f7:35:fc:90:ab:8b:c9:d9:58:e3:cd:c9:
5f:c1:a8:1f:a9:45:94:3d:5e:58:a7:21:b4:58:cc:f2:34:2b:
2d:6c:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:20 2026 by rpki-client