Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: KqnVb1m3kb1L066onmwcJSraWoPVAap/frnJS7N3F2c=
Subject key identifier: BE:8D:C9:78:F8:3B:A9:62:E2:E1:6C:5E:38:7F:C4:7E:68:82:07:9A
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019F0A74867D61571AE9E37E4C344E015077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 1721
Signing time: Sat 27 Jun 2026 19:00:36 +0000
Manifest this update: Sat 27 Jun 2026 19:00:36 +0000
Manifest next update: Sun 28 Jun 2026 19:00:36 +0000
Files and hashes: 1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: up6Rj7Jh4nxAbAsZ0WpGljYG0rX7peQwsM4j6fJWXOI=)
2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:74:86:7d:61:57:1a:e9:e3:7e:4c:34:4e:01:50:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Jun 27 19:00:36 2026 GMT
Not After : Jun 28 19:00:36 2026 GMT
Subject: CN=be8dc978f83ba962e2e16c5e387fc47e6882079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:bd:b8:f7:3c:ca:e9:3b:ba:9e:3b:9e:3b:
e2:59:25:f6:09:f4:97:7e:25:89:28:a9:c7:47:d5:
f0:e0:41:7b:95:40:a4:e7:7d:2e:ec:08:e7:e1:4a:
29:fa:5a:18:74:60:c8:db:02:78:1c:e4:43:27:70:
be:b8:2e:a6:df:09:27:2c:5a:b3:9f:2e:df:09:e4:
7b:41:87:a2:bc:ab:47:5c:39:00:3d:74:32:a9:f5:
41:c6:87:ce:f6:1f:0e:d2:38:e3:97:7a:32:2a:a4:
2a:ce:90:7b:cb:68:b0:9d:6d:97:8a:18:18:28:e7:
d3:9b:8f:2e:15:5c:e8:db:6f:e1:ae:29:ab:64:7a:
8b:01:38:b2:cb:72:43:7f:4f:3d:d2:c6:38:9f:7a:
67:66:1e:f9:c1:00:7d:a0:b0:13:71:16:af:7b:8f:
ac:19:92:53:29:84:74:ed:55:a4:ec:64:2e:4d:ba:
8b:f3:c3:b8:59:e6:ee:ad:a6:bf:55:85:a9:80:4f:
f9:dd:01:91:73:8b:8f:47:12:4b:23:10:16:49:d4:
e1:4b:ab:f6:12:9a:97:f7:6a:c5:87:50:26:70:6e:
af:2f:14:fc:c6:61:4c:46:22:f4:7d:d8:f5:37:6c:
34:72:ed:10:2a:6b:89:6c:6a:0c:65:2b:ec:45:e9:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8D:C9:78:F8:3B:A9:62:E2:E1:6C:5E:38:7F:C4:7E:68:82:07:9A
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:af:35:51:eb:f5:d4:80:b2:7c:e7:78:ba:ba:93:9f:48:1d:
da:8d:60:4d:1f:be:d2:db:98:13:f9:d0:dd:70:14:be:8c:18:
09:bb:15:a4:b3:15:97:c1:33:f5:ee:3a:c7:aa:8e:99:38:37:
8e:e9:4a:05:9e:52:0e:a4:11:7b:fb:c6:2b:ca:5b:ad:c0:72:
72:d8:79:96:5d:31:56:eb:3f:6f:31:e4:91:c2:42:d0:5e:3b:
ea:56:d0:bd:83:c2:fe:cc:9e:4a:29:42:1d:15:42:49:34:85:
e6:ca:90:1c:23:33:84:a1:90:1c:a2:f0:a7:7e:9c:0c:2c:d4:
70:2a:31:44:96:01:2e:d6:96:f2:14:44:8d:59:1e:2d:2b:5a:
9f:e0:83:a0:0b:51:f1:29:13:5a:af:93:de:6d:9c:8b:ea:b4:
6a:b8:2f:90:a3:76:aa:f8:8f:0c:c0:1e:17:5b:d6:b5:a0:37:
e7:eb:4b:92:eb:08:6c:31:67:ba:c1:1e:4d:04:75:25:56:82:
44:34:31:6a:6c:7e:7d:f5:d5:d0:bf:3b:2d:38:cb:50:d6:8d:
b1:67:94:d7:19:f0:96:02:45:5c:22:d2:39:9e:af:4f:0a:01:
6e:22:a4:3b:58:1e:fb:e3:d3:e3:4d:42:93:11:5e:af:85:c3:
03:ec:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:49:54 2026 by rpki-client