Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: 6MFCyjGERpc0sT9pHVmY9Z0MnnO6sjIY6xkzd8Ogn1I=
Subject key identifier: 1A:31:7F:B9:BC:BB:0E:42:FD:DE:80:60:E8:8A:B5:27:EF:02:65:85
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019D37893D418DF4EE422ECF248F884E2F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 01A9
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: zZ1mvBnCq3LtLNQjOUQt5HtaqN7WOVV5vp/cKh7cug0=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3d:41:8d:f4:ee:42:2e:cf:24:8f:88:4e:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=1a317fb9bcbb0e42fdde8060e88ab527ef026585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:8b:cb:f9:a8:3c:08:f3:4b:01:1a:62:0e:
97:db:7e:3c:6d:ca:69:9d:24:0e:05:cc:0a:42:77:
c8:8a:e0:76:6f:cb:af:54:c4:12:d2:ca:c7:86:b7:
49:da:d9:8a:97:8d:27:1b:fd:b4:37:62:89:c1:93:
3f:79:b2:b9:58:71:3b:1b:6f:e7:f1:d0:f1:bc:c2:
aa:c2:9d:5e:a5:c8:ca:6a:7e:f9:77:11:0d:9b:88:
37:3e:9c:7e:13:b0:26:20:96:b7:95:54:f5:22:9b:
4c:40:e1:15:ae:3c:61:e7:d8:ee:8c:1b:a4:b6:93:
5c:26:b7:b9:29:45:4f:73:c3:14:0f:7a:5d:89:1d:
9e:b0:70:53:41:17:22:98:e9:e1:1c:9e:b4:dc:00:
47:c6:34:5d:78:46:20:cf:3b:f1:cb:8f:67:08:26:
2b:a0:df:f4:aa:34:96:fc:02:8b:e1:15:d1:35:73:
38:97:87:29:b6:2a:35:60:bd:fa:86:36:f8:f0:89:
d1:db:a8:7d:57:74:f5:db:c2:86:6c:8b:b9:6d:68:
bd:fb:5d:61:87:3b:56:f6:56:aa:f3:63:d5:f9:de:
6d:0c:f8:d5:e8:1e:b9:56:75:e6:ed:c1:ea:e8:a4:
eb:51:fb:e8:ed:f9:89:20:cd:64:9f:28:06:e6:da:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:7F:B9:BC:BB:0E:42:FD:DE:80:60:E8:8A:B5:27:EF:02:65:85
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:49:56:6a:c5:77:ba:1a:da:35:f8:84:5e:ef:9f:97:6d:58:
00:1d:51:8a:a5:93:50:24:ad:22:bd:0f:36:d7:69:df:7e:3d:
4b:8d:a5:1f:aa:59:81:cb:bb:36:74:88:d3:07:26:06:c6:d2:
89:31:86:f0:30:90:5d:42:33:4e:52:55:73:a8:7d:12:2d:92:
66:b2:b4:e7:0e:7c:22:23:a4:8f:fd:c8:87:f2:78:95:8e:5f:
de:7c:1f:3f:72:b6:54:c2:fb:91:07:d8:4e:65:a9:4e:65:52:
e0:87:8e:c6:a1:15:a6:0a:10:ac:09:9d:d4:82:89:e2:74:f1:
4d:85:b9:92:d1:0b:44:da:90:e2:b8:2d:2e:aa:f4:57:50:23:
16:d7:97:10:ad:68:8c:bb:32:86:9e:ed:6c:56:17:be:e0:32:
f5:45:d5:75:ce:46:c8:b9:1f:5f:c3:85:74:43:32:ea:b8:0a:
d4:42:d0:fa:d4:f2:be:43:b0:2a:04:fa:c7:69:e8:f1:61:5b:
3f:15:bd:bf:6d:c7:a2:48:c8:c3:57:4c:b2:41:be:d0:b7:d4:
23:5c:24:e7:90:2b:5c:83:5f:b4:22:92:89:47:da:80:62:86:
e7:c2:a7:31:2d:dd:3d:b7:1f:d6:69:dd:69:ba:95:d4:8a:8a:
5b:df:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:12 2026 by rpki-client