Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: glX+S2KWwdxbFAn1kfZZHmtZd3Y1m0Qsnfv+u1XVvKQ=
Subject key identifier: 5D:58:CA:78:23:65:DB:CC:1B:B9:30:44:A2:93:B1:C1:12:E5:CD:FE
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019FFA5AEB5636005AC7535BAE88289A64E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 0317
Signing time: Thu 13 Aug 2026 09:01:30 +0000
Manifest this update: Thu 13 Aug 2026 09:01:30 +0000
Manifest next update: Fri 14 Aug 2026 09:01:30 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: VCWlqkSsFTvclOdABWfgC29hmAuVR0n0E0jOqL7eALc=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5a:eb:56:36:00:5a:c7:53:5b:ae:88:28:9a:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Aug 13 09:01:30 2026 GMT
Not After : Aug 14 09:01:30 2026 GMT
Subject: CN=5d58ca782365dbcc1bb93044a293b1c112e5cdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:02:39:42:3d:5d:3b:59:19:68:77:71:94:
4f:dc:42:6e:1e:e7:7b:1e:eb:d9:31:53:d5:ed:1e:
c0:75:01:9b:b4:b3:a2:ea:67:a4:19:b5:5a:2a:97:
42:64:18:8b:6f:f2:23:6c:27:a2:8e:6a:2d:40:e5:
79:9c:52:f5:8f:78:5a:03:53:39:97:31:3b:40:80:
69:0a:3a:c1:44:dc:b5:c7:81:a3:ec:c9:74:8b:44:
0e:f7:b4:94:5b:da:1c:78:4b:a4:72:ad:ff:f9:b5:
9f:c3:39:90:ce:88:69:35:f8:ea:e2:b7:c9:35:5d:
f5:63:45:e5:96:d6:61:a1:bc:24:30:30:4a:03:bc:
10:b2:f0:36:f9:5c:ec:6f:44:06:82:de:c9:9f:67:
6b:cf:4e:ba:3d:61:32:d2:8b:00:4f:ff:3c:00:fe:
e3:48:9a:21:ef:2a:98:b3:0f:c2:63:a7:6d:2d:34:
c3:3a:ee:4c:8f:77:5f:eb:26:20:e5:d2:7f:31:7a:
e7:df:fb:fa:8d:a1:a3:0f:2c:00:10:53:35:ac:86:
c8:ba:90:06:d1:a7:48:67:8c:b2:2a:b0:b6:c9:75:
48:f3:ed:f2:af:21:a5:03:93:c2:27:b2:a3:62:7a:
1a:d1:10:8f:90:d3:3d:6c:b5:29:23:1a:ba:3f:ac:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:CA:78:23:65:DB:CC:1B:B9:30:44:A2:93:B1:C1:12:E5:CD:FE
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:25:92:a8:00:e0:48:e8:2d:31:2d:b1:d9:f6:0b:88:8b:53:
7d:50:90:69:46:ba:1b:aa:df:62:f4:95:28:5a:be:5e:0c:5a:
7e:43:b3:97:5e:a6:6b:01:5d:83:91:d6:2f:a2:0b:dc:bb:42:
b4:26:a2:1e:eb:51:8d:c0:47:1f:79:5b:31:08:43:35:ea:a0:
ca:a8:da:b4:cd:b2:ea:ec:05:d2:40:b5:48:71:1c:7f:ae:c8:
56:9f:83:4e:91:16:23:64:e7:6a:d6:97:46:46:7e:cb:fd:be:
f3:39:4d:28:47:12:5a:f1:63:2d:61:84:0f:75:12:73:54:91:
10:c3:d7:9d:ca:8e:89:65:e5:6a:d9:8d:3b:86:21:25:b2:b9:
fd:ee:bf:16:b8:01:dc:20:04:2b:fa:55:79:5f:7a:44:ca:fa:
63:a7:10:54:6a:2c:33:49:8e:7c:8e:b1:76:e8:ec:eb:26:ba:
d5:b1:8f:66:e8:7d:b4:6f:36:54:74:69:c7:3f:d0:4d:57:da:
bf:ce:8f:ad:4e:95:4e:8c:8e:39:a0:99:c0:25:a1:87:f2:5d:
b5:4e:92:dc:15:bd:80:9a:52:3f:0e:04:5f:3e:15:9e:2c:24:
ed:ac:e4:d9:72:13:31:d8:c9:08:8e:54:b7:c1:ea:64:dc:26:
1b:62:c1:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6WutWNgBax1NbrogommTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MDM0ZDJiNTkzMmRkMTQ5MWRlN2ZmZjMxYzdkODNhZjcz
MjA2ZTIwHhcNMjYwODEzMDkwMTMwWhcNMjYwODE0MDkwMTMwWjAzMTEwLwYDVQQD
Eyg1ZDU4Y2E3ODIzNjVkYmNjMWJiOTMwNDRhMjkzYjFjMTEyZTVjZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm28COUI9XTtZGWh3cZRP3EJuHud7
HuvZMVPV7R7AdQGbtLOi6mekGbVaKpdCZBiLb/IjbCeijmotQOV5nFL1j3haA1M5
lzE7QIBpCjrBRNy1x4Gj7Ml0i0QO97SUW9oceEukcq3/+bWfwzmQzohpNfjq4rfJ
NV31Y0XlltZhobwkMDBKA7wQsvA2+Vzsb0QGgt7Jn2drz066PWEy0osAT/88AP7j
SJoh7yqYsw/CY6dtLTTDOu5Mj3df6yYg5dJ/MXrn3/v6jaGjDywAEFM1rIbIupAG
0adIZ4yyKrC2yXVI8+3yryGlA5PCJ7KjYnoa0RCPkNM9bLUpIxq6P6wSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1YyngjZdvMG7kwRKKTscES5c3+MB8GA1UdIwQY
MBaAFIcDTStZMt0Ukd5//zHH2Dr3MgbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMt
MzlmZjI2MTUyYWE0LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMtMzlmZjI2MTUyYWE0
LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSWSqADg
SOgtMS2x2fYLiItTfVCQaUa6G6rfYvSVKFq+XgxafkOzl16mawFdg5HWL6IL3LtC
tCaiHutRjcBHH3lbMQhDNeqgyqjatM2y6uwF0kC1SHEcf67IVp+DTpEWI2TnataX
RkZ+y/2+8zlNKEcSWvFjLWGED3USc1SREMPXncqOiWXlatmNO4YhJbK5/e6/FrgB
3CAEK/pVeV96RMr6Y6cQVGosM0mOfI6xdujs6ya61bGPZuh9tG82VHRpxz/QTVfa
v86PrU6VToyOOaCZwCWhh/JdtU6S3BW9gJpSPw4EXz4Vniwk7azk2XITMdjJCI5U
t8HqZNwmG2LB0g==
-----END CERTIFICATE-----
Generated at Thu Aug 13 17:14:54 2026 by rpki-client