Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: OR02SFeS0wczmNeHA2khrgMA4ugfsSR7Y0E2gMTkq5w=
Subject key identifier: DF:C0:F6:16:28:E6:10:9D:AC:00:13:1A:DA:C2:BA:5B:EC:3E:5C:9B
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019F129C843E330AB16FBDC4F241FC58453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 029F
Signing time: Mon 29 Jun 2026 09:01:14 +0000
Manifest this update: Mon 29 Jun 2026 09:01:14 +0000
Manifest next update: Tue 30 Jun 2026 09:01:14 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: 7HtrUzyhEdw7o7ZxWQssrUZaUM1dPp+DDfYRr3iaHq0=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:84:3e:33:0a:b1:6f:bd:c4:f2:41:fc:58:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Jun 29 09:01:14 2026 GMT
Not After : Jun 30 09:01:14 2026 GMT
Subject: CN=dfc0f61628e6109dac00131adac2ba5bec3e5c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:99:a6:af:e1:e1:1b:94:ad:23:76:2f:a4:
b3:3c:20:cb:0e:2c:7b:69:00:81:04:0a:56:5a:25:
78:2e:35:71:de:d5:14:98:1f:12:3f:f2:11:d9:3f:
df:69:3a:79:68:87:0c:6a:34:d7:14:1b:c0:ed:fd:
13:a2:c5:7d:1d:d9:f9:c0:95:13:20:7e:87:8a:41:
d2:ab:08:29:f4:0c:01:f4:8f:4a:5e:af:5f:28:e2:
d4:97:4a:8d:b3:24:d3:82:01:95:84:c4:9e:70:7d:
67:c7:50:07:80:a7:5b:e3:92:f8:44:11:43:00:27:
0a:aa:84:08:dc:26:a7:fd:a2:71:a1:78:f8:38:dd:
99:c4:bd:2a:be:54:ea:0a:de:78:fe:0a:92:93:76:
5e:91:4b:52:ce:72:ee:55:e4:b8:99:23:6d:bb:2e:
d6:ed:24:67:bc:22:e6:b9:f9:c1:09:62:ac:85:71:
94:dd:50:d2:6d:30:89:49:8f:85:f0:9d:90:dd:4c:
64:4b:b2:1f:d3:cd:f4:b6:27:33:bd:17:09:6b:0f:
f6:fe:6f:2e:84:2b:87:b7:54:a8:60:1b:a6:f9:6b:
5a:1c:d0:47:5f:a3:52:be:cd:bf:97:4b:8f:dc:1f:
16:51:69:cc:40:0d:d5:2c:4c:5f:cc:83:27:28:d6:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:F6:16:28:E6:10:9D:AC:00:13:1A:DA:C2:BA:5B:EC:3E:5C:9B
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:ba:4f:57:68:91:34:4c:ce:18:b5:1f:54:36:e6:77:b3:
49:ed:83:11:8f:f8:7f:5b:3c:5e:ec:cc:f9:1a:f6:e2:22:82:
b7:15:9e:29:c5:e8:b0:b5:ef:ce:ec:fc:2d:24:da:fe:8c:c7:
d5:66:7b:8a:fa:6d:ab:4e:bf:4b:b4:ba:5a:d7:41:61:bb:69:
a4:99:c7:09:42:ff:49:3a:05:87:21:fb:87:c1:bb:25:f5:f3:
4c:f8:dc:48:97:a7:3d:ee:eb:b0:05:8b:fe:3d:0e:fe:b2:6e:
03:bd:96:36:b6:a9:a8:12:b9:54:ae:8d:57:ea:f3:47:92:24:
55:55:06:b1:39:64:3e:1f:6f:bc:3d:ce:ed:d8:b3:83:f3:ab:
76:6c:ee:8c:97:a2:c4:8d:58:41:b7:0d:1e:f7:f4:72:8a:dc:
f7:ed:a8:97:76:76:b8:bd:4f:21:d5:fa:64:a8:b5:fb:0e:f1:
e3:e4:16:c0:2a:61:c2:5d:22:15:75:6c:50:6f:99:23:ab:cf:
2b:c7:2a:30:39:3f:f9:2a:d2:0c:a3:06:00:15:7a:91:57:e8:
68:ab:da:45:0c:f3:dc:19:e6:85:88:5b:f0:80:0a:a8:a0:4b:
d2:c0:42:66:6b:2d:58:22:5b:0b:96:59:b2:f5:00:fd:77:7e:
b2:c3:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:16 2026 by rpki-client