Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: qSVgqty5xifhGLNg9n86LtxXtoQnmBu43Cir8YMtYRg=
Subject key identifier: CD:BE:ED:F8:FF:82:4C:74:6B:1E:9D:23:20:02:FF:9B:14:6E:84:54
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 01A155F81D642CB53D355316026E72B0D781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 03CB
Signing time: Mon 19 Oct 2026 21:01:26 +0000
Manifest this update: Mon 19 Oct 2026 21:01:26 +0000
Manifest next update: Tue 20 Oct 2026 21:01:26 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: HKDs4NCV1gqLqWKaVwA8C5OVWpZRcp8m7EZWRJhGpfs=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f8:1d:64:2c:b5:3d:35:53:16:02:6e:72:b0:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Oct 19 21:01:26 2026 GMT
Not After : Oct 20 21:01:26 2026 GMT
Subject: CN=cdbeedf8ff824c746b1e9d232002ff9b146e8454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:a0:33:c7:63:c6:b3:6a:49:5c:8d:bb:98:
9f:2d:2d:d1:cd:86:7e:63:03:7f:ab:65:23:be:27:
dd:f2:3a:89:19:71:32:54:6c:7f:ae:fe:6e:6b:2b:
57:97:11:f8:9c:68:18:bb:7a:6e:2c:93:b8:46:70:
f8:5a:ff:dc:c6:95:8b:64:c4:f0:08:9c:13:f2:82:
30:71:a8:aa:59:42:85:36:67:a9:d1:a1:79:00:ce:
47:c3:0a:dd:73:f8:8f:00:d5:3d:03:40:bf:9b:a5:
0b:2d:98:aa:ab:0f:2e:ec:b9:92:43:99:9f:51:47:
27:ff:4f:fe:38:fb:73:ae:84:63:92:4f:5b:1d:66:
cc:46:f6:5e:81:46:e1:66:07:03:51:31:a5:a8:ce:
85:11:88:b0:13:93:07:c5:49:97:81:4a:48:e6:a5:
33:8a:cf:46:f2:a7:32:18:4d:30:f0:41:89:78:f6:
9a:48:ed:bb:f3:5b:d2:2b:a5:31:5a:d0:c2:a1:6c:
91:4a:9c:73:80:3a:7e:d6:a9:cf:c3:7d:40:c4:80:
71:ec:6b:79:18:01:e4:d6:50:be:93:5c:a3:1c:eb:
46:2f:67:76:19:1e:24:3d:14:fe:6a:44:71:43:0b:
bb:e1:40:f8:ae:fa:34:3e:d8:3f:58:2c:5a:fe:86:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:ED:F8:FF:82:4C:74:6B:1E:9D:23:20:02:FF:9B:14:6E:84:54
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:d3:7d:04:e4:28:54:5a:f5:85:34:e4:cc:f1:1f:d4:36:
fe:02:f9:1f:5f:41:05:a0:c7:e9:3f:58:84:16:9c:00:e9:b8:
4f:47:5e:5a:e8:71:0a:e6:44:ea:2a:20:1f:2f:e2:5d:92:7e:
b6:ec:f6:22:88:4c:62:6d:4c:97:0a:db:96:f0:48:c9:ff:11:
90:5f:9a:e1:7d:4d:7c:a9:c6:30:99:6c:5e:69:06:44:0b:86:
84:1f:23:83:71:26:44:0d:d2:47:91:1e:bf:06:d1:58:1f:05:
5b:4e:a8:53:ac:2a:80:aa:91:47:6b:93:d2:28:d6:1f:fa:65:
cc:00:a2:ab:17:6f:34:2b:20:ca:22:97:f0:b9:81:fc:2a:89:
59:43:10:6a:81:45:8b:d5:7f:82:d3:4e:a8:46:17:3c:f6:66:
3e:9e:dc:3b:b9:13:2e:9a:70:a0:f1:9f:32:c7:04:80:73:38:
cc:ea:6b:52:4f:85:69:d5:a8:04:06:73:e5:74:a4:48:31:a0:
99:c1:30:0f:f9:23:e4:97:d4:4d:e4:23:10:1e:8b:99:e5:fd:
73:76:d3:eb:c5:79:9c:a5:09:03:70:bb:9f:60:4a:aa:e7:e1:
56:a1:db:8c:58:90:06:0b:41:3f:04:06:1e:f6:be:37:43:b7:
54:93:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:17:43 2026 by rpki-client