Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
File: Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft (raw, json)
Hash identifier: VgUwGt9wR21keedPYCNGHTjP9aEJok9tjmuB/FY0fdQ=
Subject key identifier: FF:56:8F:5B:EB:BB:DE:81:1F:F6:19:21:A9:D0:D5:10:C5:1C:1E:92
Authority key identifier: 1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
Certificate issuer: /CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Certificate serial: 019F12657D95F60FBBEB851181B39F20FCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
Manifest number: 11
Signing time: Mon 29 Jun 2026 08:01:08 +0000
Manifest this update: Mon 29 Jun 2026 08:01:08 +0000
Manifest next update: Tue 30 Jun 2026 08:01:08 +0000
Files and hashes: 1: 7PriCDVWnT1HYJrwYNPM5oCvIbY.roa (hash: Zt6UDdQs2XkMXhq8WXEB4GIlZFaXqIzlnXOtR6MAoiI=)
2: Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl (hash: MNCGhiGsd913HsQLfjLNSukOutseics7PwLP1aVz7r4=)
3: qY64LLAKmXVBF2yF2a0AG56IVAo.asa (hash: ucX67FWJ1VM3ZcVEhzhFpCcYubHiPMVmYsb/9Ginm64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:7d:95:f6:0f:bb:eb:85:11:81:b3:9f:20:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Validity
Not Before: Jun 29 08:01:08 2026 GMT
Not After : Jun 30 08:01:08 2026 GMT
Subject: CN=ff568f5bebbbde811ff61921a9d0d510c51c1e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:49:5d:bc:10:e5:75:e7:51:02:e0:30:bf:
d3:7b:eb:0e:fe:f1:d3:b5:39:2f:fb:50:03:f6:98:
d7:46:2e:e7:c9:7b:2b:e1:10:91:bb:24:ec:ec:b1:
2c:b1:b2:7b:47:7c:eb:9d:87:8d:32:fc:bb:91:2e:
f8:19:aa:16:54:7c:84:74:e8:69:7d:57:e2:1b:fc:
69:e2:b8:b5:54:53:93:68:66:73:23:b6:ce:15:46:
a8:7a:21:57:d6:41:c0:23:df:e7:82:48:68:cc:63:
68:bc:1f:98:d1:f5:0d:15:1a:d0:f8:d6:3c:a7:80:
94:5d:29:ed:cb:4f:61:f4:89:d7:45:f2:71:46:42:
5b:85:32:b7:4f:98:07:3c:19:3e:0d:4e:ff:c7:82:
2b:50:94:72:0d:22:0d:0b:fd:49:53:24:88:14:c2:
e8:90:48:9e:6f:f3:20:2b:d2:74:7f:2c:d1:77:14:
0c:ed:57:9c:13:02:55:69:ce:6d:b2:2b:01:28:00:
70:7c:eb:6d:1b:1b:4e:ca:67:c1:4a:1c:1f:e6:e3:
60:36:80:28:4d:a8:b9:32:4c:fe:e2:97:88:64:74:
f2:8a:f2:23:89:fe:5d:c9:31:04:99:81:b3:f2:67:
3c:33:01:12:85:93:9d:4c:8d:35:59:f4:ea:9e:c1:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:8F:5B:EB:BB:DE:81:1F:F6:19:21:A9:D0:D5:10:C5:1C:1E:92
X509v3 Authority Key Identifier:
keyid:1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8f:d8:47:70:60:a5:95:bd:98:13:80:b5:75:67:22:33:6a:
74:12:2c:9e:64:6d:b1:23:4c:6b:80:9f:a8:8e:79:aa:d9:a1:
68:10:83:46:00:bf:c5:04:e6:76:fa:12:84:40:b2:c2:e3:09:
c6:65:8a:7a:c9:72:8a:b8:25:3f:90:d1:14:11:96:56:a3:c8:
12:ab:64:8f:f2:03:10:96:2d:0e:0f:5a:be:54:34:3d:a8:cd:
76:de:6c:a8:db:bb:c5:a5:99:fd:17:02:26:d4:2b:01:94:64:
30:5d:bb:f9:ce:e1:d9:7a:7a:e0:9b:8b:da:77:d2:29:0c:54:
59:b5:1c:d6:26:14:6c:6c:27:a1:b2:22:6e:76:9a:49:c6:2e:
e1:34:5f:3f:56:46:6c:e8:eb:88:39:a1:a9:af:40:ff:53:bb:
1a:ff:13:82:5d:c9:9c:0f:63:17:42:cd:25:fa:a4:af:0a:ea:
39:b8:b8:cd:57:dc:27:bf:5f:19:be:8b:57:58:b8:86:1c:05:
a3:0d:a5:db:89:34:ef:cc:00:81:2c:a5:32:8c:84:7d:9b:e6:
3b:7c:fe:de:db:7b:8f:c5:ce:93:37:7b:d6:ad:39:fc:a7:17:
b9:98:39:b7:90:36:28:b5:37:ff:6f:05:8e:c1:b5:6a:eb:5e:
1c:df:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:52 2026 by rpki-client