Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: Hod03j3YDvUyRaDTwqfwmrJJ+IUkk655K/3B6l5SZYY=
Subject key identifier: 84:D4:C8:48:C5:CA:35:A1:04:31:50:C2:E8:EB:49:B9:09:43:F5:BF
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019D37F724132E0A0644680D921BDF88A06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0E53
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: rZcocN/6MbmfzfjABcWR5p1J5kCctWI/kSm+ZLgS8Vw=)
2: vFD13EECI63i6INpfz5KMmXHVEk.roa (hash: Xu061/sJ2Z4De52RiHTNj3+yQxv1II+U8nmD/HxX9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:24:13:2e:0a:06:44:68:0d:92:1b:df:88:a0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=84d4c848c5ca35a1043150c2e8eb49b90943f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:ef:31:64:27:07:43:12:83:af:f4:ec:c9:
ec:ce:d6:e5:b0:93:ee:ca:ce:4c:7c:eb:0b:a8:05:
d1:ca:d4:65:fe:83:ec:76:d9:7e:6c:3c:a2:b0:b7:
a8:35:20:ac:ea:8e:d3:8d:0f:7c:ea:01:9f:ca:31:
a8:c2:d8:08:80:bc:b9:72:38:ab:7e:c0:12:35:4b:
a9:ac:c1:72:53:cb:44:76:06:0d:bc:9d:7d:5a:f8:
da:ca:1d:1f:e2:25:05:cb:3b:af:b4:18:17:da:e7:
38:a8:13:3d:fd:b8:b0:9d:b5:f3:e3:8f:77:85:11:
f1:fd:85:72:4d:6d:af:f6:5f:68:23:2e:4d:03:d1:
73:1b:32:e2:43:14:e3:4d:07:0e:4b:8f:15:23:53:
13:f4:3e:31:ef:f8:58:8e:17:2e:9e:21:97:d2:04:
9f:3c:73:78:52:d0:e3:35:50:ae:59:db:48:f9:4a:
aa:a8:ca:8d:6b:c5:3e:bc:c8:b9:d1:d9:4e:7d:88:
3a:95:35:5e:2d:00:ed:68:db:76:3d:03:bb:b8:c0:
d1:e7:97:26:86:ed:d4:89:d8:26:e1:3a:05:9e:82:
e5:2a:3b:6b:4c:15:6a:9a:65:e3:08:6b:75:75:dc:
32:30:b1:62:26:d4:78:a6:94:e3:5b:53:69:76:ce:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:C8:48:C5:CA:35:A1:04:31:50:C2:E8:EB:49:B9:09:43:F5:BF
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:65:03:d6:4e:4d:86:28:8e:ec:19:88:cb:4d:33:03:02:
71:22:e2:f6:66:08:68:d8:e7:9f:d8:e0:51:9a:af:40:c6:4f:
18:33:bf:37:2e:e2:b2:21:2b:bd:b4:ae:c2:a6:65:62:58:e1:
86:3a:0b:56:3e:32:35:a2:1d:cd:57:de:11:fc:63:82:94:eb:
c3:5a:2e:67:28:19:75:93:bd:1d:ff:15:64:c8:14:69:99:2c:
3f:b0:01:df:2b:16:f7:26:a6:c7:19:0f:b2:66:f2:a6:a9:fe:
24:ac:a7:65:ba:a2:bd:27:16:90:ee:57:7d:59:9c:94:19:44:
7e:c4:73:a8:98:e3:49:5d:ff:16:cd:ca:6c:25:2e:4d:ab:89:
d0:33:58:fe:d6:e0:82:a9:be:92:a1:c8:bd:11:e5:cb:21:16:
d8:15:b0:70:1b:53:96:3c:be:9e:f9:39:9d:08:d3:4b:25:a6:
8e:2d:f7:bb:2a:26:f1:a3:18:76:85:d2:44:32:62:da:cb:d6:
c3:1f:b9:13:85:d6:70:59:52:08:93:07:8c:85:03:f4:58:33:
63:4a:e7:ef:bf:93:17:df:fa:62:e4:60:58:3c:30:5b:b4:44:
b0:6e:96:75:5a:67:14:35:59:11:a2:3b:67:ff:23:47:3c:a3:
de:c6:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:38 2026 by rpki-client