
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: dMu2r3Kl+Vtm49IIv/h2MbpbA/yoRobPXYT9fDr9GQo=
Subject key identifier: F6:29:FC:1A:46:EF:EE:6A:B4:62:70:0A:AE:4B:0E:C2:AE:55:9E:54
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 019D9850504D973220EC9339E72D5F346DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0FE8
Signing time: Thu 16 Apr 2026 22:01:33 +0000
Manifest this update: Thu 16 Apr 2026 22:01:33 +0000
Manifest next update: Fri 17 Apr 2026 22:01:33 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: qEs4BeJDRO9umVTxstq5pMQ0+1lT6x1PzBvvU4I9TnI=)
2: UJWn-wAPft9IixekN55NPYLNamM.roa (hash: pG2rLvElt60tF5xnp9AHmw3BuJ08zKLP8VTkx1BBVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:50:4d:97:32:20:ec:93:39:e7:2d:5f:34:6d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Apr 16 22:01:33 2026 GMT
Not After : Apr 17 22:01:33 2026 GMT
Subject: CN=f629fc1a46efee6ab462700aae4b0ec2ae559e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:13:02:be:da:26:c7:ac:a4:93:42:ac:8b:
50:78:48:80:a0:86:14:31:d6:bf:f5:b7:5e:d9:09:
31:77:6b:69:e2:b2:0a:0f:bc:c4:d5:dd:72:b9:49:
38:3d:8b:7d:62:11:1d:bc:fc:ca:66:85:fc:f5:66:
46:fd:a0:a8:17:c6:22:5a:a5:ff:41:28:03:ac:a5:
09:b3:f9:cd:f9:1a:c1:14:d3:ab:f7:df:c3:0c:51:
fe:55:08:12:6b:8f:9d:0c:ae:b6:ed:bb:2e:bc:bf:
2a:f0:15:44:c2:a9:25:e6:16:f6:95:ba:9e:e6:89:
b6:c9:c0:56:ab:58:88:4e:87:47:a1:98:76:1d:bf:
c5:f1:5d:e0:fd:fb:3a:61:0d:60:5c:13:5e:dd:31:
fd:b6:33:cc:4e:00:d6:ca:7c:9b:b4:3f:0a:c0:54:
c5:0e:92:a4:06:b5:a4:1d:54:0b:0d:02:ac:bd:2d:
5b:47:af:21:54:e2:23:b4:0b:39:5d:c0:ff:f2:74:
80:a2:5f:b9:f8:19:d6:3b:5a:66:c8:60:34:e3:1d:
d4:d9:57:f1:bf:c1:07:cb:9d:5a:fd:8c:6f:0c:7a:
f4:ef:45:61:41:cf:2e:0a:8f:25:c1:e4:08:34:aa:
a8:3c:d9:d5:c0:f9:88:3d:26:c6:8a:35:d4:29:60:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:FC:1A:46:EF:EE:6A:B4:62:70:0A:AE:4B:0E:C2:AE:55:9E:54
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:50:83:ff:20:10:b4:81:0e:b2:29:8b:d3:2a:6d:f8:69:2f:
59:99:c3:57:cd:9a:fd:f0:2c:60:ff:33:ce:eb:03:34:1c:0d:
96:b2:30:cc:e4:66:21:ae:31:22:09:2e:d6:9e:49:49:0c:f3:
3a:d5:39:de:e7:3c:98:95:70:47:3a:9f:d7:ac:b3:53:36:78:
db:6a:61:95:6e:28:df:4b:52:bf:30:c0:51:d4:db:77:ee:92:
04:75:01:82:a8:3f:fd:60:43:5b:5d:38:8f:3c:94:af:8f:89:
3a:c7:da:bf:e7:c2:3f:0a:d7:f0:d7:fa:1e:3d:7c:e3:19:37:
74:a1:d8:e2:eb:e2:64:55:04:75:f3:f8:cf:f0:ef:40:a3:be:
8e:e8:bc:e2:5a:93:1a:13:59:ad:bc:dd:3b:b6:32:99:41:e7:
90:b2:68:16:2e:90:d1:87:41:1b:e3:6e:0c:5c:31:25:15:f2:
ec:47:35:28:e8:ce:09:82:d8:d5:c4:b4:a2:78:7c:c0:cc:fa:
84:b1:f8:f7:04:d2:7f:40:a1:4a:70:0c:dc:94:36:cd:6a:4a:
27:2a:1a:ac:09:97:18:48:e9:cd:74:87:60:f3:05:03:77:cf:
0f:55:86:b7:4e:f6:54:42:2a:b5:ea:6f:fb:c7:4f:05:a6:94:
42:d2:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:10 2026 by rpki-client