Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: SiSIzrMP1r+XjoMKRi6aoyHz3tUzycc2Ruy3l5zy5ok=
Subject key identifier: 96:7D:42:A4:98:8E:C4:00:5B:79:73:98:90:1D:82:8C:B3:44:C9:B2
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019D9B87A5CECC1C9C785F9B745ECD8AE9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 17CE
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: qqNTrTVHUIj8cPtEUIybYtcaaHs9oFYVyYdxgmv1ftg=)
2: St46xIo1d9knxq8PKrr8XW7TwzU.roa (hash: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a5:ce:cc:1c:9c:78:5f:9b:74:5e:cd:8a:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=967d42a4988ec4005b797398901d828cb344c9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:96:6a:c2:80:9a:74:b0:ab:07:b0:cf:93:
4b:90:61:bb:8b:6e:4e:c1:a5:88:52:c9:2a:33:db:
c2:79:c4:13:18:6b:a6:da:d5:b6:7b:57:77:2c:ad:
09:61:cd:71:fd:f4:b0:80:23:e4:a7:2e:c0:31:7c:
f1:04:50:ff:68:a5:d5:06:7f:1b:e2:8c:01:42:db:
d2:ec:bc:57:33:f7:8d:d1:57:53:c9:e5:52:48:6b:
f5:df:ec:77:34:d1:eb:57:2f:0f:1a:45:57:bc:35:
93:a7:d1:e6:9d:89:7a:f0:b6:51:22:ef:06:78:0c:
13:fe:47:cb:8d:d4:79:8e:9a:d4:10:ec:86:c1:10:
0e:87:c4:71:70:7b:45:89:a6:52:ac:0a:39:2f:35:
15:fc:47:be:b4:4c:8a:07:7e:dd:5f:54:8f:a8:c7:
b2:f4:7a:56:36:69:f9:a5:42:c7:47:25:d3:31:4b:
c8:e2:a3:9f:01:52:a3:61:c4:83:a0:27:42:ed:86:
5d:e3:b1:d6:bb:b1:2b:6b:01:45:ba:e7:29:35:01:
fe:b3:4f:c5:7d:c8:f2:39:24:5d:69:d0:68:74:3a:
51:a3:68:0e:b3:c8:ee:f5:6c:00:19:1f:f7:10:ae:
5f:8a:65:4c:d3:f1:2d:ec:c6:e4:2f:c1:e7:34:0a:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:42:A4:98:8E:C4:00:5B:79:73:98:90:1D:82:8C:B3:44:C9:B2
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:58:fa:83:2a:e2:50:ac:be:f8:a5:b4:66:f7:62:db:dc:
1b:af:c0:1b:98:5b:17:9d:d3:62:16:15:b6:21:3a:c5:bc:21:
11:59:49:57:61:fe:1e:ae:c4:d5:73:84:d9:e6:6f:bc:d7:c7:
23:99:30:f6:01:cc:27:c0:89:a8:2d:0e:6b:96:eb:b3:63:7e:
83:4c:a4:31:9b:93:b0:6d:1e:d0:02:75:0f:c0:ab:f4:b2:5a:
42:8f:f9:26:49:ca:66:2e:61:79:f3:6e:a4:b1:a3:8c:4e:39:
f9:74:6e:e3:e8:ae:4d:91:8e:c2:db:b1:a0:da:3f:1c:a8:11:
1f:da:ae:48:39:f3:3a:2e:c2:85:7b:dc:9b:0c:ba:02:9b:4d:
0b:9f:7f:f5:87:94:17:d8:a2:28:3b:97:6f:12:9f:f0:5b:22:
ff:59:be:50:a1:76:43:5d:bb:26:42:09:40:be:7b:9a:71:c0:
d7:1f:2e:5c:9a:84:ab:d9:58:73:56:b9:4f:bb:0b:cd:e8:40:
be:cc:0d:18:c1:00:b4:26:58:89:d9:66:be:b3:75:7f:e4:b2:
37:67:69:9e:d7:24:7b:d5:af:4a:82:7c:2e:6c:33:4f:cc:fa:
9d:fa:c7:c0:c2:5e:6b:b7:61:74:47:b8:41:f7:45:c3:8c:d1:
df:b9:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:41 2026 by rpki-client