Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: gI1Ij9BembnxVGBM/YLI2CxETDV8y+g1h3dACZydciE=
Subject key identifier: 5C:98:07:2A:3A:04:B8:4A:1D:59:AD:33:4D:EB:1C:A5:82:D8:55:6F
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019CAC1024F4F0CEEA170757844095FBDD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 1752
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: muMDr0Q/jSU1kzeGotIv8JxC9DaKyrz++SQtaP+xhQk=)
2: St46xIo1d9knxq8PKrr8XW7TwzU.roa (hash: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:24:f4:f0:ce:ea:17:07:57:84:40:95:fb:dd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=5c98072a3a04b84a1d59ad334deb1ca582d8556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:68:87:51:6b:2c:8a:36:39:25:49:a9:15:
84:f4:e2:b3:dd:7c:66:35:a9:0a:2e:ba:a0:a0:84:
70:37:f0:dd:6b:fb:5c:c5:46:74:0f:19:f3:d5:17:
25:3d:c6:ea:ec:42:d5:13:96:e3:98:cf:d4:47:3e:
be:c0:7a:7d:86:1a:df:44:27:5e:02:95:88:a3:c1:
8c:95:bf:73:1f:d0:2c:2a:0b:58:1a:bc:12:8d:84:
ba:58:3e:46:35:73:dc:94:2f:e0:88:44:50:31:2a:
b7:56:f6:b6:6c:f8:e4:46:17:e7:c4:8b:ff:99:04:
f5:ad:92:e2:f4:4e:1c:56:33:5b:d6:27:c1:3d:ae:
05:0c:81:0a:c5:d6:e4:ee:d1:b2:eb:38:21:2d:0a:
3d:f7:2f:16:ad:2c:39:87:5b:7b:45:37:98:cb:3d:
7d:be:4a:8e:31:87:a1:73:ae:b3:ec:9d:6d:0e:ee:
a0:26:7c:db:11:fe:34:ac:d8:ae:0c:45:49:7a:27:
ec:9e:4b:c9:ca:30:96:dc:02:fe:bd:b7:fa:04:07:
b2:ea:e4:fa:da:f9:6d:01:23:56:88:82:c9:2c:ed:
78:cc:3d:57:55:07:ad:ff:83:c6:10:0f:2a:01:8e:
39:86:93:3e:d8:b4:65:30:be:5a:01:26:be:b6:f3:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:07:2A:3A:04:B8:4A:1D:59:AD:33:4D:EB:1C:A5:82:D8:55:6F
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:01:ef:ca:c7:8f:42:bc:41:9b:10:b1:e9:f6:49:5e:e8:83:
f1:1e:74:b5:81:ef:ad:7f:77:42:ad:8b:d2:bc:9b:e5:40:93:
e3:e3:ee:41:1b:b8:1a:a4:56:71:a5:22:aa:f3:8f:2f:59:0f:
4b:d9:cf:0b:d2:25:13:97:b3:83:da:11:ac:57:82:41:53:3c:
ea:31:5d:3d:20:13:80:10:61:a5:d8:21:08:0e:f1:70:94:22:
28:dd:b3:fa:21:2e:25:0c:3a:3e:b6:f0:02:a3:e4:39:43:e7:
a6:55:85:66:e1:54:4a:90:03:ed:6c:80:29:54:e4:c3:b1:05:
bc:b9:2a:2b:34:ab:17:f2:bb:a2:79:d4:aa:3e:33:81:36:e1:
fa:f7:ab:5c:cb:f1:09:4c:66:fb:3d:30:8e:5a:0e:e7:78:ac:
5f:e0:d4:dc:fb:e8:fe:cf:2c:38:3a:78:f7:4e:86:01:cf:c4:
0d:f3:2d:96:a7:f7:12:66:06:89:3f:7f:d0:f1:a7:b0:27:de:
15:bb:0e:d1:34:01:9c:93:ba:ac:87:e2:44:88:a7:10:0a:b9:
0a:2a:73:9b:95:69:a9:8f:64:49:28:b8:cb:1a:38:33:53:d0:
01:29:07:e8:3e:9c:da:d3:99:e8:b4:e9:5c:e9:ea:dc:80:d4:
2d:3f:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:11 2026 by rpki-client