Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: RaMYDqnL8PNimkKYN6ntP0ZLItM/F2GHIk2kvMnO6P0=
Subject key identifier: F9:50:69:43:98:7A:FD:F5:8A:02:72:6D:D7:5F:5D:05:38:29:A9:30
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019CACEBF31817A32BE673F09A62D0555B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0F23
Signing time: Mon 02 Mar 2026 05:01:10 +0000
Manifest this update: Mon 02 Mar 2026 05:01:10 +0000
Manifest next update: Tue 03 Mar 2026 05:01:10 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: 5lGkVpsbdmQIJw9Jht+1Z044+dmq7DMARSpEBO+A9H0=)
2: h5rIzWzGmQpXwRoeIBlSFX0pQ_o.roa (hash: NauXsdOPLqU7sZPDKzPlpcD+oR3XFVkJad/CIxV2JUw=)
3: hYPIQ6KCwLYidc5jqGOZ-EVW5h0.roa (hash: iK2Ok7EMd4gppSvWcsHHP8Tlafr+5R3o2rZRMVBVrVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f3:18:17:a3:2b:e6:73:f0:9a:62:d0:55:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Mar 2 05:01:10 2026 GMT
Not After : Mar 3 05:01:10 2026 GMT
Subject: CN=f9506943987afdf58a02726dd75f5d053829a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:9a:ea:7a:e9:f1:3f:d5:97:0d:ea:5c:20:
7d:a6:14:2e:8d:4a:6c:04:b5:3b:4d:f2:ce:e7:b5:
dc:12:d8:80:05:75:a7:17:24:ac:22:a8:3f:64:47:
28:2b:51:b7:80:bb:3e:e6:81:29:94:28:97:84:76:
ab:37:19:78:0a:9d:ac:d9:26:90:57:b1:00:d1:32:
d4:6c:d3:7c:02:85:15:02:f8:43:3a:ac:c3:9d:e4:
5a:68:ed:b2:e9:12:fb:6f:c2:1b:c4:44:7f:51:d7:
8a:96:19:43:03:02:7b:f7:50:7d:a5:08:3f:35:4e:
27:fe:e2:f6:d4:63:5a:7f:71:12:36:3c:bf:61:49:
ca:98:38:b5:b5:80:f2:c7:f9:12:c9:21:e8:44:1c:
b4:09:35:1c:56:46:45:64:e1:1b:8d:0e:a6:7c:b8:
02:fa:dd:74:15:d3:98:16:27:64:7b:e9:01:30:95:
b2:7b:13:85:4e:fc:31:31:cc:1f:f1:d4:64:2f:4c:
68:9a:81:f3:3f:8d:2b:e1:31:ce:a3:7c:37:37:49:
7a:1a:0f:4f:38:f5:89:a5:a3:fc:97:8c:f6:e6:e7:
00:e3:f5:bf:a9:04:2f:30:ed:83:90:87:6f:f7:d0:
15:2d:35:67:93:53:6e:d0:c1:f3:98:6d:16:74:03:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:69:43:98:7A:FD:F5:8A:02:72:6D:D7:5F:5D:05:38:29:A9:30
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:3f:75:e4:51:e0:a3:57:ea:09:72:5b:5f:58:1d:ec:ea:
c3:a3:6e:0b:8b:b1:42:95:68:ca:ef:da:32:cd:02:ae:8a:eb:
71:dd:62:fa:9c:b1:c2:b2:d8:ef:e2:c2:aa:9c:62:9e:4c:df:
20:95:1e:b8:30:31:fe:e7:44:44:ab:84:ad:b9:b0:ac:f8:c9:
27:13:32:3c:bd:a6:67:61:63:3a:93:0e:39:91:1a:de:04:44:
fe:fc:5d:e3:e6:5b:8c:4a:94:24:81:13:84:88:0d:29:0e:bc:
09:1c:da:cf:ae:15:67:8a:87:09:f8:77:30:c7:f1:73:d7:db:
1f:06:86:b7:e5:3e:16:b3:93:d0:a0:a5:ca:ab:f7:a9:dd:22:
ef:65:6c:6e:65:17:eb:54:58:0a:c6:4a:0a:44:13:40:90:cd:
eb:6e:ee:a0:8f:1e:63:6c:75:97:6b:a6:67:81:72:68:0b:5e:
c6:49:ff:7b:bb:0a:5c:c9:26:75:f2:0d:6f:14:4e:3a:dc:30:
b3:de:77:7a:1f:24:2a:86:1d:f6:9d:ec:13:32:48:03:e2:c9:
1c:94:23:ad:f3:64:9c:6f:89:79:e6:f3:51:57:e2:d3:c7:63:
11:83:a1:51:4c:63:90:5b:ab:aa:c9:96:c8:10:93:e2:e0:f8:
06:c3:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:34 2026 by rpki-client