Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: +cF2GHRHQVgn87+xaCxSX2r/q9SflOKGg+KixiARl3w=
Subject key identifier: D0:13:9A:AD:6B:E9:D8:36:A0:F5:DD:37:8D:46:2C:3C:A0:16:F2:06
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019D988663CB8B5CFD65E4A21433EAA7250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0F9D
Signing time: Thu 16 Apr 2026 23:00:37 +0000
Manifest this update: Thu 16 Apr 2026 23:00:37 +0000
Manifest next update: Fri 17 Apr 2026 23:00:37 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: 7iH3fLO2nspb0UI1J/9QJVMgi2q0ZOuA+/vPWbWM7s4=)
2: h5rIzWzGmQpXwRoeIBlSFX0pQ_o.roa (hash: NauXsdOPLqU7sZPDKzPlpcD+oR3XFVkJad/CIxV2JUw=)
3: hYPIQ6KCwLYidc5jqGOZ-EVW5h0.roa (hash: iK2Ok7EMd4gppSvWcsHHP8Tlafr+5R3o2rZRMVBVrVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:63:cb:8b:5c:fd:65:e4:a2:14:33:ea:a7:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Apr 16 23:00:37 2026 GMT
Not After : Apr 17 23:00:37 2026 GMT
Subject: CN=d0139aad6be9d836a0f5dd378d462c3ca016f206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:2e:f4:d3:2f:db:c2:86:76:a1:13:8f:8c:
9b:4b:ae:3a:bd:5c:16:21:44:50:6f:91:88:e6:7c:
a2:48:1a:82:5a:27:e7:ca:fd:eb:34:9e:5c:28:d2:
c0:f9:9a:fa:e2:bb:3f:82:28:39:9a:4f:01:26:33:
ff:31:bf:62:64:c9:8f:4f:fa:3f:d1:22:a5:fa:a5:
7d:6e:bb:65:1b:67:79:04:91:a7:61:55:ab:1c:04:
ae:66:0a:c7:a6:8a:61:cf:06:1b:8b:51:f4:6d:3c:
07:d8:db:d3:3a:0c:53:09:3e:41:8f:9b:a4:cf:62:
5f:68:d7:f0:66:1e:e7:13:4e:3f:1f:b1:bc:20:37:
88:86:66:bf:1d:74:8e:17:fb:e2:e8:08:32:e9:fd:
70:90:0e:9e:7f:00:be:6c:58:83:0a:ae:da:71:29:
2a:d3:86:b4:0f:42:47:9e:26:57:33:ea:73:25:96:
03:b2:cc:77:0f:0e:37:34:48:f2:bf:bb:49:58:3f:
d0:69:a4:5e:b7:d8:e4:0c:1f:3f:39:c8:81:4c:53:
54:7c:4e:22:13:78:de:74:6e:77:f0:9c:69:7f:8d:
78:70:12:83:61:88:3b:8e:00:11:e9:69:cf:a0:8b:
51:f4:21:1d:f2:cd:b4:e3:bd:0c:f0:d6:0d:2b:8c:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:9A:AD:6B:E9:D8:36:A0:F5:DD:37:8D:46:2C:3C:A0:16:F2:06
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:3f:ca:a2:2a:ca:78:18:77:be:b2:89:8f:9d:00:14:48:
d4:4f:8b:a2:ba:8b:61:5e:3f:1a:3b:94:87:05:67:b7:28:a1:
81:74:74:49:06:cc:43:06:ae:d8:d0:8f:07:d7:79:8e:d7:b5:
e3:08:88:b6:4c:73:02:f4:f3:54:03:12:b7:27:2c:92:06:16:
32:a5:70:33:fe:0f:50:33:20:2c:8e:7f:86:0e:56:fa:29:64:
c2:33:30:d8:42:a0:b9:8a:9e:53:61:73:25:74:58:5b:0e:21:
c7:ce:cd:bd:e3:b7:e4:6d:e5:2c:06:6c:c5:85:ad:03:7d:c4:
d3:6f:de:76:71:b0:0a:ce:d8:58:00:77:a7:78:1f:7b:15:a7:
a3:55:9e:10:35:96:c9:8e:fb:87:ea:b0:ad:eb:40:87:60:58:
6d:3b:0c:b9:bd:1a:06:98:e9:49:f0:18:19:01:2c:06:79:f3:
69:e0:75:27:32:4e:42:34:2e:ff:22:05:35:6c:16:c4:b6:c1:
85:ca:ab:dc:28:0d:5d:f9:83:83:f9:2d:91:d1:d4:79:2e:1b:
bb:71:b6:ba:cd:65:82:6e:bf:19:e2:5d:36:70:e4:d6:93:94:
97:03:d3:1e:99:74:4f:ec:e4:0c:9b:94:06:50:2e:76:97:08:
af:e1:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:56 2026 by rpki-client