Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier: nLd0WTusgH4fqSbxnyY6+JtUcCEVp0ostFxYzydGEuA=
Subject key identifier: 23:EB:AE:D6:FE:D5:DB:45:87:37:8C:2E:CE:29:AB:4D:47:00:7F:DA
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial: 019CAB3490D5861EADBC7F7C1DED34FF9576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number: 1854
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: qQntIaD/Bk6MT9UgaQ9mEsA9oj4e8t2kdJyoRwa/GBI=)
2: fue5V09i6FJElyionb_ybPtp8g8.roa (hash: NNEACxFV1sDMxB4ha/SL5C3xLggPb4gQCLR2quODcyc=)
3: pF7pebP5WMSvtBYNfmuQ-t6W4H0.roa (hash: KSKboszkMU1v+1PwaR+IaRN7TiY93lV/NYdwGIx2O1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:90:d5:86:1e:ad:bc:7f:7c:1d:ed:34:ff:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=23ebaed6fed5db4587378c2ece29ab4d47007fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:62:5b:bc:74:eb:8e:e5:be:bf:2a:1f:41:
bf:5f:c7:f4:2d:3f:a5:7f:ff:a5:94:39:b7:2d:90:
eb:7d:71:c1:82:2f:9b:b6:0f:95:7e:95:95:da:34:
82:a1:ff:da:ac:be:13:78:54:ae:e2:85:ea:21:7c:
d1:8e:9a:07:7b:50:44:0d:c6:9b:d2:13:7e:e5:78:
04:c8:66:4f:54:c5:35:f3:64:fe:f5:17:c8:8e:99:
4b:f7:ec:8e:b4:fc:31:ed:d7:a5:68:70:79:0e:9d:
20:18:ca:38:78:cd:f4:bf:8b:96:ef:7c:7c:e2:93:
ba:c8:76:51:b2:80:43:4f:76:d6:56:7c:4f:57:b6:
cd:84:93:00:36:a7:ec:3f:80:8a:fc:0a:2b:e9:eb:
ea:06:63:c7:0c:5b:36:24:51:b7:6c:35:90:36:2e:
e8:65:c6:de:e5:26:e4:92:2a:9d:9c:3b:d2:34:66:
b7:fc:9c:c8:27:d2:47:dc:3e:38:6d:1f:d0:09:cb:
24:b0:bc:34:23:23:55:73:78:7a:a8:9c:81:bf:49:
f2:bc:bb:90:54:f2:23:57:ad:fd:b1:99:e6:66:9f:
d9:40:3c:3c:09:5e:65:e4:14:64:37:77:dd:2d:72:
ce:ec:41:d2:e2:2c:7a:41:03:20:0f:bc:ad:65:e0:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:AE:D6:FE:D5:DB:45:87:37:8C:2E:CE:29:AB:4D:47:00:7F:DA
X509v3 Authority Key Identifier:
keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:27:1c:31:a5:43:44:6d:8a:66:e0:e4:4f:d7:df:67:01:
44:d5:d5:15:ca:38:c4:cd:9e:1f:28:03:b7:55:23:1c:b8:0a:
7c:0b:d6:aa:7c:82:f5:c3:aa:21:e9:f2:4e:2d:97:d6:72:b3:
01:38:b4:7a:fe:2f:7f:fa:11:0b:04:00:53:14:78:66:24:c4:
01:98:0d:fc:31:ac:e4:69:8d:be:34:b9:26:ca:4d:f9:53:92:
4d:dc:12:ce:82:27:1c:ba:ba:64:44:08:0b:27:34:1a:48:50:
50:64:82:e6:83:e8:21:52:d9:40:e9:0b:cd:12:23:47:d5:44:
68:36:9d:df:d7:cb:91:58:77:a5:28:a1:2f:39:b6:0d:23:83:
75:e6:eb:7b:19:72:38:a3:49:7b:82:0b:c9:11:ba:c8:cb:4e:
8e:72:49:77:3d:6b:86:a4:c1:13:ba:f9:ab:f7:8a:1d:eb:e6:
fb:4d:3a:06:9d:86:45:32:df:9f:ec:cf:f3:ce:06:d7:8b:1f:
73:e7:86:d5:7e:e5:4c:5d:04:80:55:04:9e:a4:57:2b:77:71:
c1:8c:c8:07:e5:f6:2e:d2:32:63:92:48:72:06:eb:53:18:8d:
16:71:e5:aa:1a:c8:f9:91:94:58:c6:2e:b9:1f:26:bf:54:6c:
f6:95:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:13 2026 by rpki-client