Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier: 1uAWY7aHBrvrB7iUHW7VlWh1r9R3+S1jU25PKsgbfR4=
Subject key identifier: 4A:08:3E:CB:F6:30:77:B1:BC:49:0C:50:4C:C0:3D:8C:79:43:48:22
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 01A0D4CB2A9363C71CEB7E702862D2E6362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number: 05F0
Signing time: Thu 24 Sep 2026 19:01:19 +0000
Manifest this update: Thu 24 Sep 2026 19:01:19 +0000
Manifest next update: Fri 25 Sep 2026 19:01:19 +0000
Files and hashes: 1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: FrDdNgDB/Vbn/RwMAKsbwOxTtnYuX5mB9bmvwXBgO1I=)
2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:2a:93:63:c7:1c:eb:7e:70:28:62:d2:e6:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Sep 24 19:01:19 2026 GMT
Not After : Sep 25 19:01:19 2026 GMT
Subject: CN=4a083ecbf63077b1bc490c504cc03d8c79434822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:a7:33:a1:87:e6:b0:4d:a1:56:31:35:fe:
52:9b:82:f7:cc:74:a9:c6:16:ec:f6:eb:f6:38:08:
33:4e:be:3f:8f:68:a2:bb:b7:62:f4:08:c7:89:56:
db:0f:04:29:f2:22:e7:a1:61:f8:26:ed:42:99:11:
7d:88:d5:f9:2b:66:89:19:8e:31:96:0f:26:4c:f9:
3e:73:4f:ab:ce:90:ce:d3:96:fe:f6:be:82:1c:a2:
21:80:dc:1e:28:7f:02:55:0e:8f:d4:18:10:6e:2b:
9e:a7:5b:76:a6:e0:03:e4:78:67:43:c6:92:8e:11:
a0:51:d7:a2:03:70:8e:be:1c:d2:33:bf:50:b0:14:
1f:6c:09:c1:9b:8e:96:fc:9d:ef:cf:3e:46:de:7a:
2d:bb:b0:c6:0d:34:4e:aa:05:12:a6:64:ef:65:eb:
a9:ba:d6:62:9e:bd:bb:f9:be:c8:aa:7c:14:5e:9c:
d7:8a:c9:64:e2:56:4d:47:b1:31:de:c6:b4:cd:3d:
06:e8:8d:b8:43:6c:58:84:f6:05:80:7c:33:97:37:
a4:22:fa:cd:17:40:2b:f1:b0:e7:77:d5:12:ae:61:
83:83:a9:41:4a:37:08:28:d8:42:bf:ed:ac:31:10:
84:26:5a:51:5a:b6:30:44:00:26:2e:71:4c:e6:72:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:08:3E:CB:F6:30:77:B1:BC:49:0C:50:4C:C0:3D:8C:79:43:48:22
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:64:30:9a:52:01:c2:dd:5c:48:81:73:83:33:cd:29:c6:
37:48:2f:29:63:9b:a5:85:cf:a7:30:42:fb:3f:42:84:80:d4:
ad:47:7a:e4:26:28:22:51:57:63:75:b6:4f:6b:fd:e3:6a:cf:
9e:6a:8a:ab:ed:f4:17:52:5b:ee:9c:4d:4e:00:2d:e9:08:d9:
2e:81:e1:9d:00:7e:0d:2b:e4:9a:ef:53:b6:99:6c:6d:77:8c:
45:a4:11:23:1e:04:f9:90:54:35:5a:39:c4:1b:38:5c:39:6b:
a1:00:bd:bc:60:46:12:26:d1:61:73:bc:01:d0:5c:36:6c:47:
05:98:9e:16:7f:00:4d:ba:b4:d8:8a:5e:4a:03:eb:64:c0:9b:
46:9b:ef:24:a6:c8:cb:b1:b8:6e:d1:9a:34:52:10:25:d9:56:
1b:d9:22:cc:5d:fd:aa:92:3b:34:27:dd:f7:7d:1c:7f:06:5f:
35:e6:14:a8:5f:11:9f:e7:14:78:44:f0:e2:fb:da:c7:da:5e:
89:50:0f:ce:0c:ac:31:09:58:c2:d4:0c:0e:59:9f:de:e3:14:
84:13:80:71:b4:0d:f9:96:dd:8a:75:eb:52:d8:2d:18:e0:c7:
ff:32:91:b1:76:40:c3:2c:23:4e:96:fb:3b:e4:0c:dc:f5:94:
39:be:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:08:48 2026 by rpki-client