Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: 0SKpeLBiRgDOhkH9pgtjNTYiPAqcnMHaKt0AobOLEsg=
Subject key identifier: 2A:1B:32:E9:4C:0E:2E:1D:04:49:24:BD:C8:80:8C:A6:69:C7:56:9F
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019CAA218800A635F8D8F570E77004A3C173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 155D
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: TcrtHeJvwbtG4AonLSoC6HTl2RvkAEk8lWvxzVlafws=)
4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:88:00:a6:35:f8:d8:f5:70:e7:70:04:a3:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=2a1b32e94c0e2e1d044924bdc8808ca669c7569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:b8:15:d2:e5:66:cd:77:52:22:f8:3b:cd:
a1:9f:74:0f:a0:b7:79:4c:11:09:4c:e6:b3:c4:74:
fc:8e:95:14:06:58:34:1d:7d:29:38:64:03:c7:a3:
85:08:11:0e:48:20:9b:d8:86:25:f9:2e:3a:c3:de:
0b:59:2b:02:ef:2b:b2:a4:64:5f:6c:8b:08:86:c8:
03:9a:de:31:17:ff:a4:77:53:ff:9b:4b:b2:fa:36:
86:c5:a7:62:58:ee:fa:4c:31:b2:31:cd:a1:b3:8c:
57:1a:29:83:00:e3:8c:da:50:08:cc:d6:e6:90:31:
66:8d:92:4b:c8:7a:05:a2:ff:c5:8e:f8:a7:97:6a:
4a:96:6d:ad:7a:93:8a:0e:67:83:c6:30:6d:3f:5f:
b2:d4:cc:7e:06:ef:f2:ba:4e:18:20:e0:eb:06:46:
a9:08:9a:ae:0a:c1:cd:9f:67:55:a9:ff:55:9e:a5:
31:09:ce:4d:14:a3:87:1c:04:0b:75:31:0e:a0:e1:
2d:c1:c1:fd:cb:1c:3f:b7:a3:1c:a2:47:54:87:6e:
5b:7e:88:00:e2:54:bd:0b:69:4a:10:e2:4f:b6:04:
32:24:27:4f:4e:e7:2d:5c:9f:5f:c9:49:6d:fb:ad:
1a:78:f5:c8:83:c0:40:7e:0f:c3:ee:8e:a6:80:b0:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1B:32:E9:4C:0E:2E:1D:04:49:24:BD:C8:80:8C:A6:69:C7:56:9F
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:c4:d3:0c:e9:d7:0a:1a:47:0a:89:b1:44:c8:48:cf:d1:
9c:86:a8:a4:9d:fc:b2:e7:62:f3:bf:61:d3:b0:5a:2c:8e:9a:
11:33:bd:8b:51:9b:80:7e:f0:89:24:aa:f1:b3:20:f0:a2:f8:
af:88:ec:7d:80:d7:ed:11:5c:c1:af:1d:17:88:d4:85:d1:f0:
65:36:b4:94:2b:d1:4f:7f:d0:3e:d7:61:f2:54:b7:fc:f2:f8:
de:22:2f:6b:25:af:89:f0:eb:b1:45:2f:28:01:64:5b:c2:33:
aa:b1:ce:a9:8a:f3:78:b7:8c:35:5b:ad:b0:fb:c3:df:4e:b6:
d4:d2:e5:5d:da:1b:ff:cb:ca:4a:68:34:d2:91:52:f0:a8:d2:
ff:03:8e:bf:7d:6c:eb:06:7c:0b:fb:ca:24:e9:59:f6:45:a8:
e2:cf:26:76:1b:3c:02:6e:72:c0:10:89:33:71:2f:f3:56:2f:
6b:91:3c:c9:29:6d:58:27:3c:53:5c:e8:05:5a:e7:29:78:e4:
39:57:2a:fa:8a:50:6a:b8:9d:e7:ca:26:50:50:2f:72:73:ef:
30:e2:ba:4e:aa:fd:71:df:32:27:bd:b4:7e:6a:d9:f8:50:2a:
c7:66:7d:42:f3:8f:5a:34:40:3c:c6:16:fe:bc:d2:69:3e:24:
49:fe:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:43 2026 by rpki-client