Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File: HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier: PzJxED8gejI3z6qmA5j8KCb88wGIY1+VMhMxUXfWJ8I=
Subject key identifier: A0:41:7F:CF:DD:D4:8C:6C:26:1E:16:52:EF:56:5F:83:44:3F:EB:22
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: 019CAB3416576B55CD1364A33E87D52CA251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number: 119F
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: Gmr6DvFecGNz7K0pxzX4Fgvg1Ek.roa (hash: vp2rFqOY6nmUicsFoLP4/cfheUkk9r3+DgY732ObGfU=)
2: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: mBWTPFKLIXnOUHMI4fP2guVARbiuUQ6SYMvq8fzkAYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:16:57:6b:55:cd:13:64:a3:3e:87:d5:2c:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=a0417fcfddd48c6c261e1652ef565f83443feb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:94:f1:ff:0a:d6:48:af:86:80:ac:41:48:
08:c7:75:79:fd:9d:05:58:39:8b:3f:da:d5:85:db:
6b:cb:89:b2:0c:17:dd:58:b7:06:a3:ae:6f:9e:70:
fa:67:be:c9:d5:31:d5:20:1a:51:a0:61:f6:75:14:
a1:d7:e3:36:ec:68:56:71:df:c7:96:4c:01:fc:2a:
48:3e:d8:78:81:73:18:a4:91:d4:56:67:a7:7e:5e:
e9:be:f8:98:e2:3e:53:d1:9b:c2:e2:d7:ea:d6:7d:
4b:eb:cd:3d:b8:08:ff:bc:8f:3c:6c:9e:95:33:ed:
8b:ec:2a:5f:39:af:9f:ec:79:75:62:9f:82:2c:19:
35:97:c6:53:4f:b0:8a:60:a8:41:8a:ed:36:1d:f4:
4e:40:00:1d:67:75:be:af:24:e4:80:da:b6:c9:1b:
e0:36:9c:cc:1c:24:ca:d2:db:fb:52:34:e7:3a:00:
0f:3d:78:32:a4:b1:a1:e0:66:b5:b4:88:c3:b9:f2:
38:75:fa:7d:44:15:c4:42:98:bf:dc:08:7f:f1:ba:
a1:bd:31:08:9b:d0:8b:8e:d0:22:07:f8:3a:63:2f:
50:9c:d9:cf:79:47:e9:0f:02:b0:da:78:ab:26:b9:
92:da:cf:b2:29:aa:9a:4a:7a:01:1d:ee:27:9c:ea:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:7F:CF:DD:D4:8C:6C:26:1E:16:52:EF:56:5F:83:44:3F:EB:22
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d3:ca:c8:00:1a:89:1e:03:a3:27:39:b0:c3:8c:97:8e:9d:
5c:37:8c:2a:4b:04:21:8a:94:0a:31:aa:9b:62:a1:7b:00:cf:
ff:3b:45:9e:4d:21:78:e3:0e:04:15:e9:bb:9f:e0:a1:8f:0c:
d6:ba:51:1f:b6:4c:97:e2:37:a9:c5:c9:57:02:8a:1e:d1:ec:
1e:0c:f1:fc:7a:a8:a2:8c:7e:5d:af:8f:19:8b:62:bd:4d:07:
26:48:df:c3:af:f1:c0:19:39:6f:0a:b2:35:e3:c0:e5:94:7f:
91:d8:ad:56:b2:f1:4d:b9:40:2e:c3:32:cb:6d:f9:f9:ba:e6:
12:fc:cc:1a:a0:ed:83:51:f5:a3:67:14:43:31:de:43:f1:79:
2e:45:30:d2:f2:7a:bf:d8:a3:75:ad:a3:a3:fd:6c:2e:9a:66:
9d:72:76:45:66:e9:c4:73:a2:13:a5:3c:79:a0:63:22:09:79:
9a:5d:f3:df:cd:d8:a3:86:45:d8:95:7f:2d:e8:34:db:d9:1c:
e6:5b:54:42:95:60:fa:6e:8c:e4:ca:fe:a6:6e:db:c9:ec:2c:
53:5f:77:b8:29:90:29:da:4a:67:15:98:4e:20:ce:67:71:78:
e6:96:6b:df:22:a4:4a:2a:22:28:3b:c8:1a:68:65:b3:cc:db:
a8:41:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:34 2026 by rpki-client