Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: MTZBH9cCLJQfJj0unCyNToEDI+l5JptHp7kUxlUz1wU=
Subject key identifier: 9B:CD:87:36:8A:6A:07:D2:15:85:27:6A:CD:BE:BB:05:F3:45:A1:35
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019CAA21E2CC025CFEE0698A38A0C447891A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 1372
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: 8c07e9xx23NE3ndgGw9ZIPEUmTXaD5X9bhCKc59l3JU=)
2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e2:cc:02:5c:fe:e0:69:8a:38:a0:c4:47:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=9bcd87368a6a07d21585276acdbebb05f345a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:53:aa:f2:d2:0d:95:43:b2:86:57:61:ee:
26:36:1e:c0:62:a1:6c:9f:5e:4d:f8:34:d2:1e:1d:
eb:ef:03:30:fe:8e:87:10:50:7a:ef:50:61:58:19:
0e:04:33:26:0a:ce:dd:1d:0b:ff:db:29:d0:e6:0c:
43:a1:f9:fd:49:8b:f8:1a:e4:6b:be:bf:54:cc:84:
9c:b2:22:cc:ef:10:44:ef:d2:ab:a8:5c:52:eb:71:
eb:27:2b:21:89:1d:9e:4c:ea:d0:2f:50:63:5a:5c:
8e:cc:66:57:d9:c2:2f:e4:71:4c:d5:c9:da:5c:c9:
e2:06:53:27:4a:77:0f:7f:4a:f6:45:b9:04:d3:7e:
35:23:2e:40:c7:29:ca:98:4e:73:ca:76:d5:48:c0:
68:ec:9e:3f:44:67:db:a2:33:f4:71:1b:5f:7e:4f:
4e:44:8a:d4:b1:90:02:b5:de:64:dc:d4:5f:15:84:
d6:15:ce:93:31:72:8b:9b:b9:4b:e9:9f:9d:8c:8a:
eb:24:ac:45:10:73:90:ce:75:98:24:ed:5c:9f:65:
39:11:9f:0d:43:37:69:e6:a6:b0:5b:c1:1e:42:dc:
48:b6:e5:53:ab:c5:cf:0a:14:ad:e2:fa:8e:ce:a8:
a4:2f:f6:0d:b7:f3:bd:aa:a7:e2:ad:9a:77:f2:2c:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:87:36:8A:6A:07:D2:15:85:27:6A:CD:BE:BB:05:F3:45:A1:35
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:42:62:97:67:43:8d:49:f9:f3:9c:ff:ac:c6:30:26:7a:
23:85:d4:6e:c8:7e:ad:20:3a:89:71:71:c7:97:69:fb:ba:fd:
6d:ca:86:cc:73:e4:0b:5d:74:16:f4:eb:a4:81:ed:b3:9b:c4:
59:d6:05:0a:6a:ac:b0:fe:97:01:63:1f:e8:10:05:b5:8c:55:
35:af:4f:75:ed:73:8f:65:b8:21:74:0c:0b:e2:0b:80:56:5b:
dd:ca:33:d0:5b:1b:84:7c:2a:ef:6c:f0:21:fa:0f:69:6e:ca:
00:a2:d9:cb:a5:40:49:e0:ef:2a:6b:d8:88:15:17:43:7a:28:
f3:6d:59:8e:70:69:f2:47:c6:7a:59:27:63:4c:7c:3e:8f:8b:
a1:71:4b:c1:83:f7:56:01:20:aa:e9:5f:8f:92:7f:7c:2a:32:
43:d6:a6:52:1c:8f:ad:c5:2f:15:51:84:c0:26:b7:26:08:63:
5d:20:b1:2e:4b:0e:8f:0b:cf:55:ed:71:6e:d4:7d:ea:f1:5c:
eb:18:33:5e:9f:28:65:fc:ca:3d:b4:b0:61:8a:d6:42:aa:61:
fe:2e:7b:3c:75:6f:d7:c6:22:e3:38:ee:1c:f2:c0:62:c5:a0:
fb:6d:2d:29:dd:be:6c:80:46:ba:4f:24:86:a8:01:98:76:89:
cd:9d:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:39 2026 by rpki-client