Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: 2X+3XRdvPGOVjSdR1yX2Y74AUUh5bF8KS3+id9so/Ac=
Subject key identifier: 8E:33:F1:BD:48:0A:62:AD:83:F7:06:50:49:26:0A:03:22:C4:19:63
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019D99991BA996EBBAF3E46C25745B4E0514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 13EE
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: ejLTaRTdT3RDUXgq3hnTXx5XS/UExTkWCZ31RDCIg2g=)
2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1b:a9:96:eb:ba:f3:e4:6c:25:74:5b:4e:05:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=8e33f1bd480a62ad83f7065049260a0322c41963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:3d:38:d7:11:ec:b2:d0:1f:a0:8d:c6:14:
c6:25:9c:d5:70:10:df:92:da:58:6c:f2:2d:c1:d0:
81:e8:f9:97:29:68:6b:b3:4d:72:1c:2d:af:16:22:
59:39:d4:61:09:e5:2e:75:19:14:21:b9:8c:17:79:
54:c5:5e:b8:e3:b0:79:6e:b2:57:33:15:eb:89:49:
e8:dd:7d:25:27:1b:56:d3:0c:c2:07:bb:b3:e4:39:
b4:c3:79:54:12:c2:f1:80:f9:f2:34:3a:f6:ef:7a:
5f:7c:ab:9b:ee:88:81:03:5f:2f:a7:3a:40:ff:10:
eb:80:21:d2:cc:02:a3:b1:57:b5:7b:44:e5:e2:01:
03:4b:0f:ae:02:f9:68:c9:5c:b2:68:aa:f0:6b:23:
82:d9:46:49:1f:f5:4c:05:6a:1e:28:5d:94:ea:a9:
22:62:87:71:ec:34:12:94:be:86:09:66:e0:b9:42:
09:ea:99:22:cf:1e:7e:98:e0:46:12:2c:c6:64:fa:
2c:75:61:08:2b:dd:31:26:88:f9:80:e2:62:71:ee:
d9:71:74:1f:f2:b1:3a:7e:3c:23:e9:e4:0d:76:74:
fa:47:52:8a:e1:b9:7b:76:b6:16:74:d4:2b:c1:61:
c8:6b:86:9e:2c:d3:e9:b2:6e:f8:39:ae:05:14:da:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:F1:BD:48:0A:62:AD:83:F7:06:50:49:26:0A:03:22:C4:19:63
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:d1:7d:04:ae:c7:60:2a:e4:ea:f9:51:e3:ab:eb:25:97:
b6:96:2d:6f:9f:99:e3:c2:bb:d6:e4:87:da:e7:05:38:99:be:
af:7d:1d:07:ff:d5:d6:39:95:76:b3:58:34:f0:e6:09:ae:2d:
f8:e5:36:cb:f8:e7:24:96:b9:f5:7b:74:6c:96:e7:3b:65:fb:
f2:94:71:05:80:cb:20:8e:00:8b:34:5c:98:ae:9b:19:0b:d5:
8f:a1:14:5c:e1:2c:2a:70:c2:1d:4b:fd:c4:8d:48:0e:fd:ce:
62:ca:d3:b8:f8:73:fc:88:6e:65:79:4b:95:6a:b5:99:35:5f:
9e:68:26:c6:2d:38:ae:48:d6:1b:58:0c:d6:f7:9b:c2:f6:e1:
50:f6:3f:77:7e:7a:07:6b:b1:29:ad:26:06:f2:2e:a2:aa:51:
17:fe:c6:78:3c:4b:e5:14:50:ca:bf:ad:6b:e8:d1:95:a3:67:
df:8f:a3:a2:8c:2d:7b:52:d0:ce:ab:10:37:95:67:12:b6:00:
e0:07:88:ef:8b:05:1a:d6:2e:73:0f:51:91:d6:f7:11:18:2d:
c0:be:b7:59:f4:b9:9e:2d:39:13:3e:be:a7:b3:f3:cb:54:50:
23:20:ea:00:a2:b4:c2:5f:77:db:67:91:f7:30:fc:aa:46:ad:
2f:f9:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:00 2026 by rpki-client