Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: Y8GoZI6nWOS8LcSIIaur9foJiS/uprlvj8k2dO/bU+8=
Subject key identifier: 95:AA:92:10:99:2C:51:5D:8D:02:8A:2F:A7:B7:FD:F7:A2:A3:09:7E
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019FAAF57FB17A8B57632DDE64695C4E66DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 0437
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: RGMXHwqlbvqufgDTaQhuwSSyPnQqg/UEMwTs7Lj2C7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:7f:b1:7a:8b:57:63:2d:de:64:69:5c:4e:66:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=95aa9210992c515d8d028a2fa7b7fdf7a2a3097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:9e:3a:30:de:98:19:9b:b1:4b:ae:db:21:
60:84:d0:c9:bd:29:32:b3:76:b1:bd:95:ef:73:73:
cb:e0:e3:4c:03:60:f3:68:fe:15:c3:96:65:cc:66:
3e:59:f8:1b:47:cc:eb:e5:26:a4:ad:0c:71:a1:84:
e4:b3:52:ad:26:ef:cb:85:05:d0:c9:fe:77:1d:c0:
7b:cf:77:d7:eb:40:c9:21:fc:f5:de:ce:f0:c2:4d:
a8:3b:f0:38:d4:e3:01:e6:4a:72:42:3c:28:e5:79:
2e:b5:0e:af:6a:78:c5:c7:0d:5e:b3:38:ef:aa:eb:
32:ed:7e:b0:a2:39:8a:fc:19:26:f1:1a:22:f0:65:
a9:cf:4d:30:bf:94:ff:f3:81:82:1d:5b:1b:59:dd:
96:e3:4c:a1:ab:23:10:78:63:35:53:77:0d:c9:75:
c8:d3:21:c6:95:7a:50:6b:45:a5:4c:ab:28:e1:73:
58:2e:ac:aa:f5:88:1d:c6:b1:67:40:b0:af:53:b2:
76:f3:63:54:5e:4f:0d:c8:d0:f4:59:af:17:41:25:
6c:83:36:9c:45:18:fe:ed:ce:4f:a8:34:e0:71:1f:
7b:e2:05:85:91:a1:b0:fe:e0:d5:91:ac:66:ec:cb:
6a:b1:78:03:b8:0d:fc:4d:76:74:b2:c8:c2:a1:1c:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:92:10:99:2C:51:5D:8D:02:8A:2F:A7:B7:FD:F7:A2:A3:09:7E
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:b5:fd:ca:e9:74:22:09:91:e0:59:47:04:14:a4:dd:79:
8d:1a:72:29:bc:a3:ab:8f:6c:47:e0:82:15:ab:ea:8d:fd:dd:
c3:06:1a:35:79:d8:2a:9c:1f:1e:a9:45:17:5f:1a:71:d1:f4:
c9:f9:7f:d3:1a:96:cb:a8:a7:29:4e:9c:dd:4e:e1:42:5a:f3:
80:dd:bf:44:17:4d:14:36:41:dd:08:02:85:52:a3:31:78:09:
3d:ee:a8:29:98:bc:8d:10:c9:96:02:f1:cb:09:73:ed:29:18:
c0:bb:ab:7c:7e:6d:10:1e:c8:e1:82:73:b0:f1:42:9c:44:7e:
ad:3c:69:26:25:82:c8:f2:20:53:df:36:37:00:b0:64:77:d8:
61:7c:b4:c1:73:64:5e:29:a0:1e:db:9d:de:7d:c1:b6:7b:47:
56:bf:a7:73:99:8c:6e:86:27:73:a4:f7:38:57:2d:11:2b:a7:
ec:87:21:09:17:62:17:c6:32:31:07:0e:03:a0:a7:9c:fe:08:
7c:e8:3b:14:fc:9d:de:fa:28:4a:0e:46:91:d5:a1:d1:d8:19:
18:3d:bd:fd:1f:62:ec:64:e4:45:c9:5a:f5:7e:7b:1b:d9:bf:
9e:be:6e:7d:50:29:cd:0a:a7:60:40:41:8a:37:73:cc:80:b1:
95:94:10:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9X+xeotXYy3eZGlcTmbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjYwNzI4MjMwMDQzWhcNMjYwNzI5MjMwMDQzWjAzMTEwLwYDVQQD
Eyg5NWFhOTIxMDk5MmM1MTVkOGQwMjhhMmZhN2I3ZmRmN2EyYTMwOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PaeOjDemBmbsUuu2yFghNDJvSky
s3axvZXvc3PL4ONMA2DzaP4Vw5ZlzGY+WfgbR8zr5SakrQxxoYTks1KtJu/LhQXQ
yf53HcB7z3fX60DJIfz13s7wwk2oO/A41OMB5kpyQjwo5XkutQ6vanjFxw1eszjv
qusy7X6wojmK/Bkm8Roi8GWpz00wv5T/84GCHVsbWd2W40yhqyMQeGM1U3cNyXXI
0yHGlXpQa0WlTKso4XNYLqyq9YgdxrFnQLCvU7J282NUXk8NyND0Wa8XQSVsgzac
RRj+7c5PqDTgcR974gWFkaGw/uDVkaxm7MtqsXgDuA38TXZ0ssjCoRzBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWqkhCZLFFdjQKKL6e3/feiowl+MB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2i1/crp
dCIJkeBZRwQUpN15jRpyKbyjq49sR+CCFavqjf3dwwYaNXnYKpwfHqlFF18acdH0
yfl/0xqWy6inKU6c3U7hQlrzgN2/RBdNFDZB3QgChVKjMXgJPe6oKZi8jRDJlgLx
ywlz7SkYwLurfH5tEB7I4YJzsPFCnER+rTxpJiWCyPIgU982NwCwZHfYYXy0wXNk
XimgHtud3n3BtntHVr+nc5mMboYnc6T3OFctESun7IchCRdiF8YyMQcOA6CnnP4I
fOg7FPyd3vooSg5GkdWh0dgZGD29/R9i7GTkRcla9X57G9m/nr5ufVApzQqnYEBB
ijdzzICxlZQQ8w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:07 2026 by rpki-client