Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: raOaNsr8dRiBNhKKPcucM0dePvhbJ/Em0taQk3Cht7M=
Subject key identifier: 89:4F:D5:61:0D:11:BD:A1:A7:27:06:A3:3B:7B:98:1F:8A:F8:3D:69
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 01A0C8C6527E4186B234386AD00200FCAEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 04CB
Signing time: Tue 22 Sep 2026 11:00:35 +0000
Manifest this update: Tue 22 Sep 2026 11:00:35 +0000
Manifest next update: Wed 23 Sep 2026 11:00:35 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: 5fbiqbQZqrw2qS8XIuYBh1Pm0HBaHFM5ToHvtDiNuPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:52:7e:41:86:b2:34:38:6a:d0:02:00:fc:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Sep 22 11:00:35 2026 GMT
Not After : Sep 23 11:00:35 2026 GMT
Subject: CN=894fd5610d11bda1a72706a33b7b981f8af83d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:17:3d:db:5b:54:24:99:5e:7c:b5:18:31:59:
cc:f4:fb:3e:4a:f7:3c:b9:90:d3:79:6a:72:17:9a:
f4:d4:94:17:ba:9d:c8:cb:12:c5:f2:c7:d1:f6:8a:
15:12:21:2b:7a:4b:a5:a5:6e:fe:06:6c:e6:1c:4a:
ed:35:ef:2d:54:ea:03:18:89:59:8c:97:3d:f8:b7:
bf:b8:e9:64:6d:98:5b:28:19:b0:a2:13:83:49:6f:
75:52:d1:fb:1b:77:b5:5f:12:8c:20:0d:ee:d5:39:
8b:c0:32:2e:fe:83:e0:9a:ce:a8:ff:4d:fb:33:e4:
d3:45:22:4f:63:65:c8:0f:7a:37:13:ee:8c:d4:c6:
4d:af:70:ab:ff:a7:80:08:f5:5d:91:92:9b:a0:c6:
ec:4b:2e:50:68:58:7b:f4:f4:e0:09:2f:d8:8b:6f:
ee:7e:f3:9d:11:06:c3:0d:15:5e:dd:14:f3:46:08:
36:af:32:25:a5:74:14:e7:5c:cd:ae:be:75:0b:b7:
c2:3f:1c:a9:0b:40:cb:06:8f:b3:79:5f:fe:fd:f6:
6f:e9:ff:56:46:e3:28:95:14:77:e5:82:da:e2:80:
51:5b:ef:da:fa:0d:2f:e2:43:8d:74:81:d0:8c:b0:
d5:21:1e:94:5d:98:a8:59:0a:4d:2a:b3:56:bd:4f:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:D5:61:0D:11:BD:A1:A7:27:06:A3:3B:7B:98:1F:8A:F8:3D:69
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:15:2f:4c:8b:4f:26:73:a9:13:e3:e2:f3:c9:87:54:c1:03:
21:5c:68:dd:6f:81:6e:84:b9:b4:66:45:f3:6f:14:9a:7f:dc:
4a:8d:06:a0:cf:68:cc:b9:5b:2c:1f:d2:df:c0:13:3e:cf:25:
19:9b:d3:87:3e:7d:93:fa:65:b6:d1:c7:bd:c1:54:a5:6e:ce:
4a:64:c6:01:dc:24:24:f1:c1:d3:0e:e4:c6:f3:d2:0c:a3:3a:
9a:38:de:19:db:fe:ae:5a:1e:78:de:97:83:68:b1:04:5e:af:
55:f6:47:ef:a5:04:b4:e4:c1:f7:03:02:4f:45:a7:3d:c4:99:
a8:d9:53:c7:11:f3:68:f7:d6:c2:06:6d:6c:b9:2d:93:ff:15:
1f:4d:a4:29:f2:9a:dc:b6:85:9e:e8:67:cd:4a:94:ed:43:13:
e7:01:fe:1c:20:bb:c4:57:1e:c8:14:9f:61:47:66:62:3c:a1:
62:76:c3:27:ca:0e:6f:2c:be:f8:5b:91:c3:0c:38:b3:52:0d:
9b:18:5f:02:86:17:9b:b6:24:fd:59:5f:9d:f1:e5:67:0d:33:
c6:bd:de:2f:fb:00:c9:72:be:20:52:95:4c:46:9c:db:dc:2c:
17:a1:16:dd:4c:1d:07:8e:8e:e3:52:0c:e5:1b:c4:43:76:21:
93:57:9b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxlJ+QYayNDhq0AIA/K7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjYwOTIyMTEwMDM1WhcNMjYwOTIzMTEwMDM1WjAzMTEwLwYDVQQD
Eyg4OTRmZDU2MTBkMTFiZGExYTcyNzA2YTMzYjdiOTgxZjhhZjgzZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xc921tUJJlefLUYMVnM9Ps+Svc8
uZDTeWpyF5r01JQXup3IyxLF8sfR9ooVEiErekulpW7+BmzmHErtNe8tVOoDGIlZ
jJc9+Le/uOlkbZhbKBmwohODSW91UtH7G3e1XxKMIA3u1TmLwDIu/oPgms6o/037
M+TTRSJPY2XID3o3E+6M1MZNr3Cr/6eACPVdkZKboMbsSy5QaFh79PTgCS/Yi2/u
fvOdEQbDDRVe3RTzRgg2rzIlpXQU51zNrr51C7fCPxypC0DLBo+zeV/+/fZv6f9W
RuMolRR35YLa4oBRW+/a+g0v4kONdIHQjLDVIR6UXZioWQpNKrNWvU/gAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlP1WENEb2hpycGozt7mB+K+D1pMB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBUvTItP
JnOpE+Pi88mHVMEDIVxo3W+BboS5tGZF828Umn/cSo0GoM9ozLlbLB/S38ATPs8l
GZvThz59k/plttHHvcFUpW7OSmTGAdwkJPHB0w7kxvPSDKM6mjjeGdv+rloeeN6X
g2ixBF6vVfZH76UEtOTB9wMCT0WnPcSZqNlTxxHzaPfWwgZtbLktk/8VH02kKfKa
3LaFnuhnzUqU7UMT5wH+HCC7xFceyBSfYUdmYjyhYnbDJ8oObyy++FuRwww4s1IN
mxhfAoYXm7Yk/VlfnfHlZw0zxr3eL/sAyXK+IFKVTEac29wsF6EW3UwdB46O41IM
5RvEQ3Yhk1ebZw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:14 2026 by rpki-client