Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: 7ZWdU8zp4dfgHuMXxqKc69Ka7zmJryLHTs0r4uPRJy8=
Subject key identifier: 51:4F:DD:54:11:19:CD:AD:03:35:BD:4A:13:C2:0D:0B:49:A9:97:2C
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019D9B87EC4FB814CA0BAABAA007CBB84887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0DC2
Signing time: Fri 17 Apr 2026 13:01:09 +0000
Manifest this update: Fri 17 Apr 2026 13:01:09 +0000
Manifest next update: Sat 18 Apr 2026 13:01:09 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: YL/W2mSidbxG/26tBiSOAMWR+evifxGx5fnnnd7QJTI=)
2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ec:4f:b8:14:ca:0b:aa:ba:a0:07:cb:b8:48:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Apr 17 13:01:09 2026 GMT
Not After : Apr 18 13:01:09 2026 GMT
Subject: CN=514fdd541119cdad0335bd4a13c20d0b49a9972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:35:98:7f:0e:29:92:f6:b1:11:4f:13:b1:
5c:13:c4:ec:dc:8f:21:7d:9f:b1:df:80:5b:67:3c:
e9:57:02:3a:26:4d:22:de:21:b3:6e:37:59:ab:b3:
91:86:e3:30:11:de:52:27:df:94:b8:65:2c:0f:95:
44:49:2a:09:d7:14:3c:85:f0:72:1a:b1:54:8b:5f:
70:84:ef:27:b1:e6:c7:11:e2:8e:57:6f:57:57:0b:
6d:e6:5c:03:31:c2:ad:a3:57:f8:b2:b3:12:8e:22:
47:e1:30:21:ec:c2:79:0e:97:0e:7e:19:81:41:98:
6e:f0:7a:41:20:cb:f0:12:7f:cc:72:52:9c:45:65:
bc:94:5b:f1:ea:53:af:34:d5:87:7c:b0:66:d7:8a:
00:26:aa:d7:70:c8:52:78:35:29:76:a6:13:e6:f0:
fd:55:89:f6:23:3b:24:b2:8c:38:e3:5e:d6:46:1d:
57:51:8d:8b:ed:27:8b:d9:82:43:4d:b4:b1:c0:fa:
5c:70:89:67:80:70:75:b0:6b:b5:39:ab:b3:a8:47:
fc:5d:22:79:38:7b:a4:8f:cc:d0:5b:5a:b6:b3:bb:
50:e0:9d:e7:bb:bb:bc:c1:a4:2b:a1:f3:97:aa:c0:
68:b6:72:28:90:26:84:66:d7:37:62:64:b8:aa:2f:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:DD:54:11:19:CD:AD:03:35:BD:4A:13:C2:0D:0B:49:A9:97:2C
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:61:cd:25:e4:98:40:c6:ba:de:ae:71:d8:ea:16:75:9c:
94:49:fe:0f:42:a4:b8:2e:5c:28:1f:11:7a:27:e0:6f:e1:4e:
f8:1b:b6:ac:99:4a:3a:19:86:f3:d1:25:a0:cf:a6:4f:9d:9b:
0b:19:a2:23:01:24:99:11:3c:50:f7:12:d5:5a:85:6b:81:85:
55:b4:9d:eb:d8:c5:e3:7c:76:55:80:bf:2d:d2:74:02:be:1d:
08:04:94:17:c5:91:c3:6a:2f:a1:f2:5c:6a:5e:b4:2b:cf:15:
cf:71:4f:77:8a:a1:30:ec:5a:61:3d:62:82:dc:87:d3:69:0c:
2a:2c:ae:c9:fd:b6:bc:63:ef:bb:f2:42:56:ff:5b:cf:f9:f7:
28:30:0b:ea:2f:37:dd:2a:49:83:bc:93:fd:c1:bf:ed:70:7c:
ce:92:14:1c:d9:54:60:8f:48:78:94:a3:66:84:cf:74:12:93:
4d:d9:bd:20:b3:8b:6a:a0:23:16:e5:aa:45:d7:7a:b7:b2:e6:
26:5c:8e:d4:32:71:fc:64:4b:fe:1a:a1:72:c0:75:a8:c8:f8:
29:6e:30:00:eb:62:ac:e3:31:ee:f0:64:7b:42:9a:c0:3e:54:
67:a8:18:f6:29:43:5e:ba:a5:2c:38:73:5c:10:2b:60:fa:de:
d9:30:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:06 2026 by rpki-client