Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: U1UkN3FXnUh1OpHc2DQsy6Q4E5bTmw5fCLQevagvgnM=
Subject key identifier: 2D:79:6B:70:79:FF:21:0F:56:75:AD:BE:53:C0:C2:DC:9B:27:E5:16
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019CAA21C5CD55A6C1A2690B6561FA19F572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0D45
Signing time: Sun 01 Mar 2026 16:01:05 +0000
Manifest this update: Sun 01 Mar 2026 16:01:05 +0000
Manifest next update: Mon 02 Mar 2026 16:01:05 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: hAwemA9WNw+kYvvOrLcaCWGJuTlKowuEVVL+jgEcd8A=)
2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c5:cd:55:a6:c1:a2:69:0b:65:61:fa:19:f5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Mar 1 16:01:05 2026 GMT
Not After : Mar 2 16:01:05 2026 GMT
Subject: CN=2d796b7079ff210f5675adbe53c0c2dc9b27e516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:29:5b:b7:ba:71:4a:40:09:00:bf:6d:26:
13:aa:68:9a:50:b3:49:34:7d:eb:aa:b2:a7:34:00:
9a:f5:e0:27:a1:98:6a:91:22:c3:14:8b:1c:4f:d3:
d1:21:a8:f7:4f:1c:1c:72:4b:90:f3:79:df:60:3c:
28:5b:4d:aa:9d:57:ed:f7:b5:4f:15:08:95:33:90:
b6:0c:6a:8a:a9:34:96:36:e6:24:a4:1c:d2:dd:4b:
e3:95:7d:05:7e:ea:27:19:bd:dd:be:cf:0b:81:bd:
d1:cb:7f:07:5a:63:06:8a:93:28:7f:0f:e6:c6:d4:
ca:aa:01:7a:6e:a6:1a:c4:5f:db:de:73:33:b6:3c:
45:ed:ae:55:bc:64:f5:3f:ad:dd:f3:cf:36:38:37:
31:29:96:71:eb:fc:2d:23:c4:d3:80:3e:fa:de:c1:
7c:5e:c0:e2:5e:2e:78:96:a1:6e:d1:ba:c8:cb:73:
f0:9e:82:19:78:11:7d:84:cb:5c:42:62:85:df:bf:
ce:3a:b6:dc:8a:48:51:ce:94:f8:6f:29:7d:59:4a:
3a:0a:2d:4a:86:10:e5:b8:ae:cd:0f:d6:67:8b:15:
00:78:b0:dc:af:95:c9:89:2f:b2:0b:6e:72:db:d3:
e7:20:29:73:2c:13:77:f5:90:ac:db:10:0c:e1:19:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:6B:70:79:FF:21:0F:56:75:AD:BE:53:C0:C2:DC:9B:27:E5:16
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:78:2a:36:48:aa:3a:f1:57:2c:94:3f:d5:90:4a:56:45:99:
d0:0b:e0:7e:ed:d8:64:ec:37:34:16:38:1e:ee:d6:53:db:6c:
1d:af:65:47:3c:9d:af:5f:13:0c:55:74:01:84:93:e2:6a:c4:
b5:de:c6:56:55:b9:bd:d4:4a:6f:ee:ef:b2:95:06:b0:ea:e2:
cc:36:66:bf:b3:e8:7c:0f:0c:40:b9:5b:14:7f:a5:98:63:54:
00:df:3a:32:0b:56:df:e9:a3:4a:67:a4:eb:8f:e0:84:b6:83:
41:75:5e:de:6d:73:7a:b7:83:5f:2c:1c:c0:57:8a:ac:d7:d7:
ab:f4:5f:d7:3a:a6:79:32:29:c8:95:65:20:b7:20:a2:cc:b8:
61:f1:45:e9:66:00:29:ff:00:c5:a5:6e:7e:e1:9f:fa:b1:50:
4e:fd:9e:0b:00:8b:73:64:81:f1:7b:4f:ed:24:10:d5:72:1f:
e9:53:1c:47:86:6d:1a:1e:e9:1e:65:5d:0c:8c:ba:d0:63:72:
3a:94:ea:04:12:87:ad:ce:14:ac:b7:3c:06:41:0d:b3:8a:10:
d9:8d:4b:58:81:cb:d7:52:15:5e:b7:a7:f3:b2:e9:67:60:63:
37:15:fb:0e:39:ab:b4:00:1b:6f:11:b7:66:9b:a9:83:68:e9:
06:e0:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:37 2026 by rpki-client