Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: 986rJlVKB31XjdlILEx6yRMbxYCzN8NyekpEH9oV/9I=
Subject key identifier: CB:F6:46:13:0C:33:20:5C:BF:2F:2F:A9:51:91:58:D7:C0:10:3C:E1
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 01A0C4B2F2A8FBFF1D5AF5906FAED6D206E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 1806
Signing time: Mon 21 Sep 2026 16:00:56 +0000
Manifest this update: Mon 21 Sep 2026 16:00:56 +0000
Manifest next update: Tue 22 Sep 2026 16:00:56 +0000
Files and hashes: 1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: 5MNT2sUzCXty1B6sU2Z5YpOnLB0v55hbFwMr0bCfZjw=)
2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:f2:a8:fb:ff:1d:5a:f5:90:6f:ae:d6:d2:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Sep 21 16:00:56 2026 GMT
Not After : Sep 22 16:00:56 2026 GMT
Subject: CN=cbf646130c33205cbf2f2fa9519158d7c0103ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:b9:56:96:93:1d:62:56:73:4e:d6:3e:ee:
bb:2d:98:b6:26:54:40:8b:6d:bf:1f:e5:d3:82:70:
45:30:de:2d:5c:1b:8c:61:6d:61:ea:36:58:94:38:
b4:61:e0:42:1a:d5:18:63:be:87:a7:f0:18:88:bb:
84:7d:3f:37:02:c6:e2:ca:ae:c6:23:1b:bb:a1:99:
c5:69:ce:8b:0d:9c:94:75:70:6e:1e:b6:26:0e:75:
29:37:5b:b9:dc:44:91:d4:93:65:cb:8f:55:48:4e:
69:b7:62:64:05:f5:0b:0a:f2:45:b7:8f:22:56:6c:
d8:e6:fc:ec:9e:44:fd:2a:3a:dc:c9:7d:6b:e7:87:
09:23:b6:31:72:0e:d8:d9:ad:86:25:c7:bf:f0:ae:
ce:b3:25:f7:bc:e0:65:53:72:9a:9c:f5:7f:2e:d0:
79:9a:2a:ad:83:f4:ba:da:a9:51:40:74:b6:4d:b2:
34:45:03:18:94:4f:fd:50:63:8d:ab:97:0f:f9:84:
e3:30:6b:15:ea:a9:bd:af:ae:39:39:71:a1:78:31:
19:a2:7f:47:3a:85:22:6e:23:fe:2a:89:17:97:05:
0f:04:e7:8b:65:ec:95:62:72:e8:0d:95:ce:ec:3d:
3a:2a:22:7f:9b:f5:5e:f0:ce:60:45:d3:63:d8:6a:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:46:13:0C:33:20:5C:BF:2F:2F:A9:51:91:58:D7:C0:10:3C:E1
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:33:d2:f7:cf:39:7c:33:5e:18:6d:f8:7e:af:67:cb:8e:
2d:a7:fa:11:fe:71:e4:9a:14:62:23:9e:57:49:a0:0d:00:22:
28:24:50:93:c8:58:d2:d9:54:a1:41:97:9f:f7:40:43:88:bb:
c3:b8:c0:6b:7d:b5:a9:bd:d0:bd:8e:ac:67:7e:4b:1a:ef:29:
b5:74:73:6e:24:cf:ee:3c:a9:d3:66:80:b4:53:63:28:b8:66:
42:30:8c:a1:cd:8f:db:50:88:b3:2d:c8:01:6c:f3:75:c1:11:
56:7d:5c:95:8f:c2:fa:13:61:e3:fd:cf:30:f5:4d:05:85:9f:
00:f6:cd:c1:89:44:46:eb:73:e5:24:cd:9e:6d:64:ff:c3:e9:
e4:de:59:dc:6a:66:5d:1d:ff:f5:82:de:f3:18:d8:21:15:47:
cb:0c:d9:4d:ed:92:75:2e:3c:95:45:8e:9f:61:d3:21:6f:68:
22:d5:2e:2a:e8:f7:97:21:d8:2a:f2:07:3e:69:bf:a3:02:05:
26:0b:6b:7d:15:bb:b0:10:9a:ad:d7:d0:41:eb:05:66:82:c0:
ad:ed:c1:40:96:06:fd:92:d7:db:8b:1f:8d:64:c0:eb:12:6d:
72:6c:25:85:66:12:ab:82:f2:77:bd:ab:c2:62:a1:3e:eb:f5:
26:de:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:24:47 2026 by rpki-client