Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: Vf0/o/XGRX0JfGOMa7aODsfp0qlfY3timetPPMBXiD4=
Subject key identifier: BE:96:33:04:CE:4E:28:15:10:06:9E:6A:AF:57:67:9D:2F:92:50:66
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019D9D76425607E34261A51B95BCCCDBE145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 1664
Signing time: Fri 17 Apr 2026 22:01:06 +0000
Manifest this update: Fri 17 Apr 2026 22:01:06 +0000
Manifest next update: Sat 18 Apr 2026 22:01:06 +0000
Files and hashes: 1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: 5AjWc+7xlLj1De3EOfvwBejFuU48A14lhYouxMeQYi0=)
2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:42:56:07:e3:42:61:a5:1b:95:bc:cc:db:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Apr 17 22:01:06 2026 GMT
Not After : Apr 18 22:01:06 2026 GMT
Subject: CN=be963304ce4e281510069e6aaf57679d2f925066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:2a:ed:ff:61:fb:59:32:2a:9c:6c:e4:b2:
3a:a1:3e:cf:55:07:dd:d2:f2:00:2b:16:4f:db:6b:
c5:f9:4d:bd:c4:38:df:a3:36:d8:53:98:10:29:93:
af:28:2c:d5:cb:b6:7f:5e:35:a8:e2:74:cf:14:63:
c7:46:ce:20:f0:88:10:ce:d4:86:36:84:db:3d:0d:
28:af:7a:48:92:aa:5c:3c:70:62:e5:38:d0:3a:1c:
28:a1:6f:1e:6d:df:9a:0d:fa:01:2c:c9:40:d9:46:
a2:8b:ee:3a:1e:9a:b7:ba:bc:2e:65:0f:3b:53:90:
d2:a3:eb:77:97:a6:11:d0:be:4e:e2:9b:01:47:1b:
e5:c8:b9:e2:1c:66:d3:e6:1b:a5:63:77:39:29:16:
44:34:81:fd:e3:63:16:bb:1b:a4:95:7f:6d:ed:94:
57:ca:34:a3:f8:d2:82:36:b7:c7:e8:61:32:b9:66:
98:db:7d:d1:dc:7c:c8:06:d6:cb:8a:46:34:b9:6d:
f7:6e:e8:89:13:3f:f5:33:e7:a7:09:aa:51:6d:8e:
8f:ee:d0:39:a2:c4:04:53:0d:6a:d7:e1:aa:ea:f8:
20:ab:5e:53:1e:27:ee:54:ef:2d:5d:2d:31:03:15:
70:66:cb:ee:86:bb:d6:2c:23:47:07:b8:67:09:90:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:33:04:CE:4E:28:15:10:06:9E:6A:AF:57:67:9D:2F:92:50:66
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:f7:45:10:0d:89:a1:7c:2c:9f:84:43:a1:96:d0:1a:1a:
e7:89:66:e0:a0:b5:c1:d8:0e:9c:ac:ea:58:9f:21:f9:5d:99:
33:bf:d4:a7:09:8b:97:ba:98:b6:38:b5:57:24:de:e4:ff:d1:
c4:25:89:36:53:ee:5f:41:3e:6f:b9:8d:e2:49:f2:68:48:c6:
47:ca:0b:02:89:87:75:e6:c1:1a:d1:e9:6e:fb:1a:2b:d0:a4:
31:5c:2b:60:02:84:09:de:6a:c2:e8:05:1a:78:80:a9:ab:77:
91:bd:6e:e9:b3:b9:27:6e:19:3a:a1:be:8c:9c:63:33:7b:bb:
d1:a3:e1:76:8e:87:e5:0a:87:44:00:14:eb:93:c9:33:8b:7b:
92:19:fe:42:0b:df:3a:03:55:45:f8:d6:5e:ea:99:32:90:6c:
8e:44:a5:3a:b9:fb:ee:63:77:54:58:55:d6:3c:8e:80:69:0c:
82:1a:79:31:93:7b:1f:79:19:8d:bc:a6:c0:34:5b:96:cd:32:
b1:2c:a7:86:6c:e7:14:71:af:a4:c1:24:74:2d:b8:31:49:76:
a1:7a:f3:a9:18:e6:0c:de:95:a4:ff:df:14:69:bb:e1:0c:a6:
6d:2a:39:3a:db:76:48:31:f2:c0:e5:c2:81:c0:bd:54:e4:1a:
7d:7a:e5:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddkJWB+NCYaUblbzM2+FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzZiMDA2MzUxYTJmOWNmMmE5MTM4NmRlNTBjZTI3ZjE1
NTA1OTUwHhcNMjYwNDE3MjIwMTA2WhcNMjYwNDE4MjIwMTA2WjAzMTEwLwYDVQQD
EyhiZTk2MzMwNGNlNGUyODE1MTAwNjllNmFhZjU3Njc5ZDJmOTI1MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlesq7f9h+1kyKpxs5LI6oT7PVQfd
0vIAKxZP22vF+U29xDjfozbYU5gQKZOvKCzVy7Z/XjWo4nTPFGPHRs4g8IgQztSG
NoTbPQ0or3pIkqpcPHBi5TjQOhwooW8ebd+aDfoBLMlA2Uaii+46Hpq3urwuZQ87
U5DSo+t3l6YR0L5O4psBRxvlyLniHGbT5hulY3c5KRZENIH942MWuxuklX9t7ZRX
yjSj+NKCNrfH6GEyuWaY233R3HzIBtbLikY0uW33buiJEz/1M+enCapRbY6P7tA5
osQEUw1q1+Gq6vggq15THifuVO8tXS0xAxVwZsvuhrvWLCNHB7hnCZAtUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6WMwTOTigVEAaeaq9XZ50vklBmMB8GA1UdIwQY
MBaAFNR2sAY1Gi+c8qkTht5QzifxVQWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEt
NDRjMDdmMzE0OTA0LzEvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEtNDRjMDdmMzE0OTA0
LzEvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM473RRAN
iaF8LJ+EQ6GW0Boa54lm4KC1wdgOnKzqWJ8h+V2ZM7/UpwmLl7qYtji1VyTe5P/R
xCWJNlPuX0E+b7mN4knyaEjGR8oLAomHdebBGtHpbvsaK9CkMVwrYAKECd5qwugF
GniAqat3kb1u6bO5J24ZOqG+jJxjM3u70aPhdo6H5QqHRAAU65PJM4t7khn+Qgvf
OgNVRfjWXuqZMpBsjkSlOrn77mN3VFhV1jyOgGkMghp5MZN7H3kZjbymwDRbls0y
sSynhmznFHGvpMEkdC24MUl2oXrzqRjmDN6VpP/fFGm74QymbSo5Ott2SDHywOXC
gcC9VOQafXrlfw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:25 2026 by rpki-client