Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier: PT+HqD4Qkl3RRVgOtXh830KHpJ9SlHgOGSAjs2STiUk=
Subject key identifier: E6:68:98:D6:65:59:EF:F8:66:DA:08:60:DA:B1:4F:D2:5E:9D:2F:AC
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 019CAC46A818CCFAD619F5D7427C52F697CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: jSKwLPV3U1kZDsJdyydoBbYhcqyO2rfVYJox9kxhvZs=)
2: RIJBybR9-DouPrCuYxNRwQmWZFY.roa (hash: X4nTT9KU+VderSwZiYIcF0Lj/ZrE4lgDMlLbMCbQITQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a8:18:cc:fa:d6:19:f5:d7:42:7c:52:f6:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=e66898d66559eff866da0860dab14fd25e9d2fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:8f:28:be:41:a0:aa:1d:59:34:48:66:0a:
fc:b0:35:31:9d:73:8a:d5:89:e0:84:11:90:e3:8f:
a4:b9:05:82:62:ce:68:4b:e4:3a:22:46:af:4b:f9:
4e:b2:e1:20:d8:0d:18:b5:1a:fe:4e:74:27:f6:8a:
df:a4:01:ee:c5:73:c1:83:15:2f:5d:74:57:4a:87:
0c:bf:c2:23:d1:66:fc:58:c6:8d:da:47:a1:fe:44:
87:c5:58:ad:b7:d2:dc:8e:b3:ed:d6:e5:1e:13:49:
39:d4:d9:cc:3f:9b:61:be:e5:a2:bc:44:92:90:5b:
7f:2c:f9:d7:35:39:d9:85:77:ef:a6:d5:7a:b7:11:
b5:cb:20:b1:54:e1:6c:df:fc:b2:a0:57:d2:c6:a0:
01:d1:b9:0b:d8:68:a2:a1:03:92:d4:0e:c0:d9:bb:
a4:d1:4f:52:ea:3a:29:a4:b1:e8:b6:54:8c:e8:44:
29:a1:a4:85:82:dc:bb:40:e3:8a:a6:bb:f5:3a:9a:
e7:2f:b4:e6:38:3e:7b:db:52:ec:34:82:15:f0:22:
b2:d5:ec:4b:8a:3a:08:9b:c4:85:ca:d8:5f:e2:33:
13:bf:6e:29:11:81:01:9c:8a:24:10:7a:fc:05:81:
ca:a6:a6:0c:c3:5a:52:ff:2e:cb:ad:61:a3:51:f6:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:98:D6:65:59:EF:F8:66:DA:08:60:DA:B1:4F:D2:5E:9D:2F:AC
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5a:65:88:22:37:d5:4f:00:90:7e:1e:f7:1a:95:2f:26:af:
80:09:9d:80:cf:b0:c6:c5:f8:cb:cd:da:67:a4:3a:e9:c2:90:
00:98:82:65:f7:9e:c0:90:07:f4:8f:16:44:68:e6:59:46:1a:
7a:59:91:f6:3c:bf:ad:ca:92:5c:54:b9:41:9c:dc:d8:bb:a9:
26:fc:5f:09:3b:6f:e2:b0:5f:e0:bc:4a:73:74:91:f6:d3:5a:
ab:62:09:50:b3:aa:95:81:1c:b9:82:a8:18:86:22:83:ad:be:
a2:1e:71:e1:68:23:5e:e9:a7:c8:d5:99:84:8d:78:f8:56:ac:
59:7b:a1:ce:2c:dc:c7:cf:ac:55:7c:e6:97:c1:37:ff:ce:2c:
e8:4f:cd:42:62:a9:68:df:85:78:53:b3:5b:3c:93:e1:54:af:
4c:e9:a0:3f:78:87:8e:6e:95:31:ac:27:45:8d:35:68:bb:43:
d5:c6:ab:de:7a:62:00:5f:5f:cf:3a:ae:76:85:75:f2:0e:b3:
14:6b:fd:06:c3:2a:b5:d0:e7:b2:c2:a8:0f:61:cf:c4:c6:be:
e6:60:52:04:d9:63:21:72:9b:5a:fa:c7:86:86:d7:d8:52:5e:
41:69:30:be:d7:fc:3f:4a:cc:72:64:12:32:54:c0:11:3d:9f:
75:15:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:02 2026 by rpki-client