Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: ZefIafuC6Jq5amKJW9g/EH1M2YpGfpqWpouZZ25na5k=
Subject key identifier: 6A:76:FC:29:BB:5C:84:39:95:95:E4:4E:58:C8:6D:F7:9A:39:46:E4
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 01A1279E85B1EFAB036B31D7D80316F5392C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 03B3
Signing time: Sat 10 Oct 2026 21:01:02 +0000
Manifest this update: Sat 10 Oct 2026 21:01:02 +0000
Manifest next update: Sun 11 Oct 2026 21:01:02 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: 5C5qUXq6s8Qe8yjDWonEhJIhekakbfxgSTbadZbjZy8=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:85:b1:ef:ab:03:6b:31:d7:d8:03:16:f5:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Oct 10 21:01:02 2026 GMT
Not After : Oct 11 21:01:02 2026 GMT
Subject: CN=6a76fc29bb5c84399595e44e58c86df79a3946e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:02:af:9b:53:1f:fa:d7:5d:58:7a:86:8b:
bb:da:a9:b1:aa:41:72:18:2d:ca:72:e1:2d:08:53:
b2:7c:9d:40:2a:75:f6:9c:09:9b:3c:7b:9f:b2:1a:
d1:db:31:a2:26:54:05:fa:0f:be:19:8b:d1:8a:ea:
65:a8:d9:ab:c0:d9:18:38:83:9a:36:d6:d0:8c:f8:
38:d9:97:f9:00:b0:15:d8:61:71:3f:0d:31:27:86:
12:79:49:af:0b:b7:7a:67:06:d0:c4:44:fa:bc:a6:
3e:33:83:5f:eb:0c:0b:6a:3c:b2:38:36:e4:e6:a8:
ea:b1:d1:b7:7d:7a:ac:9c:f6:7d:aa:d4:5c:58:bb:
d2:b9:17:9a:55:a2:4f:43:e9:8d:bd:d1:71:bf:81:
a2:4f:95:92:7d:e7:d8:b1:da:4e:7a:16:12:db:07:
43:ea:50:40:76:98:7c:2a:5b:d4:d8:86:00:db:11:
fd:27:82:e2:40:56:d7:fe:c8:f7:0d:74:0b:69:31:
33:f3:ae:88:b7:30:d8:d6:82:a2:f2:4e:ff:6e:67:
70:86:5f:2b:90:16:37:78:60:60:de:5d:f0:62:21:
ad:cf:9d:a4:44:59:05:ca:a0:fb:b7:f3:52:58:23:
34:c3:b0:01:d4:42:d8:bc:48:f2:1f:8d:b4:9a:7f:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:FC:29:BB:5C:84:39:95:95:E4:4E:58:C8:6D:F7:9A:39:46:E4
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:73:17:4f:1e:07:41:0a:28:cd:f3:94:b0:15:2c:40:4c:5e:
c4:cf:e5:47:8a:aa:c7:a2:d6:65:29:cd:02:bd:a8:38:16:4e:
02:9c:34:27:04:a7:74:6b:a0:2c:ae:c5:86:49:9d:d2:6a:95:
6e:bd:aa:54:18:4c:4c:a4:96:a4:5b:e9:87:af:10:63:7d:eb:
c2:70:b7:d5:5e:80:68:1c:b8:db:64:52:39:d5:ae:8c:e5:8d:
78:0f:cc:c0:eb:70:92:72:92:37:8a:83:93:56:0c:d0:e3:be:
ea:20:9e:c2:89:03:68:37:aa:ec:e5:29:09:53:c2:5e:49:d7:
b9:59:0e:79:e1:4c:21:70:a3:bf:f1:0f:8b:45:7f:4a:bc:96:
7a:26:3e:57:58:a7:6e:92:4f:8a:ce:58:fd:2e:af:c4:9e:36:
c2:a0:cf:47:6e:d5:72:21:20:d5:f3:18:a3:23:3e:a5:65:a7:
7b:5e:8e:9c:b9:78:65:43:a4:ec:47:13:5b:96:5e:73:de:1e:
1a:3a:61:8c:94:9b:ab:c9:8a:3a:8d:79:a2:09:b6:fb:7b:57:
ec:6b:ed:8e:f5:d3:4b:cb:36:2f:1f:92:63:18:2c:88:a9:73:
70:1c:96:2e:bd:74:27:3e:07:56:71:7f:51:2c:ac:0a:2d:e8:
a8:2f:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:26:48 2026 by rpki-client