Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
File: Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft (raw, json)
Hash identifier: v41E/r4f4zFZ9vdzHKJ1KsC+phoTJO51CSVaKcS2i3E=
Subject key identifier: 66:2A:90:65:EE:DA:C9:C5:C1:69:F5:2F:74:78:18:5C:7E:21:F3:C1
Authority key identifier: 1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
Certificate issuer: /CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Certificate serial: 019FA9074776EF98BACB707D3D7B40B3A234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
Manifest number: 5F
Signing time: Tue 28 Jul 2026 14:00:54 +0000
Manifest this update: Tue 28 Jul 2026 14:00:54 +0000
Manifest next update: Wed 29 Jul 2026 14:00:54 +0000
Files and hashes: 1: 7PriCDVWnT1HYJrwYNPM5oCvIbY.roa (hash: Zt6UDdQs2XkMXhq8WXEB4GIlZFaXqIzlnXOtR6MAoiI=)
2: Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl (hash: Q8ApYtIPLmRbz1BAcyi//XjMv8xygF8LjK3wEMOKMBA=)
3: qY64LLAKmXVBF2yF2a0AG56IVAo.asa (hash: ucX67FWJ1VM3ZcVEhzhFpCcYubHiPMVmYsb/9Ginm64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:47:76:ef:98:ba:cb:70:7d:3d:7b:40:b3:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Validity
Not Before: Jul 28 14:00:54 2026 GMT
Not After : Jul 29 14:00:54 2026 GMT
Subject: CN=662a9065eedac9c5c169f52f7478185c7e21f3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:7e:51:1d:66:24:2f:e3:f3:d5:c3:e3:d3:
1f:cd:a3:f6:14:49:78:df:4e:f4:93:11:f9:b1:37:
18:7b:45:f6:5b:6f:96:e1:2f:c2:01:78:e0:a1:1f:
3a:d7:63:7b:1a:71:06:7e:5e:7c:e9:0f:31:ca:63:
28:b8:36:d4:0c:18:6d:b8:72:5c:fe:56:0c:cd:d5:
91:87:bf:9b:5d:c9:9d:ff:7d:c8:43:a0:be:a6:3a:
d4:c2:ba:a4:d1:cd:80:e5:9e:e6:24:bc:f6:ce:c9:
2d:01:2d:dc:3c:67:68:de:35:01:bd:18:2d:28:62:
25:b7:f4:e1:0f:10:7d:51:44:34:24:13:28:96:b2:
e7:78:fa:e6:1e:80:e1:68:82:d1:99:16:74:45:3c:
c2:d9:61:ca:75:af:64:a3:79:e8:16:8b:a6:bd:c8:
29:8e:03:6c:e7:76:1b:16:cc:b5:2c:d8:9c:2f:76:
61:de:f3:3a:db:27:c6:1c:3f:d2:25:cf:3f:80:dc:
ca:fd:93:5f:03:b8:d8:7d:53:f8:0b:a3:ee:7b:a0:
3d:ea:79:cc:84:db:28:72:13:c0:f4:3c:a6:a4:dc:
ce:fe:68:c6:d9:ef:82:95:38:a9:97:37:ed:02:cc:
d2:c9:00:a0:85:47:9c:67:7b:92:36:59:27:a8:aa:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:90:65:EE:DA:C9:C5:C1:69:F5:2F:74:78:18:5C:7E:21:F3:C1
X509v3 Authority Key Identifier:
keyid:1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b5:c2:9c:a7:85:ab:d7:0c:8d:47:51:67:f0:31:c6:32:bb:
ed:d3:e4:dd:b3:e3:02:d2:9a:23:67:b3:b1:10:8e:f6:09:e5:
27:87:b7:44:10:c4:b6:41:9f:fc:1c:86:a8:e9:c1:0a:6a:72:
cc:06:9f:26:14:bd:3f:23:fa:3f:6d:b9:da:d0:28:6e:81:a5:
36:74:7a:e2:de:b7:60:01:17:bf:64:14:c2:26:d0:72:ad:d5:
6a:a4:20:10:57:6f:59:e0:56:f4:b6:e8:66:fe:ff:6c:f0:83:
76:a2:31:a1:31:4c:4d:b0:a2:bb:97:30:2b:c2:9c:6b:39:eb:
e3:b2:63:46:0c:ad:d4:98:99:1d:0b:5a:5a:ce:56:d4:75:50:
b9:f4:f6:65:31:59:4f:b0:bc:72:a2:a5:4e:9d:51:67:e3:9c:
98:6f:b3:f6:18:3a:cf:70:af:70:e0:4b:e5:21:ba:f9:ed:0c:
41:1e:a1:d1:3c:75:78:50:fd:08:de:32:fe:25:1e:ca:73:88:
b2:79:d1:bf:6d:b7:72:43:80:fe:8c:14:a5:89:29:2a:4d:69:
8b:45:39:7c:a3:b3:a0:3e:5f:98:b4:47:3a:c9:c0:85:17:0f:
93:9e:4c:37:f0:e1:3f:5f:2e:38:65:d0:db:6c:91:85:4b:55:
a6:bf:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:50:12 2026 by rpki-client