Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: NknkcJI6jcxg/DFxon1YUQUqFEdX88oSKDpxOXaxipg=
Subject key identifier: EC:F3:2A:45:EB:20:AF:1C:15:34:B2:0C:4F:ED:19:43:8C:4A:F8:21
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019CACEBB8596FB8A115D71AA8EE19BD43A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0E0B
Signing time: Mon 02 Mar 2026 05:00:55 +0000
Manifest this update: Mon 02 Mar 2026 05:00:55 +0000
Manifest next update: Tue 03 Mar 2026 05:00:55 +0000
Files and hashes: 1: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: KW8/pupGzBuW/i2q6mNXv6sOgOggV+P3BOnHoqup/70=)
2: vFD13EECI63i6INpfz5KMmXHVEk.roa (hash: Xu061/sJ2Z4De52RiHTNj3+yQxv1II+U8nmD/HxX9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b8:59:6f:b8:a1:15:d7:1a:a8:ee:19:bd:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Mar 2 05:00:55 2026 GMT
Not After : Mar 3 05:00:55 2026 GMT
Subject: CN=ecf32a45eb20af1c1534b20c4fed19438c4af821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:58:9a:c4:9d:ec:2f:4c:59:4b:90:de:de:
24:8a:13:af:c9:ac:df:0a:6e:7b:b6:e6:a3:13:89:
c4:20:ea:3f:5b:b4:99:a2:09:09:20:db:60:7c:73:
8b:69:1f:74:0c:3c:b1:aa:72:57:61:f3:3f:07:1e:
05:10:15:92:4e:3c:33:a4:64:18:b5:22:2e:80:02:
41:9c:2a:fa:54:49:a7:e3:08:e3:d8:ae:5c:34:77:
f8:f0:94:3c:95:dd:69:ef:03:12:fd:a1:bd:5f:e5:
29:f2:75:99:7d:78:6f:f7:ca:4b:05:dc:b4:af:50:
55:dd:ed:72:e9:57:7e:67:67:3c:be:11:e0:8a:df:
04:ae:39:f4:d9:65:2e:f3:0c:4e:e8:9a:41:ef:d8:
92:60:c6:08:44:6e:ba:ee:10:6b:83:a0:17:99:03:
6e:2a:01:ad:9b:3e:53:80:67:e9:e4:40:5b:31:ac:
e5:46:20:4f:3e:fb:55:86:da:66:89:b5:07:12:b0:
53:95:2e:55:99:62:32:2c:77:93:45:a8:6a:a8:50:
44:f1:3e:39:70:34:bb:d7:31:04:09:c8:2d:3f:99:
62:26:80:b6:b2:ae:7d:1c:17:e9:45:68:20:76:69:
e1:8a:72:8c:ef:88:f2:de:48:b4:c9:79:33:62:0a:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:2A:45:EB:20:AF:1C:15:34:B2:0C:4F:ED:19:43:8C:4A:F8:21
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9f:a1:5c:11:51:f8:26:a0:30:fa:74:e9:4f:52:57:61:d9:
d7:2a:93:ae:24:27:36:0c:10:f2:2a:5b:c9:1a:db:44:23:57:
8e:d3:3a:ea:96:60:57:61:7b:78:13:d5:cd:c7:4b:4c:53:0f:
f5:50:14:90:4d:7b:d2:99:d9:c2:18:35:17:ea:e7:e4:25:c7:
da:c0:5f:0a:16:5d:1c:13:34:83:09:7d:be:54:d0:b6:20:00:
32:9e:72:63:f9:5d:b9:93:3b:ee:4a:bd:14:5f:cb:d4:0f:d9:
57:f3:bb:73:83:37:68:9f:9c:65:12:a9:f2:4a:5e:b6:89:8e:
b0:c3:b2:ea:fb:6a:e4:de:7e:4c:b9:1b:76:e1:55:01:19:3b:
b4:84:69:1f:eb:91:41:61:92:4c:66:f8:4a:d6:72:1f:be:2d:
d8:d7:97:dd:db:36:ae:ac:4d:7f:46:c8:06:34:60:3b:79:2e:
5a:1c:b8:7b:54:8c:14:3c:b2:a6:4c:39:d0:24:e3:14:dd:35:
86:18:d5:19:fa:b7:85:b1:f2:b9:21:31:17:4c:7f:4b:cb:4c:
32:ef:df:b9:e9:7a:66:99:f6:da:50:d4:55:5d:15:11:25:6a:
c2:f3:f1:ba:f8:fd:8b:a5:74:48:e7:79:0d:7a:93:d6:d8:da:
5b:02:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:05 2026 by rpki-client