Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: eDNsvf7Z3tn/L4FrEmjVBuP/4eLVtmocCvrH5pVYUSM=
Subject key identifier: EA:0B:C9:D5:AC:E3:0C:C6:4D:F2:B7:5C:E6:A3:16:8F:B3:2E:F5:E1
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 019D284DA33A478960100301F18B53264BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0FAE
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: 2YXaVJF56w3FtWIMnMA/o4GrVVNNxILpev5PapGcQmw=)
2: UJWn-wAPft9IixekN55NPYLNamM.roa (hash: pG2rLvElt60tF5xnp9AHmw3BuJ08zKLP8VTkx1BBVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a3:3a:47:89:60:10:03:01:f1:8b:53:26:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=ea0bc9d5ace30cc64df2b75ce6a3168fb32ef5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:eb:db:66:9e:b1:6a:78:61:f5:71:eb:33:
76:4f:68:8f:46:39:97:3c:88:0b:de:bf:a8:d3:5e:
12:cf:98:95:75:bd:dc:ab:82:f1:5b:82:f6:8c:e9:
7e:46:4c:ac:90:e0:5d:18:32:0f:4c:33:24:dc:2b:
96:f2:2f:07:bb:d2:14:3e:e1:85:83:51:2a:f4:48:
96:a8:eb:ea:36:37:6b:f5:b2:cf:16:27:e1:d1:82:
c8:bd:c2:f8:16:c5:2d:d5:28:66:97:86:d5:86:9d:
df:3e:20:14:5d:34:89:54:6b:69:bd:26:0b:fe:9d:
2b:ec:0d:1a:43:e2:46:d6:20:5b:d6:f7:74:53:f8:
43:4c:2d:de:64:92:17:01:be:dc:c4:c7:b1:4f:b0:
b7:86:2a:8c:97:18:31:82:2b:5e:dd:cc:5f:1b:86:
de:0f:7e:0f:97:fb:ff:3a:54:ff:db:98:77:22:a6:
29:9e:df:35:db:68:72:ed:5d:02:47:f6:aa:f7:34:
5b:70:13:77:24:b4:ba:d6:31:87:36:65:87:39:4e:
fa:99:67:2a:39:e7:f6:fe:1a:02:f6:b1:53:dc:10:
04:dc:fb:05:a8:ac:2c:23:f6:97:6e:7a:9a:a0:a4:
24:1f:b2:e7:1e:a4:29:6f:39:da:eb:19:73:5e:33:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:C9:D5:AC:E3:0C:C6:4D:F2:B7:5C:E6:A3:16:8F:B3:2E:F5:E1
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:04:79:45:82:85:e0:50:9d:65:8e:54:f3:58:91:17:ad:
d9:bb:5c:64:92:63:53:67:f1:a1:f3:ff:48:70:e1:f6:1e:06:
19:b0:84:8b:96:65:69:04:16:88:dd:6d:05:e4:22:f0:a6:6f:
cd:ad:81:2e:52:63:a4:c7:a6:23:1d:4c:ff:29:40:b4:f5:2a:
69:40:0a:6e:1b:9e:40:41:14:e9:a8:4d:e1:e4:e5:01:52:c4:
c7:1a:39:d8:3d:c5:3d:5a:37:a9:26:97:ba:0b:8c:6a:90:d7:
f9:3b:bb:e0:c9:c5:2e:83:74:1b:e1:19:14:45:37:7c:a9:1e:
20:cc:7f:e6:58:65:2e:9e:5e:04:0d:db:13:74:df:51:94:30:
b8:a1:5d:29:0b:52:5b:45:f8:7e:18:ab:37:62:4c:fe:45:bd:
97:44:90:7f:78:6b:ed:52:c3:21:fe:c3:45:a5:db:c8:de:5d:
69:79:e5:2e:37:b3:89:0f:dd:0a:7b:f0:2e:6a:a9:74:03:be:
f7:76:c0:47:8c:f3:93:e6:cd:21:a7:40:c3:8b:9c:24:e7:1b:
f9:00:88:d4:31:b5:fa:4d:70:c5:c9:04:69:ae:21:56:9b:f0:
34:99:be:c0:7c:f2:9b:90:8d:d8:3e:fb:8b:ec:b7:4f:62:f0:
4f:aa:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:50 2026 by rpki-client