Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: hgTBNe7SYHC7LYZwM/YqhqkU53YEG2CaKuE4I1F3OWk=
Subject key identifier: A2:81:28:38:28:2D:1E:24:DD:66:BD:C3:DC:F3:77:FB:8C:5B:C8:30
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019D29970B22958BE27E1871A28689A57F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 1793
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: OBOaarukZQk1KYTNK0mbU8a8sTJ+WzDnVfn/YwitCgc=)
2: St46xIo1d9knxq8PKrr8XW7TwzU.roa (hash: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0b:22:95:8b:e2:7e:18:71:a2:86:89:a5:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=a2812838282d1e24dd66bdc3dcf377fb8c5bc830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:b5:3c:ad:18:1f:09:19:d6:83:31:06:d6:
68:a1:e5:11:e3:35:05:6c:e7:d5:3a:e8:e8:dd:9b:
f1:80:30:fc:2e:fe:f2:76:87:10:e2:dd:b5:34:1b:
11:23:4e:1b:d0:0a:22:87:4c:b4:e8:1d:ff:9a:e6:
7e:bb:59:94:0d:d9:35:39:ea:b0:08:6c:9d:8a:45:
da:70:f3:98:9e:6e:ba:cd:b0:f0:69:84:3a:75:b0:
77:01:49:af:7a:85:e9:37:74:41:64:01:58:d2:a7:
7c:32:6b:f4:f2:92:6c:0c:64:c2:14:ff:a6:be:44:
cc:51:85:31:b2:6e:7a:fc:fb:f2:89:07:68:c1:40:
33:fd:ca:b0:c9:03:5f:8f:b5:14:44:bf:88:90:58:
5c:9b:fa:47:29:da:b8:70:31:19:be:35:a5:d4:43:
d5:ee:0e:c4:b0:86:24:e1:ea:71:db:a0:ad:30:94:
03:05:d6:92:7a:13:db:bc:ef:44:c6:53:07:ea:1c:
e2:6f:93:75:ec:a4:50:38:9f:87:2b:ca:6c:9d:21:
1d:01:55:0a:db:76:45:f0:5b:91:90:d4:2e:8f:56:
f3:4a:c5:af:a2:1a:8a:d5:b6:13:4c:42:67:50:a8:
ec:d8:14:26:7c:0e:28:ee:04:eb:67:db:c2:ab:c0:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:28:38:28:2D:1E:24:DD:66:BD:C3:DC:F3:77:FB:8C:5B:C8:30
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:18:ba:0c:ab:a3:b4:44:93:02:aa:61:a3:41:fb:1c:68:63:
e3:7b:0a:1a:2e:47:e9:09:6c:de:89:a2:3e:ee:46:d7:67:44:
a5:99:f0:24:91:de:e5:87:aa:cd:10:0e:27:85:3a:7c:c3:5b:
42:2a:dc:88:bd:0e:c9:2f:a3:53:25:66:fb:9c:aa:fb:1c:3d:
06:d7:b5:5c:37:ef:bd:6f:e8:1d:a2:7e:b5:e3:c4:f5:74:15:
3b:63:c6:da:a5:bf:d1:42:3b:6b:be:3a:e1:4d:f5:1f:94:35:
1c:38:85:4e:96:07:88:2c:61:ff:ac:9a:da:bf:48:16:c7:91:
19:09:22:97:62:09:31:e2:57:e2:5a:2e:cd:eb:8a:bf:d3:6e:
87:fd:18:bd:ee:2f:1e:46:f1:5c:b7:aa:79:aa:8f:cb:f5:8b:
2e:b9:9f:4d:14:b6:08:b5:c5:6f:dd:37:49:80:ba:0a:f0:21:
8c:d3:29:e5:db:75:c0:88:40:37:8d:71:58:83:a6:e6:25:16:
19:6b:19:79:3f:aa:3f:50:53:a2:a6:1a:22:c4:ab:8e:c2:cf:
88:03:7f:7b:3e:42:f9:0f:f7:ae:bd:29:51:80:e1:80:8a:f9:
f8:1b:90:a8:02:e2:c5:af:ff:9d:e4:a8:ea:f4:f5:41:b2:f6:
ef:1c:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:47 2026 by rpki-client