Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier: PwGASrgfl3csE+C99vfSfCeAxQ5jghePMptvRUKMXn8=
Subject key identifier: 49:81:69:A5:3C:C7:0D:4B:25:EA:15:11:3A:45:A4:D5:84:38:22:63
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 019D2A3B5007C84E469AA7CD805A064A207E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number: 040A
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: ct0ZtMlKe3JxXzQ9Yf6ht+wM58Xf8+Q+pg5oQuoadjU=)
2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:50:07:c8:4e:46:9a:a7:cd:80:5a:06:4a:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=498169a53cc70d4b25ea15113a45a4d584382263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:75:c0:0b:aa:84:09:31:86:40:aa:c2:d7:
05:8c:42:ee:79:6b:73:45:4f:3b:ed:2d:9f:ce:1a:
21:20:18:c1:69:71:ee:25:8d:3e:0e:60:94:e9:87:
40:61:16:1a:e6:0f:d5:fd:95:20:db:02:75:69:7f:
c1:a4:c1:dc:a7:a1:f8:98:6b:0a:6d:ba:6a:f4:8f:
e0:b8:ba:eb:04:ac:cd:45:0e:42:6e:80:75:2e:9c:
69:6c:44:99:c3:14:36:5a:f9:1d:9d:eb:1c:21:ed:
fc:b2:29:8f:82:4a:c7:ef:95:df:7d:29:45:09:5f:
da:e6:09:5c:f0:c4:32:8a:93:b1:35:11:94:6a:14:
5a:03:ef:cb:ed:26:30:4b:c8:39:ac:60:19:1f:ca:
d3:e5:8f:f0:b5:1a:0f:77:36:50:ad:e9:35:b9:99:
6e:0c:24:e9:9a:17:d1:ea:af:25:05:d3:d4:65:25:
ff:a1:41:0c:48:48:df:39:b5:bd:42:3c:09:9c:64:
13:3a:5c:f6:f2:50:ea:d8:5a:c0:4d:da:4f:74:d5:
91:c8:0d:c0:ea:07:5b:62:18:cc:f9:e8:99:b3:d9:
63:28:14:85:85:9d:ca:18:dd:58:69:0f:49:39:c7:
33:c0:53:b0:06:a7:7c:74:3c:0a:d7:1b:d7:d4:49:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:69:A5:3C:C7:0D:4B:25:EA:15:11:3A:45:A4:D5:84:38:22:63
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:39:5a:1e:08:99:96:98:81:4d:71:f4:83:95:b2:85:d5:92:
30:b2:38:e9:85:a7:78:57:d0:6b:ec:3b:b4:f2:7a:e9:06:f5:
21:c3:f1:d1:de:b3:6e:7b:f2:d2:a2:65:62:33:98:21:3b:98:
f2:c8:12:bb:04:3c:5d:fd:d9:dd:d0:c0:39:b6:fe:b9:40:10:
88:d6:0c:c4:f4:4a:11:e3:14:43:17:2e:65:62:7e:e9:b3:d0:
50:13:1c:2a:98:14:02:3a:4c:66:bc:94:70:b0:bf:93:0c:2e:
85:e7:6e:f0:74:d7:82:1d:1c:55:e4:9f:f5:c3:f3:31:a8:9b:
23:8a:c1:4a:15:f5:b0:d8:9b:e6:a3:ad:07:fa:b1:0d:5a:a2:
58:fd:23:74:6d:ea:96:70:88:83:d1:89:b1:0b:c3:03:19:a9:
60:e5:f5:e3:fe:9b:37:a8:1a:68:ba:de:9d:b5:24:d4:27:2c:
ca:1a:2e:6b:94:c5:3d:a4:b3:c3:87:36:96:97:2e:e2:31:94:
29:c0:1e:12:0f:7f:5a:7b:71:6f:d6:4e:4f:7b:51:f6:0e:9c:
ae:9e:9e:2e:ce:f4:85:b3:c3:8c:ab:d7:ad:35:b8:cc:d0:e8:
40:aa:b6:c2:00:f3:6f:bd:b1:35:ca:31:61:e9:0d:e8:26:41:
a6:2f:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:38 2026 by rpki-client