Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: 7WowUtULXu+4NwcDr6j3+2ewTTn5fyANyoIQdnzj804=
Subject key identifier: 81:62:8A:8D:3B:80:D9:ED:7C:76:5D:B1:7E:1B:01:2A:5C:9C:A9:22
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019D25BA53A4960CFAE86F9FE1EC4856B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 159D
Signing time: Wed 25 Mar 2026 16:01:01 +0000
Manifest this update: Wed 25 Mar 2026 16:01:01 +0000
Manifest next update: Thu 26 Mar 2026 16:01:01 +0000
Files and hashes: 1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: XHNGPxgLNamtLpzPgDj+T2gFojyereQpFoa97gXNqBc=)
4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:53:a4:96:0c:fa:e8:6f:9f:e1:ec:48:56:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Mar 25 16:01:01 2026 GMT
Not After : Mar 26 16:01:01 2026 GMT
Subject: CN=81628a8d3b80d9ed7c765db17e1b012a5c9ca922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:39:49:1a:4f:ca:ac:0a:51:6f:4b:40:55:
b7:fe:df:aa:13:68:09:98:85:da:d3:b2:8a:87:99:
73:98:60:2e:cb:70:83:af:a0:b7:44:46:44:42:fa:
c9:64:05:b8:99:8b:e7:cb:a6:8d:99:fd:95:5b:40:
fd:3b:6b:1e:4a:7e:fd:96:9f:e8:f3:68:8f:e1:d0:
cf:71:08:0b:99:41:b2:fb:11:22:0a:60:c8:6b:a9:
d4:f2:b7:8d:f1:73:f0:8a:67:23:13:c8:2e:bf:07:
f5:92:f7:31:fd:8b:e3:c2:f1:4b:35:45:d5:3c:9a:
d9:28:14:b3:3f:f9:33:44:f3:f0:c0:20:74:17:77:
2b:4b:2d:3a:df:ce:3c:6e:74:b9:64:2f:9a:75:7e:
09:7a:6d:dd:2e:bf:5b:67:7c:81:7d:fe:0f:92:c8:
27:e8:99:b6:ab:5a:f9:96:09:f0:04:d2:a5:f6:11:
16:49:f6:ee:a3:1b:2f:92:88:8f:70:c1:32:7c:a2:
d6:a1:79:36:28:c6:68:a1:80:c2:da:e7:81:42:90:
32:1e:ca:0d:fb:3f:fe:98:5e:8b:25:db:b5:f6:b8:
45:fe:be:2f:56:7d:e8:e2:fe:68:bc:cf:31:8e:f1:
b6:50:a3:d6:b5:f0:a9:ef:02:41:91:e4:e0:0d:b6:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:8A:8D:3B:80:D9:ED:7C:76:5D:B1:7E:1B:01:2A:5C:9C:A9:22
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:22:4e:35:ca:a3:f2:78:8e:d1:05:b5:f8:26:0c:06:b7:
e5:af:85:a7:a4:c3:66:4a:e6:e9:f0:19:77:79:0b:ec:d3:94:
96:86:42:6b:49:2b:58:08:2b:99:4e:6c:e2:a4:2e:df:b6:9a:
ec:7b:67:52:69:af:02:84:0c:6e:da:16:e5:2f:b1:55:6b:c8:
f7:78:ab:ec:58:27:00:28:02:ed:4a:a9:ed:7b:cb:3f:b6:a5:
6e:9f:56:c9:9f:d7:09:45:89:20:57:61:8f:d4:de:62:63:41:
26:c8:32:dd:e3:74:85:e6:e7:50:49:99:ab:b7:31:5d:ff:32:
76:aa:b8:c1:bd:21:96:99:f0:64:2d:fe:5a:d6:fe:b3:6c:f8:
4e:aa:dc:3f:73:04:14:b3:4d:bd:df:28:20:02:7b:f7:79:30:
0b:30:11:c5:61:b2:6b:9f:46:22:5b:2c:c6:21:8b:9c:52:4a:
be:68:1f:2b:51:3d:0b:ba:d1:40:5f:e3:65:35:f7:77:3e:c0:
79:dc:cd:3a:ad:6a:3d:6f:79:80:17:db:8f:9b:93:0f:a1:2e:
f1:6f:f6:3d:b7:fe:28:5a:00:f4:ba:ba:db:38:0c:14:9d:5e:
73:5a:74:06:60:3c:a7:c1:84:11:62:e9:d4:d4:e7:55:87:39:
42:05:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:20 2026 by rpki-client