Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: OTzjzHh2KoIYrtj5OcNbZc4u3gVd0311wwm/TFKMHFs=
Subject key identifier: 2A:91:82:97:41:36:31:66:38:B6:A8:1A:27:BD:69:74:34:57:77:21
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019D27A861D32C7E0E61716755405256566E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 13B3
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: yJe/6q+4pDqGvv7W4uisrMWgM6hTsGyWEqtSNmjP21o=)
2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:61:d3:2c:7e:0e:61:71:67:55:40:52:56:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=2a9182974136316638b6a81a27bd697434577721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:e5:dd:6f:f1:37:b3:bb:fc:01:8e:5f:c2:
2a:69:d3:7b:68:aa:44:9b:8f:e0:dd:f9:f1:22:82:
b0:70:07:d0:b2:14:82:15:0f:ef:ee:dd:7b:c3:f1:
ec:ba:a5:4b:18:97:f8:f2:75:ef:b7:f8:e6:eb:71:
4e:b9:8b:86:f1:b4:9a:f5:9e:5b:c3:32:36:03:d1:
33:1a:84:48:92:54:b8:f9:17:47:32:a7:3a:c6:0c:
9b:94:81:02:e8:cd:e3:7c:b9:12:95:41:33:2b:05:
57:63:f2:da:e4:16:e6:a5:7c:49:bf:54:c0:7a:0a:
31:09:de:75:8a:f1:51:f8:38:9f:ad:15:f4:b3:36:
c4:f0:71:48:e0:1a:32:17:38:bb:bf:0b:0f:a6:6f:
72:ff:26:02:43:fb:ac:22:44:56:ef:95:03:66:7b:
d8:34:bd:ab:af:07:9b:bd:87:28:0f:4f:e3:da:09:
46:9c:16:9e:23:e7:20:d4:c0:cc:22:97:01:72:1a:
66:20:10:b5:9e:f2:57:45:ac:13:23:80:8f:7e:9e:
58:07:59:9e:86:f4:f6:19:9e:d5:2e:6f:c6:c6:60:
3f:85:af:d4:71:2e:93:b9:0d:89:07:07:f8:66:81:
4d:6e:31:74:46:56:eb:6c:42:6c:e4:e7:cf:37:ac:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:82:97:41:36:31:66:38:B6:A8:1A:27:BD:69:74:34:57:77:21
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:74:e7:89:62:a1:67:db:99:85:17:a8:15:cd:75:bd:b8:
1d:83:0c:7d:67:11:7b:e1:a6:68:8a:93:0f:71:aa:f7:dc:39:
7b:db:34:fb:88:52:ea:34:94:8f:25:95:b6:dd:11:4e:a0:95:
5f:5e:4b:fe:6d:80:c4:04:8e:3d:59:79:cb:2f:70:12:b0:49:
e7:79:89:5d:13:18:94:be:b0:95:ec:4d:0b:64:64:d3:08:cc:
ef:e3:73:ec:be:27:2c:69:34:1c:34:63:2b:bb:7b:41:92:17:
53:8f:b2:7a:9a:78:47:38:ab:b0:55:3f:0e:9e:b3:48:e5:bc:
ec:e6:69:15:80:74:ec:02:9d:55:58:f1:26:cb:2f:4f:b7:33:
37:43:e7:c7:17:e3:97:c4:11:be:05:37:2a:dc:8d:35:73:21:
4b:f4:63:85:26:b6:b8:1a:6f:fb:71:f2:a8:7b:3f:af:7e:52:
07:65:be:aa:c7:cc:60:73:e0:7b:ef:37:19:3e:bf:59:09:8f:
a4:d6:21:9f:6a:96:76:0a:23:de:54:20:9e:97:1f:01:e3:18:
f1:a6:bb:18:e8:f7:24:9d:9e:67:d0:19:27:70:1a:06:01:06:
11:f0:2c:2d:55:b0:e0:6f:d6:8a:c9:ba:3a:be:b3:2e:9d:f4:
be:e7:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client