Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: 9uRYdzvbWwELdHMs3cLII/cd7CU7kAKsGzaX6A3KvYI=
Subject key identifier: 84:BA:53:5B:52:66:4B:A7:67:0B:4A:89:82:41:AE:62:D1:26:BA:A7
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 01A0ED78BACD0344F40CB304BC65E5FE6184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 04DE
Signing time: Tue 29 Sep 2026 14:01:47 +0000
Manifest this update: Tue 29 Sep 2026 14:01:47 +0000
Manifest next update: Wed 30 Sep 2026 14:01:47 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: ESK3qcvxN6ZsiYuIuduJ+Ljk8ITGg9yT6FosxRDNYlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:ba:cd:03:44:f4:0c:b3:04:bc:65:e5:fe:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Sep 29 14:01:47 2026 GMT
Not After : Sep 30 14:01:47 2026 GMT
Subject: CN=84ba535b52664ba7670b4a898241ae62d126baa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:3f:96:34:44:6c:13:17:ae:09:d8:e8:1f:
c4:ec:bd:ca:8a:3b:66:f8:19:6b:24:c3:b9:6a:02:
41:19:56:d5:ba:7d:1b:56:0e:6b:3d:5c:9d:b5:85:
b1:58:b4:6b:35:1e:bc:ba:c6:71:8c:4d:03:ba:b4:
ed:89:27:fa:ab:fc:2c:53:bb:6b:39:23:2d:a6:a3:
eb:d7:4a:94:b8:b1:c7:ec:c9:f5:56:46:0d:41:e4:
cb:99:c0:72:bd:87:6b:71:c1:62:8c:30:be:ea:91:
70:0c:76:26:ab:9f:b7:e9:ae:c0:56:e1:02:dc:df:
ee:58:18:a4:82:ef:6e:e2:83:b2:96:1f:a2:ac:63:
4c:69:d8:14:ff:4d:4f:91:fd:9b:2d:2f:82:51:63:
76:a7:b2:41:0d:c9:de:2f:35:1b:8e:f8:f6:48:c5:
e2:c1:cb:05:08:45:af:b0:9d:bc:95:1a:dd:ab:a4:
6d:d3:c8:95:15:6c:02:09:74:e7:75:05:53:ec:f7:
b8:6c:4f:37:15:69:d5:c3:8e:c5:93:f5:96:8b:d8:
be:18:1e:29:ea:ef:a6:89:08:e5:a9:37:aa:23:87:
0e:68:c3:72:e6:86:22:4f:47:a5:2e:66:a3:4a:1a:
6e:bc:2f:df:39:10:74:79:18:1b:19:00:cc:e2:f7:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:53:5B:52:66:4B:A7:67:0B:4A:89:82:41:AE:62:D1:26:BA:A7
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:66:84:0a:6a:77:33:96:e4:cd:b4:af:4a:e5:65:ca:e6:
7b:2c:58:fc:90:83:3d:b0:34:45:33:68:bb:8d:37:9a:83:e9:
d1:18:b4:5f:48:78:fb:dd:ac:9b:44:bf:13:2e:4b:b9:24:f9:
97:a7:fc:22:11:ed:95:e4:cd:e1:a6:ed:2f:0c:75:37:a0:62:
22:29:90:78:3e:3a:b6:0c:b4:86:7f:43:b3:2b:36:01:94:85:
ef:84:e4:96:8c:df:f5:83:7a:cb:33:ad:5f:5d:b5:12:a4:65:
41:cf:2b:59:f9:43:0d:d5:7b:13:ad:2e:66:52:5d:f9:d9:db:
bf:78:f6:3d:d4:7b:c0:9c:e6:57:ae:f1:24:d2:18:3a:eb:cd:
ca:ff:27:e1:f7:09:6e:63:a8:f7:92:7f:6d:93:c5:d1:4a:bd:
45:ad:4e:5c:8d:42:90:1e:33:2e:6e:d5:77:d1:7d:fd:5f:5a:
b6:83:73:51:40:a3:fd:36:35:d6:a3:3e:4e:df:70:0e:90:3a:
bf:e6:72:62:73:47:c8:cb:47:8c:4e:ba:af:57:86:f1:9c:22:
cd:53:a0:fd:60:43:c6:b2:c1:d5:97:6f:57:0b:03:e2:60:b7:
86:3c:4f:07:96:51:49:22:4b:2a:c9:ec:f0:f2:e9:e6:c1:ff:
3f:70:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:24 2026 by rpki-client