Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: 9Rcx2xFFVZMpZKUhIwyj1QfOTqWgXzXFC0pZZBSMteo=
Subject key identifier: 02:5A:CB:64:6F:E3:0D:E7:E7:F0:ED:96:7C:3E:17:D9:17:D8:5C:B5
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019F91DAD94F12B72D7A6F28E19ADE64C259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 042A
Signing time: Fri 24 Jul 2026 02:01:06 +0000
Manifest this update: Fri 24 Jul 2026 02:01:06 +0000
Manifest next update: Sat 25 Jul 2026 02:01:06 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: Sfvb3HIgJ8ZuipjPHDO0dzlqF0GeKqI6Goaj3yiLAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d9:4f:12:b7:2d:7a:6f:28:e1:9a:de:64:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Jul 24 02:01:06 2026 GMT
Not After : Jul 25 02:01:06 2026 GMT
Subject: CN=025acb646fe30de7e7f0ed967c3e17d917d85cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:c1:c1:52:4e:c8:3a:b9:06:4c:07:c1:d9:
78:73:92:7f:bd:e5:d6:57:ff:c7:12:6c:8d:a9:21:
e6:d1:06:0d:3d:32:86:24:cb:91:39:69:59:e0:fa:
27:e5:db:4d:58:71:a2:5f:f6:e4:4b:0d:db:df:51:
a9:6c:df:70:2a:be:71:ad:9d:ef:96:14:76:13:95:
60:b4:8e:f9:c5:8f:df:d2:24:1f:f7:b1:91:a7:65:
b9:30:13:62:2f:56:cd:25:b6:c6:f0:ca:d1:30:b0:
89:57:76:7b:a3:29:49:16:90:4d:bb:76:ef:eb:9b:
fd:f4:b3:a4:c7:e3:17:5c:32:b1:87:bc:dd:b3:d5:
a2:0b:7c:2b:c0:86:4a:70:39:2b:63:5b:d1:83:ec:
33:83:93:88:6b:c0:e2:81:af:35:46:e5:63:e1:a1:
a0:59:ec:36:d8:27:99:5c:84:13:8a:85:47:ad:18:
46:05:d3:36:b5:7e:36:7a:e4:c6:f0:1c:2f:7e:e0:
68:0e:84:a0:a6:08:11:bb:a9:f4:51:bb:99:81:5d:
ae:e6:65:98:cf:2d:1c:03:4b:ad:cc:b0:fe:d1:ce:
bf:78:f0:81:93:dd:ea:f9:b1:ad:21:31:97:15:19:
fe:5f:f8:1d:5b:ff:d7:db:87:40:d2:71:15:26:96:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:CB:64:6F:E3:0D:E7:E7:F0:ED:96:7C:3E:17:D9:17:D8:5C:B5
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:0f:df:79:d7:0f:d3:ef:67:a7:4c:78:28:c6:5a:d1:51:
61:64:f6:3e:56:0d:ec:2f:ef:af:a1:14:23:4e:75:c9:de:15:
8d:92:0b:a2:dd:03:83:44:ce:a4:34:ed:5e:8b:28:fa:61:f1:
cf:52:f2:bd:8a:6e:94:53:0a:25:fc:47:f8:42:49:e1:b4:e5:
69:09:4a:bd:cd:a3:2e:68:33:87:ce:da:64:07:b1:78:1e:d2:
1b:45:82:84:cb:27:fb:1d:29:b4:7b:f9:d3:ab:15:fb:b3:8f:
96:e9:a8:86:c9:2d:54:b8:99:bd:a4:dc:80:56:03:9b:c1:ff:
35:f7:b4:4b:e3:b0:03:19:dc:cd:c9:83:04:9d:5b:0f:c0:c7:
b8:9d:3b:48:e6:f3:1f:f0:69:34:6d:a2:39:fb:b2:55:49:60:
e7:fa:a6:d5:f4:19:ae:4c:a2:2f:ef:f2:4a:45:aa:fc:a0:68:
c2:b1:f5:ae:27:df:10:8b:d6:a4:0c:b2:ea:6c:d0:42:25:ec:
5c:46:52:e5:f1:61:d0:ab:ec:3c:7c:6c:9a:63:50:a4:67:7a:
75:be:fc:79:d3:88:14:5a:3f:3e:6f:85:8e:95:b7:2f:8d:88:
94:24:9c:3b:4d:d9:ea:7c:c0:37:ec:1e:77:18:b4:5e:db:50:
f6:6f:3e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2tlPErctem8o4ZreZMJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjYwNzI0MDIwMTA2WhcNMjYwNzI1MDIwMTA2WjAzMTEwLwYDVQQD
EygwMjVhY2I2NDZmZTMwZGU3ZTdmMGVkOTY3YzNlMTdkOTE3ZDg1Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/BwVJOyDq5BkwHwdl4c5J/veXW
V//HEmyNqSHm0QYNPTKGJMuROWlZ4Pon5dtNWHGiX/bkSw3b31GpbN9wKr5xrZ3v
lhR2E5VgtI75xY/f0iQf97GRp2W5MBNiL1bNJbbG8MrRMLCJV3Z7oylJFpBNu3bv
65v99LOkx+MXXDKxh7zds9WiC3wrwIZKcDkrY1vRg+wzg5OIa8Diga81RuVj4aGg
Wew22CeZXIQTioVHrRhGBdM2tX42euTG8BwvfuBoDoSgpggRu6n0UbuZgV2u5mWY
zy0cA0utzLD+0c6/ePCBk93q+bGtITGXFRn+X/gdW//X24dA0nEVJpZdXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJay2Rv4w3n5/Dtlnw+F9kX2Fy1MB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCIP33nX
D9PvZ6dMeCjGWtFRYWT2PlYN7C/vr6EUI051yd4VjZILot0Dg0TOpDTtXoso+mHx
z1LyvYpulFMKJfxH+EJJ4bTlaQlKvc2jLmgzh87aZAexeB7SG0WChMsn+x0ptHv5
06sV+7OPlumohsktVLiZvaTcgFYDm8H/Nfe0S+OwAxnczcmDBJ1bD8DHuJ07SObz
H/BpNG2iOfuyVUlg5/qm1fQZrkyiL+/ySkWq/KBowrH1riffEIvWpAyy6mzQQiXs
XEZS5fFh0KvsPHxsmmNQpGd6db78edOIFFo/Pm+FjpW3L42IlCScO03Z6nzAN+we
dxi0XttQ9m8+qA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:11 2026 by rpki-client