Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: X8d7JH8DQEAw9ZDJaIEHE4Q5ofs2o9kXedSoNdDNQec=
Subject key identifier: 16:D9:F3:BF:53:94:27:4A:F1:7E:4B:91:D2:08:75:DF:7A:53:E6:85
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 019D2703CB88CCA74F4C4BFCB05B30D2C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 151B
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 3VmgLljbiHi3NN9m178+fUO+ZwXNFAqEExEe9ZuR0yA=)
2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cb:88:cc:a7:4f:4c:4b:fc:b0:5b:30:d2:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=16d9f3bf5394274af17e4b91d20875df7a53e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:83:cf:8d:4e:e2:4c:0f:eb:3e:2a:aa:d5:
8c:21:06:08:7f:94:e0:17:81:12:7f:75:0d:af:09:
05:0a:d0:2b:c8:69:e8:8a:f1:82:68:31:5d:22:83:
2d:13:f2:db:36:94:a3:21:04:97:e0:8e:48:dd:0b:
e7:2d:3c:45:1c:98:72:f4:32:eb:7b:cf:69:a3:82:
ac:e1:1f:af:d2:14:2e:91:05:06:1d:4a:d6:9e:00:
6a:f8:47:f4:20:a4:67:a7:4e:37:c5:17:e2:5d:72:
a9:3b:84:4d:c0:08:b8:f2:7d:17:44:4a:cd:c4:13:
19:9f:8a:10:7e:25:e6:e4:07:41:5a:e8:12:32:b9:
00:ff:7f:99:38:37:fa:78:cc:9f:35:d6:72:0c:52:
af:33:58:81:9a:0a:65:eb:2e:08:be:5a:32:1b:d2:
b6:7b:b8:e0:c0:e1:4d:e9:9a:6c:fe:48:45:8c:65:
88:db:d9:37:09:f4:16:9a:80:33:48:1f:2a:4f:06:
6c:03:96:70:1d:dc:1b:2b:c7:a8:5e:c7:28:1a:9f:
70:8c:ec:b5:c8:14:ff:1b:73:4d:fb:dc:79:2d:22:
3e:f5:42:e3:fd:df:a2:99:e4:28:dc:c0:4c:4a:06:
e3:fd:64:93:59:df:d7:c0:d6:89:4d:f5:9f:d3:8f:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:F3:BF:53:94:27:4A:F1:7E:4B:91:D2:08:75:DF:7A:53:E6:85
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:02:9e:50:31:40:a3:86:32:40:91:74:b0:8c:cb:88:cb:
dc:e3:12:b4:e3:17:af:19:61:85:32:17:e6:46:14:d4:d0:65:
0b:c0:e0:15:2a:ff:c4:a1:c4:2b:86:24:3a:1d:9d:72:7f:c6:
91:71:41:ac:22:5b:dd:e8:df:39:5e:88:73:a2:dd:2a:8e:0b:
7c:7f:f4:46:fa:67:50:1d:35:a5:7d:ca:2f:51:13:b6:a4:cf:
90:03:ee:e3:a3:56:3f:28:27:c9:12:e4:0c:fa:b8:09:f7:0d:
d3:5d:13:68:df:77:20:3d:42:6f:2a:47:3e:3e:19:17:3f:d9:
24:3a:c2:9d:0c:ba:65:61:f9:1b:a1:ed:7c:93:74:99:a7:7c:
02:e9:ef:56:6f:da:44:a7:7f:c0:b0:d6:f9:66:44:63:c4:df:
22:80:7e:3e:ab:d6:b6:e7:af:b5:3c:17:a1:91:a4:fe:59:6a:
2f:37:1c:57:65:ae:da:06:95:ca:d5:d1:f6:fe:b5:0c:40:e0:
1c:b3:31:74:f9:18:d4:25:7d:7d:49:e1:fb:63:9d:1b:12:e8:
6d:02:b0:06:c4:37:98:a3:aa:d5:97:0b:f4:97:31:48:99:bd:
1a:cb:c9:fe:f0:d9:0a:4e:77:f4:48:5c:b8:0d:3d:f9:28:c5:
12:f7:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:31 2026 by rpki-client