Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: pVzBGFfxq9DvMqYituqMc2dljbPcGQGdXaLTNDBqmlQ=
Subject key identifier: D9:91:E2:F5:16:20:D7:6B:E8:F6:A6:BA:85:8B:1A:E3:6C:49:3F:F4
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 019F916DA0C2D32A051B4E1CC04FBD99E7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 191A
Signing time: Fri 24 Jul 2026 00:01:48 +0000
Manifest this update: Fri 24 Jul 2026 00:01:48 +0000
Manifest next update: Sat 25 Jul 2026 00:01:48 +0000
Files and hashes: 1: 1-PobHP3upTno8bW2i6EzwJRlSdc.roa (hash: k3oArZicPTjQ+oty+7iOYo7+c4L7ieRd9ba75n0lEZ0=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: 8IsWT7Chg8LQr7WqTvwox01xpblBZ5i41w+veQS16Lo=)
3: oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa (hash: Ek0IIB7EUCOuxacTHXe38ILHEJXneuaGMfbJ/YMGwwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a0:c2:d3:2a:05:1b:4e:1c:c0:4f:bd:99:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jul 24 00:01:48 2026 GMT
Not After : Jul 25 00:01:48 2026 GMT
Subject: CN=d991e2f51620d76be8f6a6ba858b1ae36c493ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:5c:94:2c:4b:78:b5:6b:c4:0e:b8:ab:2e:
9d:6a:9d:40:48:6f:4a:b1:56:ac:ec:aa:11:67:c9:
97:e6:46:e7:c0:c6:92:33:d5:d5:a2:29:09:5f:a2:
06:94:7c:23:05:97:b5:eb:18:00:1f:6c:9d:4d:7e:
06:7b:f7:29:2b:81:38:ef:c6:3c:2f:72:95:84:c7:
93:e9:d2:f8:c1:d9:1a:ed:f4:3a:3d:04:1c:3d:db:
0d:ff:df:8b:6e:31:e1:0f:28:68:1b:42:f0:eb:20:
ad:74:4b:05:4f:49:61:f5:8d:77:20:a0:e1:00:99:
55:61:a0:e3:b3:f7:23:5c:ee:66:80:ca:a5:b6:7c:
85:9a:a8:fe:8a:1f:5c:dd:17:99:96:36:10:4f:72:
6a:6b:fb:af:c3:2f:5a:f2:22:17:7e:e9:b5:7d:20:
b2:62:3c:e7:12:47:27:81:9c:00:bb:cb:7c:8f:49:
85:d7:10:40:29:22:87:79:c9:2c:d2:bb:ad:23:c7:
70:9d:74:ed:f1:62:79:e1:4c:b8:a4:b7:f7:c1:93:
a2:7c:e9:84:6d:46:86:27:9f:58:15:d7:3e:ab:26:
4d:4a:60:17:c4:bb:25:e3:e1:7a:85:ff:3d:a8:06:
2f:51:af:04:06:06:76:74:6d:21:f3:a3:22:84:22:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:E2:F5:16:20:D7:6B:E8:F6:A6:BA:85:8B:1A:E3:6C:49:3F:F4
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:61:fd:06:8a:58:b4:5e:6d:ca:75:99:f5:0e:62:bc:75:
60:02:a9:01:b4:4c:2e:05:60:ca:59:ce:5b:5a:92:a0:5d:34:
6b:5d:f1:9f:f7:e8:ff:42:bc:91:d4:f7:16:bb:52:c1:c3:1c:
49:57:57:ba:e1:e2:a6:c6:b8:09:00:7e:a8:62:b3:39:cc:48:
8a:60:fe:fd:f7:9d:56:57:ab:cd:03:e1:94:85:7c:0e:6f:3c:
8a:67:f9:4b:ac:e4:d2:9e:08:ef:25:33:ce:90:c5:73:5f:87:
ac:60:14:ad:a2:09:e4:f5:91:c1:c0:c4:a0:64:a5:06:67:82:
d9:78:d5:2f:55:3c:0f:9c:9e:a7:4d:97:30:f5:c3:f2:15:d3:
2f:a5:86:57:93:d3:7f:41:a1:a0:a8:f2:dc:d6:1b:ae:33:f6:
77:7f:2c:d8:c7:55:a7:fe:4b:4a:d8:4a:4c:2c:65:61:aa:4e:
da:4f:96:3c:b5:56:e0:2b:0c:10:bd:b9:22:44:a5:0a:35:04:
31:a7:53:e1:63:f3:e0:73:10:76:df:bb:22:e3:11:26:2d:46:
bc:f8:f5:41:84:ce:58:84:69:d3:b8:d5:38:6f:6a:09:ee:fc:
46:27:fa:6a:a0:b3:6c:3c:63:9b:80:81:d5:09:19:50:8d:d3:
a5:6a:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:47 2026 by rpki-client