Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: UNERBigBrw6uuaBT4NpV8l6xHaDG28b0MxFMlkVpOhM=
Subject key identifier: C2:18:83:0B:8F:C8:5F:C4:47:20:1B:48:D6:3C:04:BB:05:E2:2A:85
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01A0D75FFB2CA28FA9FFD93AC2A7510BD488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0F72
Signing time: Fri 25 Sep 2026 07:03:06 +0000
Manifest this update: Fri 25 Sep 2026 07:03:06 +0000
Manifest next update: Sat 26 Sep 2026 07:03:06 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: RPWnVWCn1hOZyV1WDyNaXfwbykA8leWGFyqQe1wIa3o=)
2: vzj6rF0z62czOMRE3LL5w-joOaE.asa (hash: aMRvdtrb5tp1XwhqqIQw7J458t/ccfLhiI6qcMyDJPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:fb:2c:a2:8f:a9:ff:d9:3a:c2:a7:51:0b:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Sep 25 07:03:06 2026 GMT
Not After : Sep 26 07:03:06 2026 GMT
Subject: CN=c218830b8fc85fc447201b48d63c04bb05e22a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:7b:5b:e9:c1:5e:e4:4b:26:11:70:da:d2:
c3:eb:1a:ff:dc:28:3a:6f:27:77:aa:d6:49:32:11:
55:36:0e:b5:ab:69:d7:f9:4b:6d:88:54:04:f6:c5:
83:2f:14:21:9d:83:e0:37:db:c4:d1:57:f9:a3:6f:
c6:0f:b0:04:04:6d:03:81:d8:0f:88:54:ff:9f:65:
ef:54:76:49:b8:0a:4d:35:af:21:0d:bc:ba:a0:31:
69:8a:b2:97:87:38:5f:04:04:0b:48:38:b7:cc:af:
c9:c3:fd:f0:4e:83:62:1a:73:92:53:cb:39:28:08:
1b:ff:fe:a0:30:ca:36:4d:51:00:ef:6a:39:ba:cc:
cb:e8:b1:f4:5a:b9:3e:9a:c0:5d:06:dc:78:47:97:
97:b2:e2:5c:6c:61:d6:62:4b:44:16:33:40:92:83:
bc:36:ae:4f:f9:07:c2:ce:de:45:be:f3:60:04:ac:
ad:a6:97:25:ee:81:0a:0d:0b:dc:e1:3e:b9:fa:5c:
98:78:b5:18:53:bf:e6:07:08:cd:33:da:01:61:6a:
98:da:ab:27:d6:c1:ae:2a:86:d0:47:70:e0:f4:ec:
13:db:93:52:e3:49:70:04:d5:ca:05:59:b5:70:48:
bf:5d:2e:73:a7:ad:95:c9:25:c9:2a:d7:db:e1:e8:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:83:0B:8F:C8:5F:C4:47:20:1B:48:D6:3C:04:BB:05:E2:2A:85
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b3:47:21:63:8c:28:60:45:73:f9:9e:82:26:e5:2d:0d:8e:
dd:52:5c:e2:6b:64:d5:ec:b8:5e:f7:d4:b1:a8:82:4b:ef:d3:
e3:59:5c:21:1b:60:ea:b7:1f:4a:91:d7:aa:27:ed:64:2b:37:
38:96:26:78:15:51:dd:b3:59:d8:05:fc:4e:b5:e4:68:15:79:
96:04:4c:9e:d6:d7:9f:6a:36:fb:a5:4e:8e:63:9f:0a:75:4b:
70:af:ce:c6:72:9e:8e:77:ac:e7:d0:a6:e9:e2:94:05:f8:74:
39:a2:11:07:21:07:98:b4:a5:37:4c:b3:d4:27:28:4d:ae:c7:
e8:5d:fb:07:a8:c3:10:20:9f:84:e8:1d:72:82:cc:bb:33:60:
c8:e5:fd:6c:90:26:1f:d4:34:b0:e7:9c:12:e3:2b:e1:20:bb:
bb:b0:7f:95:c2:55:a2:a8:cc:7d:64:43:9a:4d:99:6e:2a:a9:
db:2c:20:f0:18:fc:4d:1a:9f:87:7a:88:c0:3a:68:00:22:63:
6e:ff:3f:4f:83:82:f3:fb:de:18:60:9c:89:c7:13:8b:e1:87:
14:1f:77:1d:f3:7c:dd:4b:8a:2b:87:32:38:78:4e:7c:a1:63:
11:21:2b:a5:da:5c:cb:9f:8a:8b:82:95:68:62:1c:54:9a:f6:
ea:dd:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:40:13 2026 by rpki-client