Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: inhxQC+exE7EVKMfOcD8MNul8qvmBy09/HfcLFpnwHs=
Subject key identifier: FC:33:FD:DB:CF:56:6D:5A:5C:18:83:B0:54:26:EC:D7:3A:DC:64:60
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019D27A8C4BC033E459D104A5938071CC358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0D86
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: ujXaliSBeZooDatEO+/WNWzshCNYpUC45eFqpAwebOg=)
2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c4:bc:03:3e:45:9d:10:4a:59:38:07:1c:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=fc33fddbcf566d5a5c1883b05426ecd73adc6460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:56:dc:1d:c8:63:f9:42:7b:ff:4a:7f:77:
90:0f:90:bc:a0:99:04:fd:c8:97:c1:77:55:2f:34:
04:5f:22:b2:d8:41:7d:ad:d5:fe:1a:f0:2e:22:e7:
5c:db:d9:38:07:a2:f9:69:33:68:56:a1:51:9e:f5:
b0:e3:22:54:8d:e5:8b:ec:ca:d9:0e:ba:0b:0c:db:
75:e6:97:86:33:6f:fe:84:89:15:8c:6b:7f:7c:8a:
9a:b0:51:b8:e2:be:00:d1:83:cf:91:2d:b6:d6:05:
a4:48:19:fe:53:38:b5:59:02:28:33:9e:f8:99:59:
3a:7a:fe:51:2e:b1:9a:83:04:45:94:2a:3f:7e:dd:
3a:c0:15:cb:90:4a:e8:fd:64:fa:14:f6:cf:cc:44:
99:7f:f3:12:2a:03:c0:b4:bc:7a:92:0d:7f:28:8c:
33:e4:5d:4b:64:b7:b0:6e:5e:e7:7d:92:0c:22:fb:
5d:7f:7b:bc:6a:e3:86:e3:67:9a:1e:05:80:9e:3a:
33:b5:c6:a8:a3:1c:70:07:e1:40:b4:ba:dc:56:61:
76:6e:f6:c6:dc:a3:04:10:a3:ed:6f:c1:bd:0c:50:
30:e6:17:01:52:be:15:80:86:af:05:ed:a0:0f:a9:
cd:73:1f:d5:5f:a0:ca:ff:8f:aa:39:34:6a:e3:de:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:FD:DB:CF:56:6D:5A:5C:18:83:B0:54:26:EC:D7:3A:DC:64:60
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:ce:68:4f:0d:bf:be:62:93:cf:41:3b:be:d9:7f:37:38:
ac:4d:0c:f9:c5:8f:82:5c:a0:0e:1c:33:cd:37:72:60:4e:b5:
6c:23:eb:8f:c1:54:4f:05:4d:87:29:37:0b:9f:41:aa:64:ee:
dd:77:b5:d6:a0:49:05:22:1f:3b:68:aa:0e:44:f8:63:14:ea:
a6:65:43:91:4c:b1:7a:f5:1f:f0:91:71:bd:c8:df:15:4b:88:
e4:7d:1e:4f:21:73:1d:d2:78:cb:16:fe:52:f4:c4:bb:f5:bc:
36:b9:ef:1a:49:35:bf:b5:7e:e3:8f:df:f1:1c:86:f5:73:0f:
35:31:85:f2:16:4e:5c:09:07:c6:c3:63:2b:bd:f2:ad:ab:b2:
3f:6c:73:94:32:67:ad:b9:ff:b0:42:58:f5:f6:bf:82:c5:a7:
3a:15:99:f4:1b:43:20:9f:84:4a:51:8f:77:c9:70:55:56:06:
07:4f:b1:7e:d8:2e:3a:e1:f4:e1:99:02:90:50:46:bd:bf:c1:
cc:c5:ee:73:21:24:97:35:49:4e:3a:0f:37:cf:13:44:0c:e4:
03:76:91:66:87:c4:11:41:65:21:94:b4:b1:4a:43:dd:7b:1e:
40:74:64:d2:fc:99:f7:3c:ad:8b:92:6a:f5:a8:e9:80:ac:2b:
24:b6:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:37 2026 by rpki-client