Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: BeSXAHBz7mXYj3RRQ+LBhLtoVIHipuOObvFgeEiU46s=
Subject key identifier: 00:3A:8A:CD:6F:7F:DF:F3:E3:59:C6:9A:0E:D7:87:A7:D5:BD:DF:0E
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019F8F1028556C3C1BC3277E8644A45C1735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0EC8
Signing time: Thu 23 Jul 2026 13:00:28 +0000
Manifest this update: Thu 23 Jul 2026 13:00:28 +0000
Manifest next update: Fri 24 Jul 2026 13:00:28 +0000
Files and hashes: 1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: VHVrTNxj5KCZsqHdulGsXuVBPKcLes6S6KTlgijWzQg=)
2: vzj6rF0z62czOMRE3LL5w-joOaE.asa (hash: aMRvdtrb5tp1XwhqqIQw7J458t/ccfLhiI6qcMyDJPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:28:55:6c:3c:1b:c3:27:7e:86:44:a4:5c:17:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jul 23 13:00:28 2026 GMT
Not After : Jul 24 13:00:28 2026 GMT
Subject: CN=003a8acd6f7fdff3e359c69a0ed787a7d5bddf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:52:2a:77:11:73:1d:d2:b0:f6:6c:f4:da:
92:fd:96:e8:13:19:f9:83:b6:1f:3d:87:93:90:67:
4e:80:60:92:82:c4:d7:ff:31:b8:5d:02:d6:93:af:
d1:af:bf:11:67:9e:6c:75:a9:4e:7d:ab:66:30:79:
61:47:57:d1:67:44:ef:1e:4f:54:8e:0a:53:d1:be:
ab:a9:86:f9:a0:ba:a7:1d:0d:38:9e:c2:a4:91:69:
ef:19:67:f9:e8:02:44:a2:0d:09:a4:b4:7c:37:f6:
73:d5:54:b7:65:a7:ae:6d:b6:cb:b7:27:3a:b9:9a:
2f:28:e7:64:0c:b1:95:78:cb:f4:12:93:86:47:83:
17:2b:ac:f8:77:39:f8:2e:46:79:0a:31:95:3b:01:
1f:f4:b7:f8:f6:71:fe:16:5e:d2:e9:49:27:31:1d:
98:2d:15:f9:b2:f4:e9:65:e8:66:14:83:a7:dc:84:
8c:c8:5d:f7:4f:29:9f:38:57:ec:56:bc:76:b0:a1:
a1:d5:84:bf:10:b5:22:1f:63:be:4d:8b:0c:03:0c:
d0:11:c6:8a:e2:3e:41:02:8b:b4:7e:74:08:90:79:
44:6a:57:5b:d1:69:8a:1f:08:2c:4e:41:61:e0:8d:
70:73:4c:d3:3f:6e:65:3a:08:dc:75:af:07:41:75:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:8A:CD:6F:7F:DF:F3:E3:59:C6:9A:0E:D7:87:A7:D5:BD:DF:0E
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3d:61:67:48:ac:34:06:5e:b1:c8:70:08:0d:df:0b:1a:e5:
c2:9a:80:2d:1f:0f:c8:a3:cd:18:fc:61:f0:cf:1e:33:c5:48:
c4:53:24:d5:ce:fc:84:47:58:08:fc:b1:0d:f0:13:e7:ed:4e:
e8:85:3d:9b:84:ca:74:5c:0e:3c:46:1d:75:f3:95:cb:2d:0a:
4d:90:3a:9d:ba:4f:24:52:93:65:4d:ae:8f:1a:ac:23:e8:8b:
27:fe:c2:0f:69:d8:26:ef:24:b2:77:f1:33:87:61:b7:27:87:
35:02:76:e3:3f:21:15:dd:f0:58:58:4c:19:9f:f2:ae:ca:5c:
b3:09:3f:d4:3f:75:9c:1a:0e:20:79:03:8d:52:8f:43:8d:73:
84:a7:7e:8f:7c:0c:f3:2b:32:81:b0:96:19:6a:23:50:7f:71:
eb:e4:ed:e5:c0:e6:6a:11:ee:8a:d4:41:a4:6b:9e:ef:20:d6:
6e:2c:84:2e:50:a0:bf:3f:8d:e9:c5:e2:ff:84:c2:c9:06:f0:
8f:56:4b:b1:f0:71:f1:d5:6d:46:77:d2:b9:db:f2:8d:77:c1:
45:ba:6f:23:2c:69:a8:48:51:38:98:5b:1d:3c:d6:eb:1b:e7:
8f:13:99:e4:60:d4:8f:2a:8b:0c:e6:78:e4:af:be:62:91:7d:
9c:e2:ba:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:06 2026 by rpki-client