Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: 073bXSW6Ht/I3nztqwpusTq1JasJW2URYchGtG1F+AQ=
Subject key identifier: 97:2A:3B:2F:95:82:07:14:94:8C:23:3C:BF:72:37:62:79:A2:64:F3
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019D25BA4A7023432CB305E1E848050E10CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 1626
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: JusSBFjAYrXOMZwVWX9tw1PM1ZteoGsZMy/1Vi7609g=)
2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4a:70:23:43:2c:b3:05:e1:e8:48:05:0e:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=972a3b2f95820714948c233cbf72376279a264f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:11:ff:9e:1d:f0:db:27:1c:2f:95:f1:24:
b8:6e:24:02:b4:69:a9:60:85:8a:18:9b:de:7d:88:
de:81:0d:49:ac:52:bb:b0:de:36:4e:b1:60:3b:ae:
9c:28:3f:2d:5a:8b:ba:b9:4b:0a:a2:56:9b:dc:89:
19:1d:eb:f6:df:63:b1:bf:ce:ab:8e:9d:13:25:58:
df:80:f5:90:0d:bb:44:b5:7b:2e:e6:c9:4a:22:8c:
76:b5:4d:74:3c:a3:5b:a5:44:57:cf:26:98:f8:78:
21:7c:ae:a7:c0:50:a6:88:bc:be:07:6e:f3:70:00:
23:f1:e8:4d:01:3f:e3:6b:cf:f6:7c:83:0b:ae:1a:
39:3d:98:4a:41:ad:25:a9:80:b7:e5:e9:7c:4b:eb:
d0:0b:e1:09:55:7d:19:36:c9:fd:0d:ee:ad:df:8d:
26:29:db:5f:15:5d:18:4d:f4:1b:bb:aa:27:a3:11:
12:6e:a8:11:8d:e6:df:4b:c2:95:b1:a4:d9:84:e3:
c3:0f:0d:81:00:f8:5e:39:df:ba:e4:e6:2c:8e:68:
17:60:61:81:ac:bf:0e:5b:23:fe:e1:13:5f:50:5c:
4c:18:e6:4c:82:74:81:9c:f3:68:76:f0:72:4c:b6:
fe:50:c6:72:dd:c0:67:01:9b:0d:79:0d:11:d3:08:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:3B:2F:95:82:07:14:94:8C:23:3C:BF:72:37:62:79:A2:64:F3
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:59:47:17:dd:90:aa:67:dc:45:19:c5:68:ef:8e:d0:12:
77:31:0b:fa:c2:d0:dd:74:8a:8d:82:b0:09:b0:fa:a9:16:ac:
5e:d5:62:9a:ad:62:f5:a7:d7:3b:d3:02:fd:b7:0b:88:b4:5a:
b4:90:2c:7d:12:56:be:e7:8f:f6:0d:de:79:dc:40:a1:c4:61:
9f:18:fa:18:b2:b8:20:05:de:2e:33:b9:26:b2:32:bb:0b:cb:
b7:2d:b5:18:67:32:8f:d0:13:b0:12:d4:a8:a4:59:af:a5:4f:
ac:0a:f5:0e:0f:8d:59:75:6a:91:81:43:5d:2b:95:d7:3e:7a:
97:4c:14:ab:76:93:2d:90:6e:0d:b9:f6:ea:c7:71:0b:60:94:
85:8c:c1:d0:6f:63:b9:2c:30:b0:cc:d2:1e:43:3b:1a:38:c7:
4a:17:4a:e2:53:c2:76:b6:86:6a:24:b8:a9:69:34:94:49:2b:
5b:bb:a2:d1:79:c0:45:ac:db:9c:16:d8:44:4d:41:12:f8:e0:
30:57:ec:77:4b:c7:50:6c:e2:ec:9e:5d:68:aa:77:90:af:0b:
df:e7:e5:8f:5b:29:d3:61:fb:3b:73:99:e5:28:0b:1d:27:35:
b3:2c:f9:fb:0e:a9:e1:fe:1f:9a:64:e8:cf:f7:9f:45:11:6b:
43:57:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:13 2026 by rpki-client