
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier: 30GUM4mfHzw764GIoJ/0OCQKJqnUuPLegjBzFn1GWro=
Subject key identifier: 26:E4:9E:6D:F1:80:EA:9C:32:7A:56:F7:4A:DF:16:6B:19:CE:68:2C
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01A0EBC138311F8F8ABA8528CFE4562582E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number: 108D
Signing time: Tue 29 Sep 2026 06:01:43 +0000
Manifest this update: Tue 29 Sep 2026 06:01:43 +0000
Manifest next update: Wed 30 Sep 2026 06:01:43 +0000
Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: CL5NN/8KUu7+LRZSrHpLJahXDY9vrb596J9b2hihEnE=)
23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c1:38:31:1f:8f:8a:ba:85:28:cf:e4:56:25:82:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Sep 29 06:01:43 2026 GMT
Not After : Sep 30 06:01:43 2026 GMT
Subject: CN=26e49e6df180ea9c327a56f74adf166b19ce682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:24:d2:df:22:c6:e9:bf:8f:0b:18:b4:f1:
0a:e7:f0:20:b5:1d:5c:15:ec:c8:e7:50:3b:02:38:
b1:0a:f3:45:aa:e6:39:9c:25:cf:e3:a5:d0:ae:d0:
92:9a:7a:9d:6b:a5:b4:c5:c9:32:e6:b6:63:5f:c3:
6e:81:51:04:03:e5:57:26:01:08:fd:73:ba:0a:fc:
ac:f4:c3:e5:fa:85:3c:7f:e7:4f:11:73:69:3c:c3:
53:4f:17:a5:30:11:be:6d:59:ce:60:34:97:06:bc:
b8:49:0c:4c:9c:e9:28:65:ed:2a:fe:6d:7d:b9:0f:
c6:a9:7d:0f:63:e8:9b:79:cb:8e:36:40:69:f7:6f:
c4:0e:43:1d:2c:4f:7c:70:dd:98:4c:02:7d:9b:cf:
97:81:c9:c1:d6:81:69:cc:c0:9b:6d:ea:6b:3c:d9:
5e:ae:8f:b7:97:61:c6:b5:cf:6e:ea:b9:d5:10:06:
a0:52:ab:94:71:d2:3e:3f:e8:2b:6f:f3:64:bf:6c:
5c:88:ee:4e:da:bf:61:2f:b8:0c:5f:0e:b0:ea:9b:
9c:8b:eb:71:8b:3b:19:58:97:7d:bf:0f:31:9f:8b:
6b:48:45:f9:0f:0e:55:58:38:fd:df:b9:df:77:d4:
43:dd:12:69:d8:aa:40:58:b2:9c:91:1d:f6:0f:72:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:9E:6D:F1:80:EA:9C:32:7A:56:F7:4A:DF:16:6B:19:CE:68:2C
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:03:fb:de:d9:25:f4:0d:ac:26:e7:40:91:ac:2a:d5:6e:
d2:33:63:14:f6:69:7e:5c:82:46:af:12:e5:ec:aa:43:49:e1:
8d:f3:73:8f:7c:99:3b:9e:4d:bb:0d:a9:f5:f4:6c:a3:cf:51:
ee:1e:e5:81:b4:cc:b3:f4:24:a0:e4:a8:99:ba:ec:27:e7:e0:
c0:19:57:48:f3:e1:6e:4b:2e:86:d4:40:78:4c:61:4e:77:b3:
56:7d:8b:81:53:f7:d2:ab:b3:fb:52:59:af:76:7a:57:2e:58:
35:f9:2d:46:bf:a8:6a:81:da:64:06:26:25:16:0e:c0:a0:a3:
71:b5:9a:ab:40:14:85:ee:49:cc:a5:7b:da:c0:9e:44:b2:03:
ad:44:1e:63:ca:ea:36:a1:47:ed:3f:10:21:18:83:f4:e9:f7:
ec:ed:9a:de:a2:fd:2f:77:b7:ab:e9:da:63:8f:8f:6a:61:3e:
4f:23:f4:69:de:f3:b5:ba:46:b2:92:21:8f:8f:50:ab:a2:e7:
d3:32:42:40:f1:e1:23:d8:bb:2c:e5:6d:15:0d:9e:30:3d:3b:
62:a2:66:d2:c6:f6:ca:83:2c:93:7a:bb:a0:6b:f4:57:90:ff:
c5:21:1b:5c:af:d3:06:d1:8d:82:36:47:fb:11:96:38:f0:4f:
24:f1:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:57:06 2026 by rpki-client