
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier: mBbQqAnxuf8JLoqIlacz0a/BEU1/KF5luFoeJbjbPR4=
Subject key identifier: 91:E7:94:D5:15:44:C7:88:F0:20:92:5E:01:B3:52:C3:B1:C8:D0:09
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019F92117299D55A1FEE1381D4E23B8B568E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number: 0FDA
Signing time: Fri 24 Jul 2026 03:00:44 +0000
Manifest this update: Fri 24 Jul 2026 03:00:44 +0000
Manifest next update: Sat 25 Jul 2026 03:00:44 +0000
Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: CVH0e++ZI5gH2mOCt+awZFkqgwLFuh5i47epJBe0fYI=)
23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:72:99:d5:5a:1f:ee:13:81:d4:e2:3b:8b:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 24 03:00:44 2026 GMT
Not After : Jul 25 03:00:44 2026 GMT
Subject: CN=91e794d51544c788f020925e01b352c3b1c8d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:75:a3:65:4a:5e:bf:18:e2:d3:a1:f7:a1:
c2:3a:e2:ce:41:71:e9:38:5d:98:19:eb:53:45:60:
78:22:a0:9b:84:bf:56:7a:a8:85:e2:33:30:79:c6:
2c:99:8b:70:16:c5:7e:0b:a6:71:cb:c2:92:a6:18:
90:bc:2c:35:64:13:bd:89:71:3f:62:6e:62:b8:13:
3f:ab:63:05:cf:44:da:06:c1:c9:11:37:fd:bd:e8:
50:48:d3:d1:26:54:a7:38:d5:7b:31:d5:7a:02:9b:
11:af:21:6f:0b:c0:52:04:aa:6e:94:91:a5:30:8b:
9a:fa:12:7f:e5:cf:78:9e:4a:ca:41:8e:cb:fc:81:
1b:b7:17:2a:6c:c3:f7:4c:46:42:d0:38:d2:2f:5c:
5b:85:2b:6a:ca:44:a9:29:e6:29:d7:64:ce:47:9b:
47:13:05:00:d0:7d:03:94:4d:27:62:63:10:45:cb:
2d:3a:2f:ad:f8:b7:c6:d1:be:2b:d8:b0:1d:3a:6b:
9b:7b:48:37:00:36:d3:4d:02:ed:4e:77:74:cd:3d:
c8:6a:78:8b:9b:c3:7a:07:0c:b8:68:09:fb:cf:c2:
c2:fa:15:ec:fe:54:d2:2e:1b:ed:ad:27:b4:54:50:
e9:89:13:ce:61:e4:17:5b:a9:66:d2:5f:77:bb:01:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:94:D5:15:44:C7:88:F0:20:92:5E:01:B3:52:C3:B1:C8:D0:09
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3b:3c:7b:1f:57:a7:23:5d:f3:a3:f1:ea:d9:a7:1e:cc:cb:
fe:50:0f:ee:26:08:66:80:ba:ae:26:68:dd:a2:d9:49:02:d2:
83:32:81:c1:00:15:55:52:7a:d3:88:53:1a:d7:d1:40:09:90:
ca:12:85:83:4f:9b:79:9d:d7:e8:d9:a7:c1:1e:88:5c:b0:6a:
69:ca:88:4f:a9:82:90:d5:6e:bd:52:33:50:13:fd:5c:73:3d:
e6:46:10:4f:b3:44:08:c6:d5:b8:e1:ab:3a:b9:7f:2c:6b:f0:
6c:e1:99:d4:ec:1c:76:52:37:98:92:bd:88:29:c6:f4:77:d2:
4e:59:94:e9:f8:24:cb:01:49:79:dd:30:32:71:e2:2f:90:ab:
36:dc:2f:21:f2:f6:a6:b8:25:28:8c:57:74:8a:98:75:23:e4:
07:22:89:bd:f1:6e:6e:57:b7:b3:7c:f8:b5:04:43:54:f9:76:
e1:c6:bc:47:91:bb:42:5f:74:8e:3a:52:2c:1d:31:8b:0a:78:
85:f6:59:d2:1b:b2:58:41:d0:8c:ea:22:0e:75:60:b8:65:2b:
93:3a:ce:34:f6:de:f9:f2:a3:37:b1:99:bb:a7:c1:d4:92:20:
2c:bb:82:27:ec:f9:72:83:a8:43:c4:28:af:5d:a6:94:76:4f:
3b:7b:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:59 2026 by rpki-client