Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: HS2vDOl9hZpLqf7Vvi91NuUlETtwQB5yXkYUEpHyqGw=
Subject key identifier: D1:53:30:05:0D:85:A1:8A:E5:4A:7C:A2:53:C2:9A:19:A8:1A:18:45
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019D2A04573A679DA7B2B702345FB559418B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 01A2
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: FE1RphcPVVBdbFVPpVsTX72UyQNDV2+Z89W+m/aG1yc=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:57:3a:67:9d:a7:b2:b7:02:34:5f:b5:59:41:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=d15330050d85a18ae54a7ca253c29a19a81a1845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:a8:d0:77:de:82:a9:fc:5a:78:9f:ef:ed:
c3:c2:b7:99:f6:19:fe:72:a3:8e:27:42:a2:de:04:
dd:0e:bf:f2:15:0f:12:1a:ff:f1:3c:85:c6:88:05:
e3:a9:2b:ff:96:be:91:96:73:a0:29:48:09:80:eb:
26:87:db:70:2c:51:2a:57:cf:7c:fe:06:d8:23:d8:
dd:84:ec:06:7c:4b:c5:a8:76:fb:68:ad:ba:09:29:
3a:d0:62:5c:5d:2f:82:57:ec:61:d6:92:af:54:f1:
88:e0:ae:62:5b:89:be:00:d6:e7:d8:e8:00:20:3b:
7b:95:3a:ab:d5:60:68:4a:2a:76:ce:84:e9:dd:42:
54:54:a7:7b:2c:6f:93:87:52:3e:06:f5:42:3f:b8:
6b:02:af:18:fe:0f:07:e6:2c:2c:d1:4b:0f:e5:14:
de:c3:fa:34:31:7a:88:2d:57:66:2e:0a:3e:a4:11:
85:cf:b0:f1:13:ce:a5:f9:1c:3b:06:02:2f:14:22:
c2:cd:28:c7:10:9b:d5:6f:8b:05:e2:fc:c7:a1:78:
8b:48:1d:30:ca:67:5d:1e:6b:ed:53:6c:93:59:ab:
b6:45:5f:c3:1d:a4:ab:c5:ee:be:8d:96:0c:09:e4:
8d:61:87:ef:fa:ce:39:cb:e1:c5:5b:1d:90:2b:3d:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:30:05:0D:85:A1:8A:E5:4A:7C:A2:53:C2:9A:19:A8:1A:18:45
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:cf:b1:88:2c:84:e3:14:7b:b5:45:3e:d8:c4:d9:ce:ba:
55:ff:09:53:fc:3a:d4:dc:14:8c:00:3c:6f:af:62:48:3e:e0:
5f:dc:70:86:ac:5c:b6:e8:b8:a7:29:8b:80:59:f0:2c:15:2f:
a7:bc:b1:4f:dc:40:a5:d4:ac:7d:9d:e3:1f:b5:4b:4f:db:7b:
de:dd:cb:c5:da:65:d3:45:98:bf:0c:92:8d:fd:d5:6e:33:6b:
48:0f:13:5c:f2:6d:54:c8:07:92:5c:ea:de:35:cc:02:01:5e:
da:a0:03:6e:1f:7f:f3:5e:6a:48:f0:12:82:17:53:45:4d:bd:
21:9b:d7:38:15:9c:54:b3:f4:45:f9:e6:24:57:8f:04:df:43:
95:17:65:58:c8:70:7a:ec:62:92:db:d5:a6:95:a2:a3:06:41:
63:c9:0a:f4:5f:54:08:3e:5f:2e:db:c1:18:63:6f:7d:ca:41:
b4:9a:d7:8e:81:b4:43:f0:eb:7d:d1:db:a4:52:f5:65:a0:eb:
79:22:fd:10:4b:5e:99:95:3f:d7:86:80:ec:23:cb:c9:5e:6e:
1e:b8:bd:e9:9f:60:4d:64:82:de:48:47:88:25:a5:01:7b:48:
83:59:71:5a:8d:e8:76:5b:00:e4:e6:1b:8f:00:2d:5e:6a:fd:
b3:9e:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:52 2026 by rpki-client