Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: uGxVLE7Y9FuFHFPxklOzL4a53zyhBddqMWmCLeUMIlo=
Subject key identifier: 1D:A5:91:50:BF:6B:5C:39:7A:13:D2:99:D0:77:A7:FA:49:E5:71:8B
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019E1D597D2346C8D3545C79C6FE0E75E8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 0220
Signing time: Tue 12 May 2026 18:01:04 +0000
Manifest this update: Tue 12 May 2026 18:01:04 +0000
Manifest next update: Wed 13 May 2026 18:01:04 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: uCUJtLewquReW8cgONGtSudNBKu+SCKO4K+WSEWfYt0=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:7d:23:46:c8:d3:54:5c:79:c6:fe:0e:75:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: May 12 18:01:04 2026 GMT
Not After : May 13 18:01:04 2026 GMT
Subject: CN=1da59150bf6b5c397a13d299d077a7fa49e5718b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:e8:df:58:ad:b5:f0:23:da:68:37:f9:a4:
29:d5:e0:4d:dd:b5:bb:0f:ff:30:8f:95:a6:61:fd:
a8:14:6c:33:df:ba:d3:c7:5d:a7:da:00:b9:31:58:
a6:d9:e7:5a:b8:e0:d7:e6:d8:24:80:5b:59:67:94:
d1:94:bb:d9:b5:a2:0c:21:de:56:b4:52:2e:51:4d:
3f:97:dc:bf:f1:a5:9b:ee:58:1c:39:69:4a:49:b5:
20:37:7d:3d:df:bc:d8:c1:40:e8:26:d9:eb:0e:70:
35:ea:a8:0e:18:c1:17:7b:b1:4b:73:f6:16:0b:3e:
f3:c5:fd:5b:10:1d:45:cf:9f:52:2d:6c:fd:54:6d:
3b:7d:97:60:d7:c4:f7:91:b1:b1:25:67:52:45:ba:
e7:9b:ca:5f:ae:a1:6b:95:59:7f:69:5c:a8:d2:2a:
00:b9:ec:00:06:ed:fd:9b:9f:24:5d:e3:4b:1e:6d:
9c:9a:49:07:14:a5:68:23:3e:ea:71:61:d8:84:51:
38:a7:1c:84:08:44:2b:fb:b5:72:2b:b2:b8:20:22:
7a:b2:1f:4e:e1:fe:fc:15:9c:eb:d3:04:d4:ff:cf:
6d:67:b0:b1:ef:8f:0b:fa:00:69:2f:9e:cf:44:86:
85:88:f5:32:a8:79:95:fd:8e:ea:36:0b:7e:73:73:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:91:50:BF:6B:5C:39:7A:13:D2:99:D0:77:A7:FA:49:E5:71:8B
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fe:d0:8a:21:f9:85:d5:ad:a4:16:38:23:42:3f:fb:1f:96:
a9:ff:43:8c:c4:4a:b2:77:05:9f:af:4f:8c:ff:7a:22:9d:ec:
62:0b:3a:7e:ce:33:51:6b:25:2d:e0:b0:bf:0e:e8:69:d1:26:
67:ce:69:ba:af:74:ac:7b:77:7a:93:fd:78:8a:e7:6e:a2:5d:
13:34:c9:fe:6d:96:4d:d4:30:86:ba:67:1c:20:5a:c0:61:cb:
6b:59:0d:43:46:9a:d4:94:3a:e7:73:bf:65:6a:4a:dd:e5:d0:
db:73:d9:ae:5a:74:f4:df:20:18:2c:7b:8d:05:07:16:96:39:
b0:1e:96:32:11:5e:02:f4:fc:2b:e1:72:ae:ef:8b:c9:b6:c5:
e7:43:d1:0c:d1:40:ad:1c:eb:71:63:29:c7:b3:f1:20:3e:f4:
d2:1e:b8:25:89:aa:28:6e:db:ee:c2:46:05:a5:a1:02:01:75:
93:2c:5c:72:a4:a3:e5:57:8a:c1:22:df:b7:84:43:03:95:64:
45:10:3e:e1:a1:e8:3e:dc:a0:1e:1b:1e:f9:3f:a8:2b:f9:fb:
c8:da:71:79:a1:f1:93:a0:82:05:f2:1b:6e:fb:d8:30:8c:d4:
28:f6:65:de:70:24:a5:a0:80:c6:89:53:ec:c0:dc:60:72:fb:
a8:56:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:20 2026 by rpki-client