Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier: NKPH7TgIbeHNOTDyu/YG5XwQ7WuSjksg/B63HEShFOo=
Subject key identifier: EF:FF:1B:9E:F7:83:2A:15:DA:5E:51:A4:FC:46:8B:96:FD:AB:BB:67
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 01A0F18BC9D68674E87BED6F534314073CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number: 0397
Signing time: Wed 30 Sep 2026 09:01:05 +0000
Manifest this update: Wed 30 Sep 2026 09:01:05 +0000
Manifest next update: Thu 01 Oct 2026 09:01:05 +0000
Files and hashes: 1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: 9ukJfORCo2uVolnLnrU/Fc0UH1/WANM209lgVB84ANU=)
3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:c9:d6:86:74:e8:7b:ed:6f:53:43:14:07:3c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Sep 30 09:01:05 2026 GMT
Not After : Oct 1 09:01:05 2026 GMT
Subject: CN=efff1b9ef7832a15da5e51a4fc468b96fdabbb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:cb:7a:0b:08:2a:15:7d:7e:0a:c2:c8:ee:
d0:36:a8:f2:3c:de:7b:b2:a6:58:33:42:20:7e:5b:
e0:27:f1:55:75:a2:84:78:ae:cb:d6:7f:d5:5b:d1:
e0:81:17:47:d1:ea:61:83:5d:99:4c:69:7d:d6:6b:
61:73:ed:83:3f:b1:8d:8e:b4:2d:15:b9:f0:92:b1:
b8:b2:01:e8:85:01:14:35:e1:d3:0e:9c:03:d1:7f:
69:6f:b7:48:59:1b:6a:c7:fa:db:80:70:48:09:09:
b8:26:5c:15:8c:ba:27:48:c6:ad:38:ba:dc:35:88:
08:10:54:c2:d8:6a:bc:0e:93:a6:26:ff:b3:bd:cd:
f7:38:d5:e0:c0:42:76:42:55:4e:c3:75:69:45:4c:
a9:87:ff:cf:7a:b5:15:37:e8:6c:35:19:c9:11:ae:
4a:7f:05:fa:01:b6:fc:76:ba:4b:d1:9f:0f:75:91:
0d:97:20:97:f8:75:e5:bc:f5:8e:75:8c:75:9b:1a:
47:e2:96:f5:8f:4d:e6:33:66:cd:01:6d:44:95:df:
f5:6b:c2:24:4b:50:b1:ed:ae:7b:90:be:a7:68:8a:
5c:d0:ff:e8:2a:c0:29:e5:de:b5:55:5f:35:dd:f5:
2b:48:8d:5a:29:5e:12:68:1a:32:d0:9e:e8:28:5b:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:1B:9E:F7:83:2A:15:DA:5E:51:A4:FC:46:8B:96:FD:AB:BB:67
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:ba:f1:74:17:84:89:51:2b:ac:71:9b:19:36:fc:90:9f:
69:68:8e:0f:d5:8a:74:e2:e7:ad:68:90:c0:ef:c7:3b:65:67:
19:84:35:4f:15:43:46:e5:86:9d:42:ca:cd:91:78:06:83:e8:
cb:86:eb:7a:c9:8e:e6:65:29:5d:68:b9:8d:1d:c2:0d:cf:2d:
b6:2c:6b:59:4e:5c:15:bb:5f:27:03:6d:ec:fb:21:06:a5:11:
38:c7:8d:33:df:41:13:27:f5:62:be:03:19:fc:2b:2d:0c:bc:
9c:71:a8:f8:96:68:2b:ec:bb:88:23:8c:9a:42:36:e2:d9:26:
16:05:d1:c2:82:03:57:2e:80:7f:5b:62:7e:fd:8b:5d:36:68:
04:b6:08:bd:bb:5c:77:fa:f0:f8:56:30:dd:77:d8:f2:fd:bf:
f9:0a:e1:e5:85:98:1c:9f:ec:1d:47:3f:f3:05:5e:7a:ed:71:
9b:21:0e:27:db:12:a0:92:8b:25:57:3c:35:37:ce:16:8e:cd:
c5:b4:80:ba:89:ab:3a:cd:e5:bd:c1:43:08:9f:9b:ee:d0:3b:
bd:19:1b:6c:69:70:30:f0:b6:af:57:18:18:cd:fc:31:09:5d:
4a:5b:c4:d3:1d:45:04:ce:72:6a:89:0e:04:dc:ec:2d:61:c4:
be:64:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:34 2026 by rpki-client