Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
File: Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft (raw, json)
Hash identifier: wb5XUJNcC0bKtMVcTIMfUgUwnA2MxzAUeidyB5d7e/0=
Subject key identifier: 5E:17:B9:59:B6:8B:11:42:7C:C0:DE:5C:59:D4:D4:BD:33:0C:18:1C
Authority key identifier: 1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
Certificate issuer: /CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Certificate serial: 019F8FEC26E7A6322B513FFA3C005CFCB129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
Manifest number: 52
Signing time: Thu 23 Jul 2026 17:00:46 +0000
Manifest this update: Thu 23 Jul 2026 17:00:46 +0000
Manifest next update: Fri 24 Jul 2026 17:00:46 +0000
Files and hashes: 1: 7PriCDVWnT1HYJrwYNPM5oCvIbY.roa (hash: Zt6UDdQs2XkMXhq8WXEB4GIlZFaXqIzlnXOtR6MAoiI=)
2: Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl (hash: tDAFwg2cTDlEYi8eH8OPm7cVD6JdmhvOKAuoXxV9A1I=)
3: qY64LLAKmXVBF2yF2a0AG56IVAo.asa (hash: ucX67FWJ1VM3ZcVEhzhFpCcYubHiPMVmYsb/9Ginm64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:26:e7:a6:32:2b:51:3f:fa:3c:00:5c:fc:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Validity
Not Before: Jul 23 17:00:46 2026 GMT
Not After : Jul 24 17:00:46 2026 GMT
Subject: CN=5e17b959b68b11427cc0de5c59d4d4bd330c181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:69:0a:f8:2d:3e:ac:ba:b6:47:df:70:27:
fa:c5:40:6e:a6:6e:b7:e1:44:a6:15:00:7c:cd:83:
71:77:4a:bf:63:97:76:e2:b5:1b:b2:fa:54:11:71:
0a:cf:fc:cd:62:0b:59:dc:92:47:4d:22:d1:7f:e0:
d8:f1:b2:b8:5c:27:ff:a6:61:88:93:a7:b3:b4:15:
7e:b4:6e:db:11:21:e2:9a:82:6a:a4:55:59:ac:e5:
70:17:1f:5e:1b:9a:83:e9:71:05:d6:c2:35:59:d8:
43:f9:1d:ff:5b:90:79:68:0b:d3:66:41:21:ea:f7:
87:ff:1a:7c:d1:12:75:db:40:e0:53:0d:53:38:f0:
ce:e9:1e:7b:8b:76:14:03:e7:ea:c4:d6:4b:ac:28:
95:a4:d3:8c:a5:64:f2:23:c1:bd:ba:96:0c:19:49:
af:a2:9f:33:5c:4b:51:43:69:52:df:0a:20:35:56:
ab:62:df:15:77:fe:e3:9e:4f:d4:3e:26:48:60:3e:
55:3d:2f:ab:1b:4a:b8:73:45:aa:cd:b4:46:d0:8c:
4f:27:8c:6b:5e:5e:fd:04:93:0d:db:e3:98:b2:b2:
6c:4c:03:ad:10:37:b3:6d:ce:16:43:f0:9e:13:4b:
74:d5:c6:af:cc:3b:7a:8c:83:57:95:bb:db:f3:5b:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:B9:59:B6:8B:11:42:7C:C0:DE:5C:59:D4:D4:BD:33:0C:18:1C
X509v3 Authority Key Identifier:
keyid:1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6f:69:18:45:70:a7:64:93:cc:b7:4c:3e:b3:79:80:9f:93:
88:24:16:c7:18:90:e5:33:74:1c:bc:56:64:ac:ad:31:4e:b9:
f2:1f:8d:92:c0:c3:ad:ad:d8:d0:51:3b:b6:72:e2:50:0a:b1:
2c:27:8b:0a:b0:84:2f:14:74:c6:00:fa:84:6b:63:11:d8:f0:
69:23:b8:9f:dc:85:43:2d:25:60:e8:1b:46:52:75:1b:26:a6:
99:06:86:e3:ce:2b:bd:d0:f3:8c:3b:c2:83:76:e5:26:40:64:
87:66:a0:64:42:b2:7f:c6:6b:b9:cc:28:28:6c:12:a7:7b:e9:
8f:f7:cc:73:c7:6b:15:77:4d:84:16:91:1a:a4:14:aa:f9:f6:
f8:9f:62:74:9d:2c:92:30:11:6a:d6:73:3c:90:e7:29:cd:e3:
46:04:54:81:8b:14:e7:23:cb:66:50:9b:af:d4:c5:04:73:62:
b2:5a:79:3f:65:b7:f1:a7:6b:11:5b:5d:47:13:25:a1:12:04:
07:bf:dc:5c:85:94:23:1c:a8:3d:a6:2c:4f:c7:e3:94:28:c1:
53:74:f4:65:ac:49:ec:71:d3:dd:f1:7d:51:c8:4a:ab:3c:1f:
08:a1:30:b8:cd:21:cc:ee:9c:1c:33:b4:d9:77:b6:d4:75:73:
55:10:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:05:00 2026 by rpki-client