Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: /CU2WBQEOWlv+YH4kVWHzVJL4RTzsTN1b1KDiYIOfu4=
Subject key identifier: 74:D3:93:96:C7:B1:0C:F8:5F:7E:CF:9B:6E:A5:07:A4:8E:78:C8:1E
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019D2884AB90714CD0E7DFBC36768417F03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0E4B
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: iaJ/uALy8t1TjuN1gT5fwaso3rFJgFl4LkwIy8aW460=)
2: vFD13EECI63i6INpfz5KMmXHVEk.roa (hash: Xu061/sJ2Z4De52RiHTNj3+yQxv1II+U8nmD/HxX9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ab:90:71:4c:d0:e7:df:bc:36:76:84:17:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=74d39396c7b10cf85f7ecf9b6ea507a48e78c81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:47:55:3b:d2:70:82:7f:be:33:63:15:ed:
9d:fd:7a:66:33:c9:e9:10:e5:f2:31:53:ed:89:e2:
15:67:aa:e0:c7:c3:f8:fa:9d:b8:3c:e0:d0:64:ab:
ed:86:1a:95:28:89:2f:7e:7e:be:03:c3:b1:7e:ec:
f7:a2:9c:b4:c2:8f:3f:6c:85:85:5f:88:67:c8:1e:
cf:aa:76:70:d4:d3:c1:a3:19:7b:65:cc:c1:92:8f:
24:d2:66:f1:02:4c:ef:ba:0f:10:8d:14:15:d3:5e:
80:b7:32:fe:62:45:69:db:17:dd:70:29:54:4f:96:
66:19:16:28:5b:06:0f:6a:cb:b5:7c:b3:c7:9b:eb:
c1:b0:37:55:e9:a6:0b:85:cb:7d:eb:82:b5:ec:0d:
c7:4c:bc:dd:c2:c0:ff:03:25:d6:66:ee:65:af:c4:
d6:82:51:ef:66:77:fe:0b:7f:6f:7a:9c:89:44:aa:
de:e3:41:d5:3a:3e:9e:4c:03:8f:f8:fe:3e:a7:c9:
90:d2:41:a5:ed:96:9e:a5:89:12:76:1a:18:61:39:
a0:8c:30:e2:33:02:9f:d5:e4:85:81:3a:92:18:27:
3a:cc:df:67:ec:1c:27:3f:02:9e:0b:92:50:c5:cf:
e8:23:57:b8:0b:ab:f1:1c:e4:d8:0e:3c:e2:63:3f:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:93:96:C7:B1:0C:F8:5F:7E:CF:9B:6E:A5:07:A4:8E:78:C8:1E
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:77:72:84:42:89:32:16:7a:0c:3b:a6:ec:f1:54:d2:ef:
55:fb:36:65:44:a3:1d:65:9b:f7:90:77:9d:8d:6d:ac:e2:ce:
df:d9:33:7a:36:c0:65:fa:2f:9c:70:8d:46:ab:0c:e8:7a:0a:
b2:43:cf:e3:d2:92:a9:79:35:55:f7:4c:48:94:ff:9b:f6:f0:
96:c4:6a:d7:9b:04:5b:03:e5:ae:5c:0f:77:b8:a1:c2:da:99:
16:17:48:ba:7b:72:79:6f:81:b3:d2:dc:c4:cf:71:8d:6e:e1:
87:a1:1e:f0:91:08:f2:31:99:91:ea:9b:4f:c0:53:f2:97:1d:
14:9b:82:aa:dd:ea:f5:8b:d7:fe:21:0c:e5:d5:58:a7:40:b0:
47:90:75:3f:90:48:7d:fb:d0:28:e0:e7:ab:85:50:08:cd:ea:
ea:31:44:89:d0:fd:a6:0f:a5:9f:4d:de:5b:fe:e7:09:d3:ae:
0e:74:03:86:4e:8d:ad:82:b8:e1:88:d5:25:6a:af:c3:5a:91:
a8:e9:24:73:3e:f3:04:7a:5d:18:54:eb:29:48:4d:46:72:6d:
f3:b2:79:c2:7c:78:e7:aa:03:76:f5:57:73:4d:17:fd:ec:57:
50:c3:27:8a:8b:1c:f4:a8:7a:a8:36:89:53:6e:48:ad:6c:f6:
0a:9a:70:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKuQcUzQ59+8NnaEF/A8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5
MmRlZTkwHhcNMjYwMzI2MDUwMTE2WhcNMjYwMzI3MDUwMTE2WjAzMTEwLwYDVQQD
Eyg3NGQzOTM5NmM3YjEwY2Y4NWY3ZWNmOWI2ZWE1MDdhNDhlNzhjODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINHVTvScIJ/vjNjFe2d/XpmM8np
EOXyMVPtieIVZ6rgx8P4+p24PODQZKvthhqVKIkvfn6+A8Oxfuz3opy0wo8/bIWF
X4hnyB7PqnZw1NPBoxl7ZczBko8k0mbxAkzvug8QjRQV016AtzL+YkVp2xfdcClU
T5ZmGRYoWwYPasu1fLPHm+vBsDdV6aYLhct964K17A3HTLzdwsD/AyXWZu5lr8TW
glHvZnf+C39vepyJRKre40HVOj6eTAOP+P4+p8mQ0kGl7ZaepYkSdhoYYTmgjDDi
MwKf1eSFgTqSGCc6zN9n7BwnPwKeC5JQxc/oI1e4C6vxHOTYDjziYz907QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTTk5bHsQz4X37Pm26lB6SOeMgeMB8GA1UdIwQY
MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt
ZjAwYTE5Mzg4ODFmLzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm
LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4t3coRC
iTIWegw7puzxVNLvVfs2ZUSjHWWb95B3nY1trOLO39kzejbAZfovnHCNRqsM6HoK
skPP49KSqXk1VfdMSJT/m/bwlsRq15sEWwPlrlwPd7ihwtqZFhdIuntyeW+Bs9Lc
xM9xjW7hh6Ee8JEI8jGZkeqbT8BT8pcdFJuCqt3q9YvX/iEM5dVYp0CwR5B1P5BI
ffvQKODnq4VQCM3q6jFEidD9pg+ln03eW/7nCdOuDnQDhk6NrYK44YjVJWqvw1qR
qOkkcz7zBHpdGFTrKUhNRnJt87J5wnx456oDdvVXc00X/exXUMMniosc9Kh6qDaJ
U25IrWz2Cppwhw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:44 2026 by rpki-client