
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier: FUQve2XISketRFwL6g1eVx6h4bJnq54C7/iQYy6j04Q=
Subject key identifier: 24:E3:4A:68:D2:96:8F:49:EC:9E:AE:5A:F3:3C:DD:D4:62:D6:B0:DE
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 01A12B44801757ED874653B70A8BF1D21B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number: 1AA3
Signing time: Sun 11 Oct 2026 14:01:11 +0000
Manifest this update: Sun 11 Oct 2026 14:01:11 +0000
Manifest next update: Mon 12 Oct 2026 14:01:11 +0000
Files and hashes: 1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: YZvEsCUPs664YkDcJV0E6v7OfmhNhUf004h2c++oMe4=)
4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:80:17:57:ed:87:46:53:b7:0a:8b:f1:d2:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Oct 11 14:01:11 2026 GMT
Not After : Oct 12 14:01:11 2026 GMT
Subject: CN=24e34a68d2968f49ec9eae5af33cddd462d6b0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:d2:2f:7d:77:91:55:91:58:bf:55:c4:d2:
50:a4:30:d0:2e:d0:4d:b4:81:5c:0b:cf:6d:cd:72:
8e:53:e3:8f:b5:45:a7:ec:78:97:18:d5:4f:d1:b5:
c6:68:d4:c9:3e:5e:34:cf:02:32:b6:15:15:c4:62:
23:d1:b6:c6:0a:81:04:0a:fc:34:50:45:7e:b8:16:
b1:f3:c5:18:81:bc:59:37:2c:fe:24:d2:f3:7f:90:
95:2d:1a:df:63:de:f5:39:95:bd:15:92:27:d9:2a:
10:8c:b4:28:2e:93:eb:42:da:39:d6:60:53:1e:1e:
31:66:9a:9d:eb:5f:fd:52:d2:4e:04:5b:21:d1:85:
d2:f1:79:01:d8:04:af:5f:ce:39:ff:b6:44:76:03:
b0:2e:b1:6f:04:28:54:68:03:b7:6b:02:5e:35:e7:
f9:4d:19:24:84:69:0d:6f:50:05:95:b5:d5:61:f3:
68:65:7d:46:79:e6:d9:01:63:fb:84:67:c9:f3:58:
a7:8b:f1:18:0d:95:26:45:ed:38:83:ac:aa:44:99:
8c:e1:46:74:2f:27:62:4a:2e:e7:e0:5c:54:8f:72:
b1:27:73:0d:79:b1:a1:85:92:1d:ce:87:a0:af:51:
31:ec:d5:f3:64:31:e0:05:e2:35:b3:a2:1b:b5:0c:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:4A:68:D2:96:8F:49:EC:9E:AE:5A:F3:3C:DD:D4:62:D6:B0:DE
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:66:29:9d:9c:70:5b:eb:89:ad:79:85:0a:96:55:22:2d:
6c:65:a7:d0:34:60:91:79:31:a0:93:f0:7e:84:91:21:9f:1c:
bc:f9:83:2c:a5:40:d6:8f:dc:9f:95:81:be:d8:a3:e7:e3:4b:
60:8e:c6:a9:90:ad:55:10:a0:a8:4a:b2:b1:c6:eb:12:ee:a2:
9a:e3:93:c6:01:d2:78:42:28:c0:b0:3d:ea:bf:51:e8:41:75:
3d:4d:2a:1d:03:c1:9f:81:e6:d3:30:e1:5c:99:d5:04:ba:d9:
84:79:0d:8c:b8:69:14:55:3a:c4:ee:be:17:7a:0c:57:1a:b0:
cc:57:4e:d4:61:f5:8b:52:a6:11:17:65:c1:e5:48:4e:a8:b0:
dd:81:87:55:37:04:cb:ed:71:0d:1b:8f:f6:d4:82:15:d4:99:
c2:13:e0:47:50:51:f8:b0:b9:95:49:75:5d:d3:2a:d1:ef:e1:
2c:8a:a7:62:ac:0b:70:e1:60:17:f3:bd:8d:7d:99:2d:9a:0d:
74:0a:b5:a9:02:2c:d9:0e:ec:11:ed:45:87:9a:7f:48:57:31:
19:f1:e8:fe:28:b8:30:7c:ca:a6:ce:28:84:b2:91:44:7f:b0:
7f:a4:fd:77:9d:45:57:84:c0:c9:78:ea:22:d0:33:9c:c3:a8:
2e:34:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:42:25 2026 by rpki-client