Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: KnjDlV0t4tu7gEv7vqYkPj0D+iVc8+ZoqDzl/P6L5Ms=
Subject key identifier: D6:EE:ED:0E:63:D0:E2:92:B4:5F:69:F8:11:79:3B:91:F6:B7:AD:38
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019D9A3ED2166C452E967042EA167EE25DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1252
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 5rwkFna6khjzGeeeTn8XWpYmMcC8czbwFZuqX5i321k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:16:6c:45:2e:96:70:42:ea:16:7e:e2:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=d6eeed0e63d0e292b45f69f811793b91f6b7ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:d0:7b:c2:e0:bd:40:8a:53:77:50:09:96:
cc:1d:89:cf:a0:ec:42:19:49:48:ab:7e:56:e1:dc:
e4:9e:87:5e:7a:df:31:48:a6:ff:62:e5:7a:f1:66:
c3:bf:9f:f3:88:28:7f:ef:ce:97:00:51:a2:8a:96:
e7:fb:59:6e:a4:a5:59:4b:f6:b7:dd:3e:5b:4c:6b:
77:99:68:40:f5:fb:83:98:85:15:8e:15:c7:b4:72:
0e:08:03:b1:84:e8:1e:1c:82:ae:a0:22:36:68:43:
f9:02:a6:7e:2e:a6:bf:35:02:8b:f0:a8:a3:37:78:
26:1c:c4:ba:2f:5c:68:0e:b4:85:97:ec:38:d4:0f:
c5:4f:34:dd:ea:a0:d0:be:7c:2d:72:cb:05:7e:22:
8e:6e:8e:1a:31:9c:51:64:fb:85:d2:0d:b4:6d:7f:
4b:56:eb:11:02:da:53:83:56:c2:03:1f:eb:de:76:
3b:b9:28:f5:20:fa:44:77:dc:a7:ec:37:0b:54:01:
9d:a0:39:d0:16:04:ae:3d:8e:a4:11:76:6f:8a:22:
43:4c:80:d3:2a:7b:35:ae:63:2c:f5:b5:5a:31:ba:
23:5c:66:e3:39:c4:5a:33:42:da:df:d0:73:2f:87:
26:30:03:c5:24:8b:3a:1b:43:e8:1f:68:33:e2:38:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:ED:0E:63:D0:E2:92:B4:5F:69:F8:11:79:3B:91:F6:B7:AD:38
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:11:68:af:98:4d:cd:d1:86:b0:24:cb:f1:64:d2:d5:05:
6d:83:f4:de:49:a6:ea:b6:54:d1:66:e9:31:12:55:2f:a3:4d:
46:6e:87:41:37:19:62:42:28:59:cb:37:a4:0c:e5:8b:cc:3c:
2c:a0:45:82:18:4f:73:e2:67:b1:fa:d0:b8:3a:90:cc:27:0b:
0c:3e:ce:b2:6e:0b:74:6e:95:74:7b:8f:11:09:9c:de:1b:ef:
01:76:4d:4b:a2:c9:4c:4c:58:30:9d:2a:d2:bf:97:3e:53:32:
9a:ff:2f:d3:25:72:9c:fa:d3:a6:d4:78:c8:50:6c:8b:fb:26:
27:5a:36:45:25:61:9a:7e:23:50:93:c9:da:b4:9f:ef:8c:85:
78:a4:45:1a:b7:13:80:7f:94:9d:ef:9c:c5:ca:21:0b:c6:d8:
06:cc:a0:db:47:2b:8f:a6:c4:63:5f:78:63:e0:d5:03:7d:b2:
10:00:c9:87:aa:85:67:eb:60:79:ba:66:76:4e:61:fb:52:de:
21:86:cf:23:e7:e7:0a:6f:71:28:4a:f3:8c:a6:aa:fa:bf:09:
ef:54:90:79:ff:c5:96:5a:23:ce:8b:6d:10:b2:fe:f4:58:7c:
34:f3:8c:86:fd:d7:ea:90:19:ac:08:d5:f1:89:0f:0a:d4:77:
4c:2d:98:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPtIWbEUulnBC6hZ+4l39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjYwNDE3MDcwMTQxWhcNMjYwNDE4MDcwMTQxWjAzMTEwLwYDVQQD
EyhkNmVlZWQwZTYzZDBlMjkyYjQ1ZjY5ZjgxMTc5M2I5MWY2YjdhZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2bQe8LgvUCKU3dQCZbMHYnPoOxC
GUlIq35W4dzknodeet8xSKb/YuV68WbDv5/ziCh/786XAFGiipbn+1lupKVZS/a3
3T5bTGt3mWhA9fuDmIUVjhXHtHIOCAOxhOgeHIKuoCI2aEP5AqZ+Lqa/NQKL8Kij
N3gmHMS6L1xoDrSFl+w41A/FTzTd6qDQvnwtcssFfiKObo4aMZxRZPuF0g20bX9L
VusRAtpTg1bCAx/r3nY7uSj1IPpEd9yn7DcLVAGdoDnQFgSuPY6kEXZviiJDTIDT
Kns1rmMs9bVaMbojXGbjOcRaM0La39BzL4cmMAPFJIs6G0PoH2gz4jh2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbu7Q5j0OKStF9p+BF5O5H2t604MB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/URaK+Y
Tc3RhrAky/Fk0tUFbYP03kmm6rZU0WbpMRJVL6NNRm6HQTcZYkIoWcs3pAzli8w8
LKBFghhPc+JnsfrQuDqQzCcLDD7Osm4LdG6VdHuPEQmc3hvvAXZNS6LJTExYMJ0q
0r+XPlMymv8v0yVynPrTptR4yFBsi/smJ1o2RSVhmn4jUJPJ2rSf74yFeKRFGrcT
gH+Une+cxcohC8bYBsyg20crj6bEY194Y+DVA32yEADJh6qFZ+tgebpmdk5h+1Le
IYbPI+fnCm9xKErzjKaq+r8J71SQef/FllojzottELL+9Fh8NPOMhv3X6pAZrAjV
8YkPCtR3TC2Y2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:10 2026 by rpki-client