Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: M1bj20Phs6ayyZF7nDos4iVJxGLK9ZpoZpKrMQOqcfw=
Subject key identifier: 7D:A2:B0:FB:CE:53:6B:8A:E9:9B:96:AA:06:AE:21:3B:F2:79:DE:88
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019CAAC604353E153B6A1A4E638178C4F1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 11D6
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 5vGPrxrSq/va7wXCcfel2ZTbhXIJjaSZ1QIx0FilbNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:04:35:3e:15:3b:6a:1a:4e:63:81:78:c4:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=7da2b0fbce536b8ae99b96aa06ae213bf279de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:73:23:97:74:69:8e:23:a6:ba:7b:70:3c:
27:c7:8c:a5:4d:08:06:3a:43:4d:c4:d3:3e:49:ce:
82:78:29:0b:38:f1:4b:24:c4:a1:f2:ca:82:c6:61:
9e:1a:da:24:f1:c2:b8:3a:ba:e4:59:6e:76:f2:70:
29:1d:48:c0:91:8d:f9:0e:dc:3f:8d:67:61:cd:74:
d2:a0:34:0a:4e:51:04:8d:7e:9a:cf:14:7b:59:98:
4c:3a:d0:7e:9c:04:6a:5d:4f:0c:b9:30:2c:9a:1f:
f3:6c:d1:8c:24:d2:4a:1a:f8:a1:8e:0f:11:f0:a0:
54:50:b4:b7:91:f4:0c:8f:94:9b:76:e5:bf:25:75:
49:8e:3b:75:2d:84:26:1c:e5:43:9b:79:04:84:0f:
45:59:b6:52:a5:d7:c9:39:f0:cd:62:ce:89:a4:5c:
3e:77:82:60:a0:97:cf:3d:9d:d3:60:2a:d2:b0:da:
e1:e2:c5:eb:e4:49:cc:7f:02:9e:15:dc:bc:27:df:
12:89:4e:dc:f4:ba:92:26:6e:d3:46:cf:77:14:d7:
a7:d1:38:d9:11:67:30:20:41:0e:94:d8:a9:02:fd:
4c:18:b4:ab:c7:fb:3a:c8:7f:fc:8d:76:dd:94:a2:
7c:fc:7f:f9:68:44:34:9a:10:a9:1b:57:d3:9d:57:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:B0:FB:CE:53:6B:8A:E9:9B:96:AA:06:AE:21:3B:F2:79:DE:88
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:8f:f7:7a:15:9c:24:7c:94:47:a2:58:d5:63:85:4a:dc:
a2:31:70:a3:9e:e6:fc:f1:89:be:fe:71:b3:20:f6:1a:27:b1:
89:28:05:2b:27:7a:4c:72:fa:c0:5c:eb:7c:c2:9f:9e:86:59:
7b:0a:da:92:44:ae:99:e0:3c:2a:f6:97:94:a4:aa:17:7a:39:
88:71:0a:ee:ce:ea:f3:f1:9a:a7:0a:22:f4:0a:94:90:79:d5:
af:57:d4:77:ae:3f:cf:94:d0:23:a3:e6:fb:b2:93:b0:86:b3:
10:52:51:74:b7:9c:31:75:93:1d:ee:59:da:16:bd:b8:9d:18:
c9:2a:76:f0:c9:9b:ab:f0:23:5f:3e:a4:c0:d9:bd:c4:95:9c:
d8:b6:74:6a:20:e0:26:5c:91:b5:58:7a:5c:83:51:4f:47:f3:
a6:b6:6a:f2:a4:86:7b:83:4f:e2:a5:91:29:f5:e5:70:0f:cd:
15:20:f1:20:4d:9f:9a:29:9c:93:be:6a:9b:2c:39:84:18:fd:
19:37:90:23:f3:ba:1a:83:a3:61:0a:ec:a6:4f:d3:49:e6:ca:
56:ac:ed:a6:22:48:da:92:e4:40:92:1c:b7:e0:95:fb:e2:24:
f7:1b:5c:51:9d:28:51:54:21:cd:6a:20:8f:d8:9b:e1:70:c8:
3d:e0:2a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgQ1PhU7ahpOY4F4xPHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjYwMzAxMTkwMDI5WhcNMjYwMzAyMTkwMDI5WjAzMTEwLwYDVQQD
Eyg3ZGEyYjBmYmNlNTM2YjhhZTk5Yjk2YWEwNmFlMjEzYmYyNzlkZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiRzI5d0aY4jprp7cDwnx4ylTQgG
OkNNxNM+Sc6CeCkLOPFLJMSh8sqCxmGeGtok8cK4OrrkWW528nApHUjAkY35Dtw/
jWdhzXTSoDQKTlEEjX6azxR7WZhMOtB+nARqXU8MuTAsmh/zbNGMJNJKGvihjg8R
8KBUULS3kfQMj5SbduW/JXVJjjt1LYQmHOVDm3kEhA9FWbZSpdfJOfDNYs6JpFw+
d4JgoJfPPZ3TYCrSsNrh4sXr5EnMfwKeFdy8J98SiU7c9LqSJm7TRs93FNen0TjZ
EWcwIEEOlNipAv1MGLSrx/s6yH/8jXbdlKJ8/H/5aEQ0mhCpG1fTnVfcXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2isPvOU2uK6ZuWqgauITvyed6IMB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlSP93oV
nCR8lEeiWNVjhUrcojFwo57m/PGJvv5xsyD2GiexiSgFKyd6THL6wFzrfMKfnoZZ
ewrakkSumeA8KvaXlKSqF3o5iHEK7s7q8/Gapwoi9AqUkHnVr1fUd64/z5TQI6Pm
+7KTsIazEFJRdLecMXWTHe5Z2ha9uJ0YySp28Mmbq/AjXz6kwNm9xJWc2LZ0aiDg
JlyRtVh6XINRT0fzprZq8qSGe4NP4qWRKfXlcA/NFSDxIE2fmimck75qmyw5hBj9
GTeQI/O6GoOjYQrspk/TSebKVqztpiJI2pLkQJIct+CV++Ik9xtcUZ0oUVQhzWog
j9ib4XDIPeAqfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:15 2026 by rpki-client