Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: QcAwr99qSvNGGWSUfWMVGMchzGIOQBZ64uxZHligKoQ=
Subject key identifier: DC:85:E1:A4:0D:94:9B:EA:CA:27:35:86:96:52:18:D5:5D:85:EE:2D
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019FA97490C7E2AF359C8CDD934C6818F175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1363
Signing time: Tue 28 Jul 2026 16:00:16 +0000
Manifest this update: Tue 28 Jul 2026 16:00:16 +0000
Manifest next update: Wed 29 Jul 2026 16:00:16 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 5CLCTud3Xj0WThRwN1k8W7q/9eue36tlMIH6pzGDvbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:90:c7:e2:af:35:9c:8c:dd:93:4c:68:18:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jul 28 16:00:16 2026 GMT
Not After : Jul 29 16:00:16 2026 GMT
Subject: CN=dc85e1a40d949beaca273586965218d55d85ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:f5:ca:ed:f9:00:4b:13:92:28:33:39:d9:
eb:55:26:f6:91:73:7d:e9:15:72:13:73:8a:41:99:
a0:0b:21:cc:05:b4:82:4b:84:c7:89:f7:f3:0d:ad:
f9:6a:9e:d5:c1:1e:de:ff:bd:7e:24:d3:88:88:85:
24:f0:88:e0:8c:f4:05:5b:ab:1c:f7:17:e7:63:dd:
4e:31:97:ae:b6:55:10:71:13:3d:87:64:e4:95:62:
0f:89:59:ef:df:79:ff:ea:ae:6d:56:45:ea:ad:9e:
71:28:04:25:f6:10:d0:ca:99:1a:2d:17:89:2b:2e:
1e:fe:59:a2:37:b1:a3:3b:81:3c:fb:16:29:50:45:
45:04:e1:4a:f5:d1:ee:7b:b3:fa:5e:19:ca:d6:5c:
a1:91:e5:e6:3f:87:4a:b5:01:41:03:a9:db:54:10:
68:33:63:86:b4:3c:67:18:36:3b:7d:81:69:3a:ee:
fb:dc:a9:81:08:f6:8f:d7:87:26:a7:03:02:8c:4a:
0e:9c:e6:b5:77:de:99:c4:00:54:db:27:de:25:79:
50:b8:9b:a4:46:f7:54:f3:16:6c:d0:20:9e:ab:38:
38:57:53:ec:d0:fe:4f:5d:06:87:91:34:88:1f:ea:
80:89:ee:1c:5d:8a:4b:68:91:74:4b:99:8f:0a:d8:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:E1:A4:0D:94:9B:EA:CA:27:35:86:96:52:18:D5:5D:85:EE:2D
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:23:73:0b:a2:ad:ee:85:a8:15:9b:35:4d:e8:07:f1:42:
e6:b9:0a:75:45:d5:85:35:a6:47:03:92:15:ca:81:97:67:55:
14:46:02:5c:11:3a:4a:24:83:16:e4:b1:0b:7b:07:37:79:8c:
8f:34:6b:20:49:69:71:05:cd:40:fe:2b:5b:68:17:58:c0:9c:
55:84:ed:b5:10:26:9e:a1:a6:6f:f2:d9:e7:3f:db:71:64:ae:
60:63:b5:1e:4c:f1:4c:c2:10:5f:a0:fd:ce:14:68:f0:58:1a:
dc:ca:ba:bd:9e:54:b4:09:5a:aa:71:d2:65:2e:54:44:5f:f9:
9e:f2:82:de:35:62:3f:d2:59:e4:e8:5c:60:45:5d:84:b9:21:
b1:37:c9:82:66:d5:e9:53:4d:95:f0:7d:c1:45:57:be:58:9b:
ac:3c:06:84:33:59:ac:b1:9e:1e:1c:04:7c:04:4c:8b:13:14:
7c:a6:ca:d3:27:21:b9:1e:92:45:fd:36:07:b2:06:13:88:73:
e8:76:0d:0a:e6:7d:2f:8b:2c:47:c6:bc:fa:54:0b:44:b6:d2:
20:9c:b2:12:b2:06:5b:cd:1a:f4:d6:da:29:58:0c:81:00:0c:
1f:f3:f1:c5:40:3d:33:8d:3a:2c:41:2b:a8:af:d0:f7:e8:06:
49:82:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:43 2026 by rpki-client