Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: b75lEswjXNeQILBrK6gsx4qfTBry0QJjfpvnR2BQXoA=
Subject key identifier: DA:7F:F3:DD:54:F5:BA:5A:44:AC:CA:1E:6E:D1:8B:24:1E:AF:07:18
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 01A0DA95FE63611505B8106B421CE293809E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1401
Signing time: Fri 25 Sep 2026 22:00:57 +0000
Manifest this update: Fri 25 Sep 2026 22:00:57 +0000
Manifest next update: Sat 26 Sep 2026 22:00:57 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: XyXPw5vZLC1BqwHyRxoKgo4Q1yN40aONDCfDelMswkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:95:fe:63:61:15:05:b8:10:6b:42:1c:e2:93:80:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Sep 25 22:00:57 2026 GMT
Not After : Sep 26 22:00:57 2026 GMT
Subject: CN=da7ff3dd54f5ba5a44acca1e6ed18b241eaf0718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:50:79:b4:da:39:be:85:1e:cf:cd:ff:01:
12:76:e6:67:4b:64:4d:8b:d0:76:74:3c:7c:80:b2:
c5:d1:59:6f:fb:72:d5:5d:e5:7e:f8:df:4b:bd:da:
7f:0a:1d:4f:67:ae:68:bf:21:0d:ac:04:df:99:1e:
8d:5c:dc:ac:7d:17:0d:c0:6e:c7:70:79:34:1c:49:
fb:d8:59:7d:54:d3:11:3f:fc:60:5b:84:a1:04:b1:
dc:92:62:71:24:58:f6:63:22:cf:f2:f0:72:a0:95:
dc:60:93:cd:c7:92:ed:fb:a9:9d:52:f1:ca:71:a3:
34:04:6a:20:c7:2b:80:4f:3c:0f:ad:4e:51:0e:28:
00:b4:68:77:79:de:10:7e:36:7f:fb:7a:9a:ed:a4:
c8:24:9a:da:c3:46:00:27:19:57:9d:03:54:9a:d3:
8f:31:27:71:22:78:2a:3a:11:c9:40:b3:5d:9e:0e:
b0:0c:52:ad:c1:70:7a:bc:03:f4:7a:8d:68:17:f5:
c6:25:37:bc:e8:ab:9e:12:53:65:40:2d:da:9c:89:
4a:d9:6d:5f:b1:76:0d:fa:cb:63:2e:ac:2f:b2:cd:
c8:e4:a8:f4:53:db:70:95:44:55:a1:6f:d9:9c:30:
9f:98:01:9a:87:99:6b:9f:f9:f2:dc:a6:f7:67:27:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:F3:DD:54:F5:BA:5A:44:AC:CA:1E:6E:D1:8B:24:1E:AF:07:18
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:40:80:52:28:98:ce:78:1b:bf:65:3c:01:97:7c:c3:f6:76:
26:69:16:c8:0f:83:57:47:30:a9:06:0c:cd:af:38:ac:75:21:
b5:d0:1e:c4:33:21:1f:4a:29:d7:69:20:04:d6:c5:93:21:c3:
3f:8f:6c:e5:0f:1b:43:51:40:ce:f9:1e:42:3f:13:e3:2d:f1:
4c:90:e6:24:3e:42:10:fd:1a:c2:d8:f0:db:3f:b3:dd:62:5d:
bb:d1:00:fd:f0:ab:66:73:0b:4e:2b:07:ac:af:6e:9b:42:be:
f9:35:49:a1:22:ae:a4:2e:78:8f:db:12:3a:f0:3b:58:7e:fa:
44:cd:6a:75:d0:cf:78:e1:18:80:d7:61:72:a2:33:fe:54:83:
86:ea:bb:42:b9:0a:a1:6b:4f:96:2c:b3:9b:81:49:f7:89:21:
55:0c:4e:d1:8e:ce:e3:4d:02:95:05:8c:ec:a0:6f:ff:63:63:
84:42:61:05:b1:10:b2:ac:86:87:8f:bc:91:09:49:8a:cb:91:
71:80:ee:e9:7a:4b:64:e1:be:73:e6:8b:c0:b8:06:b9:07:e4:
a5:b0:cb:4f:e7:28:4a:de:90:f9:cd:74:c7:c9:f1:03:25:5c:
f4:d2:0e:a3:0c:36:1b:53:80:cf:38:62:76:6b:a4:eb:cb:02:
08:16:c5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalf5jYRUFuBBrQhzik4CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjYwOTI1MjIwMDU3WhcNMjYwOTI2MjIwMDU3WjAzMTEwLwYDVQQD
EyhkYTdmZjNkZDU0ZjViYTVhNDRhY2NhMWU2ZWQxOGIyNDFlYWYwNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJQebTaOb6FHs/N/wESduZnS2RN
i9B2dDx8gLLF0Vlv+3LVXeV++N9Lvdp/Ch1PZ65ovyENrATfmR6NXNysfRcNwG7H
cHk0HEn72Fl9VNMRP/xgW4ShBLHckmJxJFj2YyLP8vByoJXcYJPNx5Lt+6mdUvHK
caM0BGogxyuATzwPrU5RDigAtGh3ed4QfjZ/+3qa7aTIJJraw0YAJxlXnQNUmtOP
MSdxIngqOhHJQLNdng6wDFKtwXB6vAP0eo1oF/XGJTe86KueElNlQC3anIlK2W1f
sXYN+stjLqwvss3I5Kj0U9twlURVoW/ZnDCfmAGah5lrn/ny3Kb3Zyd9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp/891U9bpaRKzKHm7RiyQerwcYMB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0CAUiiY
zngbv2U8AZd8w/Z2JmkWyA+DV0cwqQYMza84rHUhtdAexDMhH0op12kgBNbFkyHD
P49s5Q8bQ1FAzvkeQj8T4y3xTJDmJD5CEP0awtjw2z+z3WJdu9EA/fCrZnMLTisH
rK9um0K++TVJoSKupC54j9sSOvA7WH76RM1qddDPeOEYgNdhcqIz/lSDhuq7QrkK
oWtPliyzm4FJ94khVQxO0Y7O400ClQWM7KBv/2NjhEJhBbEQsqyGh4+8kQlJisuR
cYDu6XpLZOG+c+aLwLgGuQfkpbDLT+coSt6Q+c10x8nxAyVc9NIOoww2G1OAzzhi
dmuk68sCCBbFOA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:55:47 2026 by rpki-client