Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: PIGvKfHf+SzdNG4P3D6VB2krK/1UzUuwHswm6muVUrs=
Subject key identifier: 3C:D9:E6:B5:A0:E4:40:A5:4D:B9:A7:D5:31:85:D3:8E:66:13:6B:51
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019FAB62F38CFBB1358AB08B8A2D2E0DC5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1364
Signing time: Wed 29 Jul 2026 01:00:16 +0000
Manifest this update: Wed 29 Jul 2026 01:00:16 +0000
Manifest next update: Thu 30 Jul 2026 01:00:16 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: +KUWcdi0lJccfGVSy254ZA1CzrYRTvvoew54qZXmdF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:f3:8c:fb:b1:35:8a:b0:8b:8a:2d:2e:0d:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jul 29 01:00:16 2026 GMT
Not After : Jul 30 01:00:16 2026 GMT
Subject: CN=3cd9e6b5a0e440a54db9a7d53185d38e66136b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:a4:bb:5f:a1:dc:c3:dc:b9:b0:6c:33:c8:
ad:ce:8a:59:80:40:24:b0:6c:ef:76:a1:54:4f:be:
7b:f1:40:ae:77:5a:c3:50:5d:8f:f9:a2:ba:36:dd:
2f:81:e4:f2:cf:ce:ca:df:4e:79:e9:6e:2c:af:17:
8b:2f:64:48:6e:03:b5:56:9e:c0:d1:e2:3e:b9:df:
f5:c5:5a:ca:87:7c:45:21:bb:69:d3:76:c2:74:37:
ca:d1:65:b1:4f:ec:d1:9d:86:ed:df:fa:ed:ab:ed:
c4:d5:56:0c:c2:a1:02:97:52:a0:e8:99:a7:5c:d6:
3b:01:f8:7a:3a:bd:7c:8f:57:86:69:e1:03:7f:75:
1c:c4:7e:b8:3d:b1:34:54:45:29:fe:11:5e:9b:62:
92:89:8c:3d:1d:9e:c9:a7:bc:09:7b:3a:4e:29:cd:
51:93:f9:f6:21:ad:ba:64:08:71:93:ec:eb:70:40:
ee:06:c8:aa:88:24:e5:33:ba:9f:ea:6a:cc:0c:67:
b0:39:00:71:ad:cf:b9:bd:b4:b6:57:dc:47:24:1e:
ff:b7:ed:17:3d:0b:b7:15:d7:15:95:45:32:e8:f8:
11:46:db:a3:24:f3:88:7c:eb:7b:5f:4b:45:95:aa:
25:23:f1:d3:d0:b6:93:f7:41:2a:74:f2:43:da:e8:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:E6:B5:A0:E4:40:A5:4D:B9:A7:D5:31:85:D3:8E:66:13:6B:51
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:38:fd:c0:36:cd:94:a9:f6:7e:39:4c:ff:21:cb:52:b8:
d1:77:7c:6b:64:cf:55:d0:5c:63:b7:3c:cd:36:17:c0:05:90:
d7:b4:ae:51:1c:00:d5:2e:01:27:b0:7a:30:01:ee:de:06:bd:
74:78:d4:7a:f0:e6:f4:7a:d3:08:b3:7c:eb:d8:07:e0:12:97:
d3:c3:83:d1:b7:76:e3:5c:28:6f:f1:33:07:14:a6:84:c3:97:
23:55:ab:7b:bd:59:11:2c:87:96:79:17:7d:75:6f:23:83:f3:
15:ed:d4:d8:60:b2:d6:41:31:c5:0c:af:2e:8a:39:0e:24:09:
47:97:6a:11:89:7b:9e:1f:2b:b1:70:ce:3f:56:9d:b7:10:1e:
f8:f4:33:f7:44:13:0c:e6:bd:b9:09:36:6c:3c:e4:f4:81:ac:
fa:d9:c6:93:e9:51:ab:a5:de:c2:8c:a2:8f:a9:75:d5:dd:ca:
1b:42:c5:a3:9c:04:3a:5f:3b:f4:4c:2c:87:67:a0:9e:68:f5:
1e:7c:a5:01:c8:2a:10:99:45:5e:b6:cc:ff:05:02:0b:9b:0b:
9d:a5:51:f0:c9:ac:ed:89:c7:f0:86:5c:7b:03:91:df:84:84:
81:7a:dc:82:83:54:b7:c4:ca:f0:5e:0f:83:54:d2:ce:21:3b:
c2:fa:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:33 2026 by rpki-client