Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: 3pvgo8qyWJPToRzG0da1Y2ZyzkMpo/ALCfvtyYUwoag=
Subject key identifier: 67:E9:97:05:2E:3F:D5:97:78:AB:15:A2:B2:7D:16:AB:9C:78:EF:59
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019D984FDBB1E5281A6668E61A45AAFE3C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0E08
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: iqRSu2MDcyXKOTrQ/xHxOmxw1tKTJnkCLYdGkMEtVu4=)
3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:db:b1:e5:28:1a:66:68:e6:1a:45:aa:fe:3c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=67e997052e3fd59778ab15a2b27d16ab9c78ef59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:db:cc:46:88:b4:e8:09:9e:5e:dc:ac:a0:
db:0e:38:93:47:13:bd:ba:af:26:e5:2c:5f:df:47:
e7:83:8d:3b:dc:21:b8:d6:70:d0:16:14:54:cc:58:
14:81:51:0b:ec:fe:5e:de:d1:e7:05:99:8a:d0:7a:
9a:51:61:ad:7f:63:c2:ff:5c:ff:ba:e1:e8:b8:71:
3a:10:57:db:fd:44:79:04:58:07:58:e2:09:1f:0a:
91:41:ac:4f:08:b9:4f:e8:97:22:02:e6:5d:90:b7:
1c:88:61:5f:ed:d1:83:72:38:56:5c:96:74:d0:2c:
e6:45:24:ed:0d:90:7e:74:41:1e:e9:6b:68:33:5a:
28:74:2a:47:a9:a7:15:00:56:3d:42:7e:7b:4f:08:
b4:0e:c7:af:e8:b1:6f:41:f7:c5:61:2b:e2:45:60:
53:2d:a6:15:d4:89:8c:cf:ee:04:db:2d:5c:42:ba:
e9:00:c6:68:ce:a9:c7:d8:c9:24:c2:67:f7:f0:18:
b0:16:ab:68:ec:d2:15:e5:ea:4a:50:88:f9:1f:83:
ec:55:5c:3e:7d:71:6b:00:4c:f1:45:4c:ac:81:e6:
de:fd:0b:a1:40:f4:d5:2a:7a:b8:f1:80:10:0a:ce:
ed:c7:1f:10:54:88:f2:44:40:a6:dd:b3:83:62:3b:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:97:05:2E:3F:D5:97:78:AB:15:A2:B2:7D:16:AB:9C:78:EF:59
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3a:84:96:2c:72:bc:f0:08:b2:39:5c:df:1e:aa:76:fe:b3:
5e:16:0b:e6:b0:40:8d:6b:77:35:f4:11:8a:e8:f0:d5:b2:e8:
84:4b:a2:ac:35:f3:5c:59:1a:b1:48:5b:5b:73:45:2d:55:20:
74:65:8e:cd:d0:1e:c8:de:ea:18:70:a1:83:e0:6c:8d:b9:81:
2b:59:33:af:3f:92:c9:e9:ca:18:7e:80:04:fb:0e:93:63:7f:
09:ae:cb:eb:37:a1:7d:99:b7:88:ca:1b:e6:f3:15:66:ab:39:
9c:37:5d:83:50:1c:aa:04:4f:96:4b:d8:62:12:55:6c:77:db:
25:46:21:e9:84:cf:2e:12:74:a8:11:f6:df:a7:eb:ee:66:7b:
56:94:cf:2a:54:50:9b:92:91:e4:de:0d:58:6d:26:10:f5:34:
af:84:74:eb:48:b6:bd:46:56:29:d7:b5:8f:b0:e2:c0:49:fd:
96:ec:06:30:dd:31:91:6b:d1:b7:5d:cf:af:7e:22:7b:34:43:
7f:c5:4e:13:2c:2b:3a:ec:58:6b:52:91:8d:75:7c:b2:6c:1c:
7c:a5:3a:11:a9:11:12:57:ff:67:32:08:9f:6b:75:43:00:b0:
6d:0e:95:e7:6a:85:9e:74:a5:91:2e:88:f9:77:ed:69:d7:28:
79:62:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:52 2026 by rpki-client