Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: NRiecpKmehBEzaqVAuSLqz4LDP4bTZDNO2YZqqwKioQ=
Subject key identifier: 14:EB:FB:E4:E3:7D:A1:BE:0D:09:F5:C9:6B:A8:4F:FB:09:56:67:6D
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019CAA583A042A1107E12482949DA0CAC912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:34 +0000
Manifest this update: Sun 01 Mar 2026 17:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:00:34 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: Fsj698r8hNc7XzYZtT62SsdHKgD3dvxh1ycA/FNh5JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3a:04:2a:11:07:e1:24:82:94:9d:a0:ca:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Mar 1 17:00:34 2026 GMT
Not After : Mar 2 17:00:34 2026 GMT
Subject: CN=14ebfbe4e37da1be0d09f5c96ba84ffb0956676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:de:d9:17:41:40:b1:18:72:55:2e:e4:b3:
56:e1:c2:3a:5a:4c:35:a0:38:51:7c:f2:e9:0c:c4:
08:f1:f1:f3:3b:8d:40:f3:51:3c:f7:e4:f9:44:25:
22:cb:4e:0b:00:08:af:42:f6:26:5f:1c:cd:6b:69:
35:f9:d0:25:fc:5d:f5:44:22:6b:d2:ff:0b:13:82:
f1:01:ec:87:e1:45:b5:eb:62:81:54:13:24:f0:eb:
66:3c:4d:22:a3:2e:27:31:2b:fd:a7:45:17:9b:2e:
b2:f4:5f:bd:ab:1d:40:a9:2b:03:96:5f:8d:76:f8:
7c:7e:94:b4:ed:02:85:d9:dd:91:b4:c6:ce:f4:c4:
b0:4f:d6:f7:7b:dd:b8:b7:c4:96:11:fc:f4:87:40:
9e:e1:a7:de:14:8d:ef:8e:0d:60:6f:77:a0:cf:fe:
67:8f:af:55:c8:50:a3:a6:27:84:c1:f9:4a:02:ec:
0d:41:4f:5c:81:44:49:5b:10:51:43:24:75:a0:66:
ff:53:6c:af:eb:ba:56:0d:a4:88:23:31:5f:fc:08:
72:a6:3b:25:50:61:3f:6e:86:d2:4d:01:07:07:83:
4b:0c:ce:b9:c6:39:13:11:45:88:b0:c6:7a:70:31:
0d:50:a4:14:42:70:32:12:7f:9a:d4:52:e7:17:bf:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:FB:E4:E3:7D:A1:BE:0D:09:F5:C9:6B:A8:4F:FB:09:56:67:6D
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:0d:32:b0:90:8e:af:27:3e:2e:da:9b:61:91:25:7e:a7:
5b:83:7f:c7:98:4c:38:0e:82:df:5d:50:ab:09:75:c7:18:c0:
0a:41:51:bc:21:2b:13:63:01:fb:60:63:de:e7:de:44:51:db:
56:b3:c7:f4:10:09:99:66:30:13:b0:1d:cd:ae:78:12:4b:1a:
bb:15:87:c2:d1:ea:04:84:78:b0:6e:c5:0d:e0:8e:68:7f:b5:
1c:d9:d5:6e:49:68:3f:35:6f:72:f3:76:5a:95:e4:66:e2:75:
3c:10:a3:7c:b5:1b:b5:29:38:1a:37:4e:7a:2c:89:18:97:76:
b7:2d:ee:9b:17:69:c8:d3:3a:28:7e:0c:08:bc:60:73:f9:29:
4f:4d:e1:56:ca:09:b7:0f:d1:b8:75:3d:67:ba:a8:96:ed:2d:
1a:ac:f4:61:ab:a8:6c:d5:93:99:e7:e3:82:a7:bc:28:d7:0c:
88:c9:58:54:84:20:60:27:94:de:95:fb:eb:94:cb:d7:0b:86:
e1:c0:c7:a8:e7:23:93:30:41:d6:c5:76:1d:14:e3:6a:8f:3e:
f5:0c:f4:83:ca:e4:0f:54:0b:b5:62:bf:7a:97:90:81:88:37:
3f:9c:25:76:29:50:54:93:fb:61:3c:ce:ad:e7:2e:d1:e6:1f:
f4:63:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:31 2026 by rpki-client