Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: UfjqoSPWCSPHOG8LYuTSG9VgzlRj2x19CuNyRTVQ+pA=
Subject key identifier: DC:0E:18:1B:60:35:B2:66:3E:2D:A0:AE:18:A4:35:21:79:9D:CC:5D
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019EC337C4C67D2381C5677677E376DB9758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 23:01:12 +0000
Manifest this update: Sat 13 Jun 2026 23:01:12 +0000
Manifest next update: Sun 14 Jun 2026 23:01:12 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 7JxpcGCVg8/gKjzOVS7mzj6uFiaHuCnmToT3b8rFR3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:c4:c6:7d:23:81:c5:67:76:77:e3:76:db:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jun 13 23:01:12 2026 GMT
Not After : Jun 14 23:01:12 2026 GMT
Subject: CN=dc0e181b6035b2663e2da0ae18a43521799dcc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:f9:aa:8d:a5:ba:4c:b6:39:93:ad:15:d8:
7a:24:05:bd:ec:52:8c:9b:91:71:41:a3:3e:a9:9f:
65:3d:3d:6e:35:8e:25:64:a4:65:44:a0:85:fb:10:
cd:81:40:d7:1a:7a:e8:9c:e6:39:95:49:14:99:09:
70:df:87:2f:5b:77:ac:e7:25:d0:97:8b:c9:8b:8c:
dc:fb:20:4c:18:d2:19:8f:23:34:70:a2:5f:7a:d9:
24:5c:b8:65:79:24:d0:d2:ba:d0:1e:ca:4f:01:a9:
14:93:17:a9:c6:a5:63:ad:19:8c:2e:0a:fc:43:78:
cf:2f:e0:4e:26:3d:31:21:75:4f:04:ea:b5:07:63:
51:a9:81:b7:e3:8a:85:a4:a8:30:9b:be:1a:b6:1c:
a8:49:5e:82:a7:f0:1d:4a:00:2d:49:2e:aa:a1:81:
68:48:2b:49:09:64:fb:d3:47:bb:5b:7e:5f:7b:82:
6b:52:76:89:d3:f2:d8:c2:7c:37:e0:5a:34:9a:a4:
47:72:74:64:5b:86:e9:fd:94:06:73:04:0d:59:c2:
7b:51:da:93:b9:d0:8e:54:fa:c5:97:34:80:97:1a:
03:85:25:ea:fb:a7:1b:f4:44:0f:72:c9:60:08:f4:
4c:71:05:68:95:f6:20:d8:3e:3b:88:c6:cb:a6:d2:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0E:18:1B:60:35:B2:66:3E:2D:A0:AE:18:A4:35:21:79:9D:CC:5D
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:c8:69:d7:b2:35:9d:c1:93:fa:28:76:47:24:7b:fc:f2:
f3:1e:68:a9:7b:46:f4:97:95:fb:13:31:80:06:5f:5d:13:e6:
95:b8:fd:fa:08:c3:2e:7d:10:54:f4:4b:d6:5b:b5:9e:79:6e:
67:c3:c1:a3:a8:0c:54:a4:f2:c8:88:6c:7a:5d:9e:25:d2:19:
f0:3c:39:89:0b:37:28:be:03:31:dc:28:b0:50:13:d3:93:f0:
a1:e5:0f:20:85:31:a9:5b:6f:68:88:7e:69:7e:b4:f9:0b:4a:
80:4c:c7:31:6a:96:0c:83:6e:9c:83:32:21:71:04:0f:39:50:
a1:a1:5f:5b:fe:e4:f1:18:37:bf:86:17:28:b5:b0:0a:e6:45:
c9:61:0c:b5:39:c5:c3:2a:d1:1f:ed:5d:10:2d:ab:03:e3:af:
1f:07:58:8e:f2:64:b6:7a:cf:bf:f6:96:77:d9:02:24:81:75:
ab:ec:c3:da:21:47:74:5d:d7:0c:e8:31:1c:bf:83:d3:dd:b9:
8b:14:9d:1c:85:af:81:b6:44:0a:b4:ea:71:ff:0e:96:d4:b3:
12:88:2d:48:42:4f:44:1e:36:1b:3f:fc:95:6e:10:c1:84:31:
19:1f:7f:59:42:f6:96:d1:2d:34:c6:64:b4:4d:72:ee:d1:ef:
e3:27:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:46 2026 by rpki-client