Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: WAWR2w4lTi6bjTM7klwG9vQ0+RMfHoCRr/OJkHpXmTs=
Subject key identifier: 31:C0:24:E8:99:54:18:F3:61:BA:31:30:08:54:AB:35:1A:53:EB:12
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019F412CAE2F46C3FFBE23566E7EF756E2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 132D
Signing time: Wed 08 Jul 2026 10:01:14 +0000
Manifest this update: Wed 08 Jul 2026 10:01:14 +0000
Manifest next update: Thu 09 Jul 2026 10:01:14 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: kmWi5W1K3ygUzAM5duvf4pVms+8f9fhB1fTsVe6QJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:2c:ae:2f:46:c3:ff:be:23:56:6e:7e:f7:56:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jul 8 10:01:14 2026 GMT
Not After : Jul 9 10:01:14 2026 GMT
Subject: CN=31c024e8995418f361ba31300854ab351a53eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:fa:4d:a1:86:3e:bd:12:a7:13:3b:a1:62:
4a:e9:11:30:64:78:09:42:9d:03:b1:c2:f4:ca:44:
8f:59:b6:35:08:ad:58:06:09:ed:d9:44:ac:49:ee:
cd:bc:a5:6b:9a:83:11:86:15:57:b6:ad:89:06:c5:
33:8c:d3:32:7b:5f:3a:a0:ce:f7:28:d2:db:19:69:
4b:25:ac:08:ba:a5:78:24:6c:2f:24:68:3f:a0:0e:
64:1d:55:2a:05:a5:9c:c0:73:17:3d:39:e6:46:ac:
1d:7b:ef:93:5e:48:c3:ea:fc:c0:f5:3d:bc:96:8c:
c6:7d:73:8c:9f:95:2f:22:05:8f:9d:53:45:0b:d8:
fa:7d:a9:f2:bd:2a:7d:0a:ae:be:76:5e:4c:32:73:
d3:02:9c:62:bb:c5:98:af:e9:e1:89:0e:56:e6:99:
eb:e6:a7:de:a3:17:82:5b:66:59:8e:26:d1:1a:3a:
1a:b8:d5:c9:d1:e2:b8:4e:03:63:93:52:d4:c4:4d:
59:0d:87:1d:59:69:af:0e:09:89:42:f9:8b:82:c1:
86:5a:04:26:80:e9:31:19:97:20:18:61:50:ed:a8:
37:c7:ab:86:e4:78:68:1a:97:56:c4:9c:02:3c:97:
ae:c1:8f:0c:2f:ee:23:22:b4:bf:f8:3b:69:0e:5b:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C0:24:E8:99:54:18:F3:61:BA:31:30:08:54:AB:35:1A:53:EB:12
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f9:47:7f:19:53:91:23:fa:41:f1:25:0a:13:ae:74:52:ef:
68:01:dd:86:65:59:37:2d:20:16:da:e2:4e:6d:13:45:49:95:
08:30:a7:6e:d3:67:c0:07:59:73:1d:80:a4:9d:ab:10:b8:d8:
ce:ee:7d:c1:ed:94:06:bc:93:cc:96:33:df:ff:55:56:75:ec:
a6:f0:49:31:7b:9d:97:ef:b7:25:02:8a:dc:ee:17:82:73:4a:
b3:2a:c9:a2:f3:d8:3b:0b:67:6c:1c:42:02:15:9f:21:5b:66:
f1:3e:6e:fa:a7:6e:88:2f:6f:4d:e6:40:48:85:0a:bf:9a:4e:
44:b6:86:43:70:07:4b:d3:ee:4f:3d:86:22:e7:b8:97:53:e7:
67:82:72:de:0a:4e:bd:7e:d2:2e:7a:76:71:68:85:e2:c1:95:
91:23:46:0a:41:fc:a8:a8:77:35:a0:74:b4:70:a8:08:50:fe:
3b:fa:d3:2a:97:b5:98:3a:12:32:42:81:ee:18:f0:6c:a9:13:
c8:ae:fe:5e:68:b2:4d:63:db:a6:92:a8:fb:40:2b:a6:54:d1:
d7:9d:53:fd:e5:08:1c:8d:92:cd:b5:2c:e5:6b:a9:42:72:05:
9c:6b:ef:a5:63:a8:ad:29:f0:1a:cf:f5:31:83:2f:96:51:16:
1c:ce:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:39:14 2026 by rpki-client