Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: yhcSNXN4O87Z1eA4y1jXNHjaHYyXoEwZVi32JJrAGco=
Subject key identifier: A0:65:F6:48:5B:C5:60:66:30:A6:4E:CB:4E:8D:45:80:2F:A5:4C:0A
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019E577F99C0C57BD95CF9B0C99FF7F805F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 12B4
Signing time: Sun 24 May 2026 01:00:40 +0000
Manifest this update: Sun 24 May 2026 01:00:40 +0000
Manifest next update: Mon 25 May 2026 01:00:40 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: px4bZlo/S5zxHN+dLamCop3y7hNOwX/PPHwGrIPkyUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:7f:99:c0:c5:7b:d9:5c:f9:b0:c9:9f:f7:f8:05:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: May 24 01:00:40 2026 GMT
Not After : May 25 01:00:40 2026 GMT
Subject: CN=a065f6485bc5606630a64ecb4e8d45802fa54c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:77:c2:94:5f:37:f9:bb:86:00:cf:31:32:
1e:ed:d9:55:47:23:65:ae:0a:49:98:87:71:00:11:
0d:65:47:e9:02:0d:5c:a8:81:d7:88:d9:9c:47:13:
c3:22:ec:24:ff:e0:2b:7f:c6:c1:79:95:bd:73:d4:
b6:07:73:25:4f:1f:9d:34:13:14:9a:e1:23:56:0d:
cb:07:75:31:0b:2c:55:c7:d0:e9:01:d1:b7:29:40:
c2:d3:1f:c5:76:1a:26:57:7e:8a:71:b0:e6:ee:8e:
a7:33:63:ca:77:72:9a:5d:f3:81:42:11:7d:94:9b:
52:4a:22:ff:6c:92:f3:18:36:e5:c2:26:e1:22:64:
14:43:22:b6:bd:a2:09:ac:f8:15:26:21:43:70:56:
58:fc:3a:6f:99:ae:1d:ae:eb:f4:9c:6e:54:7c:93:
47:e3:11:4b:e2:f0:0d:78:e4:a5:27:4e:fc:51:18:
05:a9:f4:0a:1c:99:79:b0:ad:31:c2:0b:77:81:50:
fd:41:30:36:4d:c8:1a:d4:8b:ed:d4:45:ea:2c:b7:
41:0a:d0:6f:71:ca:7a:4f:de:b6:df:72:c7:a5:87:
f1:88:59:38:2f:ea:cf:c6:5f:cb:d6:3b:4f:28:1d:
7b:ec:ff:2f:2e:21:80:1a:77:98:09:73:87:1c:07:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:F6:48:5B:C5:60:66:30:A6:4E:CB:4E:8D:45:80:2F:A5:4C:0A
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3e:4a:b1:1d:ce:62:46:d2:1c:e3:ca:96:d7:2f:69:c2:f5:
19:a4:1e:5a:b2:a9:c6:7d:c7:b8:95:0a:5b:a2:4f:8e:5b:b1:
9c:2d:1a:15:3b:56:5d:7d:e3:ac:a2:39:6e:f8:2a:74:b7:68:
16:8c:a0:2c:19:af:c4:3d:ce:46:86:8a:b3:13:cb:42:23:36:
85:f2:f6:b3:74:f4:c0:9a:44:82:42:59:f2:2e:28:20:4d:2e:
e2:91:62:c4:14:62:a6:66:09:dd:81:5f:28:86:bc:82:53:03:
9e:ac:0b:a9:19:86:9d:e4:63:ed:e0:aa:0a:18:15:a5:c4:25:
0d:f9:f0:fa:d9:05:26:43:23:d5:5f:61:78:e6:80:f7:e6:0d:
2b:5d:77:af:39:b5:23:9e:d5:a2:1a:0f:d2:6e:ab:e8:b3:a7:
64:2d:e2:bb:3b:6c:f8:12:38:7a:09:e0:e7:ad:05:89:0c:cc:
30:eb:90:0c:b6:72:e5:63:6a:c5:48:90:2e:fa:d1:5c:c4:44:
2c:c3:03:cb:43:2c:3b:d2:12:e8:72:f4:dc:f8:97:13:3a:96:
1e:ca:57:e1:fa:89:70:a9:5a:91:6a:67:ae:f1:57:bf:77:88:
bc:73:a3:ca:21:56:c2:c1:5f:3b:92:4f:3a:80:c9:93:ca:31:
7f:87:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:03 2026 by rpki-client