Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: tbPoXojz+ou3lDyWzeyDB6PPRtuSxHKC037+EVXTkBA=
Subject key identifier: B3:26:72:A6:1B:21:01:AF:55:57:21:D6:7D:5F:CA:EB:FF:AF:96:42
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019D39AE5CB100FC716ED266E1719ADEE166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1220
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: QMxnkGY5ppkIKzNENKm9QfSmdMZpleuIMqr9m+PeQ/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5c:b1:00:fc:71:6e:d2:66:e1:71:9a:de:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=b32672a61b2101af555721d67d5fcaebffaf9642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:32:ec:72:95:71:c6:30:d6:49:8f:ec:69:
97:e7:22:9f:72:5a:5f:b8:b4:20:91:a5:52:64:20:
3e:bd:78:75:83:c2:63:b8:52:bb:d1:83:a0:77:ea:
d4:3c:56:9c:e6:65:2d:fe:6f:a8:af:5a:2f:ff:a4:
e2:b4:9c:5a:83:b0:9d:cf:9a:7e:08:f5:a1:79:03:
6d:e6:56:fe:69:c6:98:a6:5e:30:7d:8d:df:81:c4:
b8:e6:02:cc:b2:0e:fe:1f:e5:76:af:16:ba:db:14:
d0:4a:4d:d6:21:ce:51:35:5e:20:50:76:f4:29:d6:
ef:18:bc:83:02:49:b1:d5:75:4a:70:e5:b7:29:6a:
20:29:df:0f:e0:b2:9e:bd:26:cb:6b:b2:25:6b:cb:
4c:94:fd:51:df:80:8f:53:4f:fe:f0:0d:62:93:95:
96:29:e6:59:7d:30:3e:47:36:f4:bf:62:3a:66:c9:
69:f6:4c:93:b2:cc:72:09:50:f9:a3:0b:b3:97:b2:
08:66:b2:a4:b9:df:98:5a:11:53:88:fa:a7:65:0a:
f6:e3:68:1a:8c:a0:21:9e:e8:63:b6:d4:98:1f:dc:
cb:e9:94:1e:63:fe:c7:4a:86:72:a7:16:36:bd:f2:
eb:58:c7:bc:26:87:83:6a:fe:a5:ab:c6:6e:64:c8:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:26:72:A6:1B:21:01:AF:55:57:21:D6:7D:5F:CA:EB:FF:AF:96:42
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:42:2c:8b:cf:70:63:4e:af:24:3e:12:64:25:04:3a:6d:7a:
2d:1c:c9:5a:00:7f:2a:34:f4:25:66:21:e7:8c:71:8b:01:d2:
78:0a:ec:19:a0:9b:84:39:66:b2:32:a9:2c:0e:e5:3f:7f:fb:
1c:ff:38:da:a8:82:d6:94:87:58:d1:06:a3:6e:21:68:89:5a:
7a:dd:54:d9:63:19:62:2a:50:49:57:a9:3b:68:00:3e:57:06:
d3:26:41:03:ba:00:ba:7a:ec:f5:8a:da:ac:fc:74:8a:ca:b0:
48:a2:91:de:3d:07:51:ed:5e:af:a0:0a:90:c9:cc:60:e9:ef:
6f:ac:92:73:44:30:d7:32:8a:37:15:8b:ce:c2:52:1f:a5:f0:
15:c7:9e:1d:27:3b:14:12:dd:9e:23:82:f3:1d:7d:42:85:1c:
42:55:e6:fb:5c:52:32:42:7d:eb:aa:21:66:86:0f:23:05:d6:
a2:60:db:fc:f1:20:2b:b8:e8:5e:22:0d:79:49:2f:8e:17:5a:
03:62:d1:33:7c:4e:73:9e:dd:9c:a4:4d:b5:d0:c1:a2:b0:c9:
9b:ba:6a:b9:5b:a7:f3:2f:32:87:2a:7d:4e:10:7c:77:2e:a9:
4b:cb:49:2a:7b:0a:3a:98:5b:56:69:13:0f:64:31:0a:50:a0:
ee:6c:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:21 2026 by rpki-client