Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: Met8GPjLXec5BL7bkcQAN1hW+P/ScQ8ayQ41Y8oiJ28=
Subject key identifier: 64:A3:5C:9F:33:CB:7F:B1:99:7B:65:F3:18:FF:29:4C:63:67:EA:06
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 01A1863F8593F35A919D5C612E050737CC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 11AE
Signing time: Thu 29 Oct 2026 06:01:12 +0000
Manifest this update: Thu 29 Oct 2026 06:01:12 +0000
Manifest next update: Fri 30 Oct 2026 06:01:12 +0000
Files and hashes: 1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: 0osPeX65IohSKf+FC8sCVQNFDRqeHiZTpf1RB20HjAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:85:93:f3:5a:91:9d:5c:61:2e:05:07:37:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Oct 29 06:01:12 2026 GMT
Not After : Oct 30 06:01:12 2026 GMT
Subject: CN=64a35c9f33cb7fb1997b65f318ff294c6367ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:e3:39:2f:50:de:34:78:59:e9:93:e9:9b:
23:f8:1e:0d:78:4f:6a:37:90:4b:ff:50:b3:d7:8d:
7a:8d:71:8f:54:c4:6e:17:b3:33:d6:94:24:2c:e0:
0e:92:c6:9f:43:80:fb:df:22:45:c1:58:7b:f3:d5:
70:95:cd:ec:c3:95:dd:b0:c0:33:0b:cc:64:87:40:
22:14:12:bd:d0:41:d6:ab:97:31:ad:50:fd:33:c2:
cd:be:05:ae:1c:9f:35:ac:ed:63:28:d5:b3:cd:09:
88:bd:28:2a:0d:df:83:e4:e3:db:2c:b0:a3:8e:8e:
fb:f9:8c:8c:11:f4:ca:21:5d:cb:bb:e3:ec:eb:db:
e0:0b:0a:69:88:be:03:97:48:db:4f:9c:78:a3:5c:
b3:d8:57:f5:6b:10:2e:6a:5e:c2:2c:5b:31:a4:d9:
b3:ab:c4:6d:38:d2:9f:e0:df:e8:f1:91:e3:28:49:
8a:ce:db:85:bb:bf:c6:22:04:e4:f7:86:0f:98:e5:
89:ab:cb:f0:16:9e:35:a4:59:e7:ca:a6:67:c3:2a:
09:ee:18:3c:a6:18:6c:47:71:c3:c6:ab:f7:47:0e:
ac:02:4e:46:6d:c2:0b:bc:a7:d7:63:da:87:c7:ea:
57:9d:d6:8c:38:10:e3:c4:e7:9f:c5:9a:db:58:9c:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:5C:9F:33:CB:7F:B1:99:7B:65:F3:18:FF:29:4C:63:67:EA:06
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:19:10:4d:4c:a1:16:b1:4f:84:eb:95:5a:df:c4:1f:65:6e:
4f:a5:6a:85:2f:f1:bb:e9:56:88:88:98:1e:2c:fa:e9:a6:12:
f8:a7:33:61:f5:35:1f:d7:d5:ba:ce:15:76:35:9d:ce:81:3f:
bf:91:d9:a1:3b:3d:76:4e:9b:cc:a1:5b:d4:25:ee:bf:63:03:
5b:1c:62:43:64:c2:c4:40:2e:35:77:9c:a2:8e:be:53:18:cc:
fd:e1:a8:28:66:19:13:c4:97:a7:c5:b2:48:04:24:04:f3:6d:
51:66:2d:a5:1f:83:f3:8c:17:cc:cd:93:c9:eb:82:0b:10:27:
e5:c7:21:21:d4:0d:36:2d:94:91:dc:ba:78:31:9b:96:22:d6:
f0:e3:6b:47:7b:3b:37:2f:b0:37:1a:e6:52:64:3b:aa:5d:e2:
c6:12:3e:be:1c:12:0b:b2:d1:5b:02:f4:4a:2d:4a:b5:70:0d:
9f:0f:1e:35:b5:b0:0c:a9:bb:55:3b:c5:06:f0:ab:ca:57:29:
a0:30:fe:26:e0:50:3f:d1:1e:ea:a5:7a:2b:4f:6f:b0:32:d3:
97:7a:3e:4d:43:9b:b1:f7:c8:98:44:4b:d4:af:3d:2b:c9:37:
a0:6a:64:3e:1a:85:25:da:f4:5f:d9:cc:22:fa:e5:dc:5b:20:
bf:9d:77:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGP4WT81qRnVxhLgUHN8xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk
ZjM3MmQwHhcNMjYxMDI5MDYwMTEyWhcNMjYxMDMwMDYwMTEyWjAzMTEwLwYDVQQD
Eyg2NGEzNWM5ZjMzY2I3ZmIxOTk3YjY1ZjMxOGZmMjk0YzYzNjdlYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKfjOS9Q3jR4WemT6Zsj+B4NeE9q
N5BL/1Cz1416jXGPVMRuF7Mz1pQkLOAOksafQ4D73yJFwVh789Vwlc3sw5XdsMAz
C8xkh0AiFBK90EHWq5cxrVD9M8LNvgWuHJ81rO1jKNWzzQmIvSgqDd+D5OPbLLCj
jo77+YyMEfTKIV3Lu+Ps69vgCwppiL4Dl0jbT5x4o1yz2Ff1axAual7CLFsxpNmz
q8RtONKf4N/o8ZHjKEmKztuFu7/GIgTk94YPmOWJq8vwFp41pFnnyqZnwyoJ7hg8
phhsR3HDxqv3Rw6sAk5GbcILvKfXY9qHx+pXndaMOBDjxOefxZrbWJxndQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSjXJ8zy3+xmXtl8xj/KUxjZ+oGMB8GA1UdIwQY
MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt
ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw
LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxkQTUyh
FrFPhOuVWt/EH2VuT6VqhS/xu+lWiIiYHiz66aYS+KczYfU1H9fVus4VdjWdzoE/
v5HZoTs9dk6bzKFb1CXuv2MDWxxiQ2TCxEAuNXecoo6+UxjM/eGoKGYZE8SXp8Wy
SAQkBPNtUWYtpR+D84wXzM2TyeuCCxAn5cchIdQNNi2Ukdy6eDGbliLW8ONrR3s7
Ny+wNxrmUmQ7ql3ixhI+vhwSC7LRWwL0Si1KtXANnw8eNbWwDKm7VTvFBvCrylcp
oDD+JuBQP9Ee6qV6K09vsDLTl3o+TUObsffImERL1K89K8k3oGpkPhqFJdr0X9nM
Ivrl3Fsgv513Jw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:50:36 2026 by rpki-client