Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: mOAzDnytOWFlAIvBHxIw2db5ivhgTsfF9c2u7iPQIF0=
Subject key identifier: 8F:31:87:83:70:95:2D:44:9F:F9:28:CC:14:09:4C:89:B9:21:00:A4
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 01A003948A562093C5AAF9C64F00BCAAEE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 0112
Signing time: Sat 15 Aug 2026 04:01:01 +0000
Manifest this update: Sat 15 Aug 2026 04:01:01 +0000
Manifest next update: Sun 16 Aug 2026 04:01:01 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: 8RK9vnJOT8rb/ZxGvjycwrpfBnPq7THmP+dDzqYMLMA=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:8a:56:20:93:c5:aa:f9:c6:4f:00:bc:aa:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Aug 15 04:01:01 2026 GMT
Not After : Aug 16 04:01:01 2026 GMT
Subject: CN=8f31878370952d449ff928cc14094c89b92100a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:22:b4:f8:71:08:a0:b7:49:c5:ce:40:84:
b6:e6:a4:96:45:70:10:d4:f4:ce:e6:66:58:22:13:
a0:7c:02:d6:d8:0a:a8:5d:0c:e7:4d:1f:04:91:d4:
87:c2:d9:b7:8e:8d:98:c8:c3:aa:e6:c3:d9:6f:96:
24:e3:09:29:96:ae:2b:42:89:12:ae:97:77:7b:a2:
d8:b8:a7:ba:32:38:8e:64:30:db:80:d6:e0:a0:c9:
5e:6a:10:78:c7:83:cc:7f:9e:5d:45:c7:d9:e5:23:
85:e7:ee:ac:02:4b:d4:26:42:aa:e5:22:72:e9:69:
eb:72:57:6a:9d:9a:11:10:d0:45:a8:60:c9:a8:f0:
dc:18:a1:ce:7e:23:a5:49:85:26:de:7f:c5:e6:6a:
36:85:37:00:da:2c:5b:80:bc:41:37:dd:95:15:8b:
66:c6:40:0c:be:d6:b4:f0:ba:01:22:cd:b9:ab:b9:
d6:63:71:46:7c:9d:2c:46:7b:c4:5f:94:48:8b:61:
71:0a:ee:87:3a:f8:dd:f8:3a:6b:e5:d1:4a:de:af:
83:81:fd:9c:b6:5f:c8:5f:4a:ca:3e:21:b5:d0:4c:
c1:39:be:fe:c0:34:eb:82:09:22:c5:a6:f0:86:a9:
08:35:41:19:eb:cb:16:4e:50:94:ee:f0:c5:fa:39:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:87:83:70:95:2D:44:9F:F9:28:CC:14:09:4C:89:B9:21:00:A4
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:06:fb:c1:6a:d2:9b:b1:e0:74:29:75:e7:ab:2b:82:b7:
4b:bb:d3:0c:58:f8:99:ec:f2:0b:66:74:f7:e8:57:e4:54:1a:
21:6b:a0:ee:8d:72:e5:f8:8b:7b:c3:2b:ab:10:30:c4:03:81:
48:3e:43:0e:c9:96:51:4c:a2:03:1a:98:34:eb:07:d2:f8:e3:
ff:62:58:a1:28:53:1c:37:45:4b:1d:3b:fc:2a:45:40:50:1d:
23:c6:6a:ae:ef:58:7e:e5:63:8d:fb:f6:58:0d:25:7e:85:71:
8a:f1:7e:74:55:9d:df:9f:8c:7a:b2:4b:cd:d0:ba:01:ea:bf:
71:0b:2a:bf:5e:30:ef:d7:d4:a0:07:3c:b0:35:4a:54:22:ef:
7e:8d:c1:99:35:10:da:df:6e:88:c6:21:be:c6:d7:14:f2:95:
ce:3e:90:ab:7f:fa:a8:e4:32:eb:b2:5d:c8:65:36:d7:34:b3:
b0:dd:c5:4b:1d:e4:ba:7e:be:e5:99:ca:3e:da:d2:87:e7:03:
4c:48:fb:c7:39:01:3b:4f:02:e1:07:39:a7:98:15:63:ba:41:
15:5a:88:ea:34:c9:71:1c:75:b7:4d:e7:af:03:bc:51:3d:82:
b5:65:7f:31:e4:89:9e:15:27:79:cf:6c:72:4a:de:c0:84:22:
cc:02:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:21:30 2026 by rpki-client