Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: UWJKIqX9gLKSoBprraJCq9n6f5uRQHz6uPG8LyF4fRg=
Subject key identifier: 99:C6:16:99:27:F4:23:9D:46:5B:68:03:C8:FA:76:FA:98:DC:E3:20
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 019E32CF5F1122EF43B3F3D36656104EB46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 21
Signing time: Sat 16 May 2026 22:01:51 +0000
Manifest this update: Sat 16 May 2026 22:01:51 +0000
Manifest next update: Sun 17 May 2026 22:01:51 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: jqWl9vEIPtMWT0v27T6Rt5bsMYlPKW9WRLFiDHzpP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:5f:11:22:ef:43:b3:f3:d3:66:56:10:4e:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: May 16 22:01:51 2026 GMT
Not After : May 17 22:01:51 2026 GMT
Subject: CN=99c6169927f4239d465b6803c8fa76fa98dce320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:12:7e:9d:c7:48:8b:d3:6b:49:b6:46:eb:
60:a4:7d:76:d4:9d:df:e0:ce:e2:08:07:a4:92:f5:
78:99:74:e8:6a:08:65:25:4e:d9:c1:8b:6d:88:88:
64:a6:78:d2:09:69:49:10:9d:46:ca:f5:97:40:8c:
43:93:e4:d7:fd:6b:52:dd:55:a6:03:bf:22:3e:aa:
97:22:02:0c:4e:21:4d:d0:88:f4:61:8a:c2:90:b5:
d9:49:ee:5b:ae:19:60:44:d4:47:73:10:4d:ee:ce:
e4:75:a7:fe:aa:d6:83:31:ee:0c:90:b9:cb:f0:5b:
3c:2c:ca:53:5e:5a:65:bf:63:c1:e8:22:67:a6:9a:
43:ef:23:a0:43:04:f6:4e:e0:12:72:f4:88:d9:bb:
10:b7:f9:98:45:14:70:82:c7:7e:d3:15:8a:a5:2a:
34:f3:c9:ba:e6:91:33:6b:07:08:36:38:9b:9b:09:
0f:f3:af:e1:1e:de:99:fc:b3:36:6a:96:1b:01:a4:
c7:61:64:dd:e9:2b:84:c1:89:0e:69:01:5b:4b:62:
f6:c4:fa:05:2d:f9:6d:82:3e:7c:4c:2a:15:a4:af:
f8:60:82:a4:88:57:30:0d:62:92:4a:d7:63:0b:87:
6c:2d:c8:0a:5c:41:6e:48:a2:18:70:2f:5a:89:d6:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:16:99:27:F4:23:9D:46:5B:68:03:C8:FA:76:FA:98:DC:E3:20
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:b2:02:2e:e7:cb:74:64:01:42:b9:be:49:49:81:75:5b:
cc:9e:ac:eb:bf:f3:d4:0b:11:aa:f2:dd:0b:eb:5d:00:43:ed:
39:d0:5d:83:b4:86:c5:3f:ad:66:c4:4e:80:bd:25:81:89:39:
1c:d9:75:66:0b:4c:b7:1c:c9:b9:ac:13:56:53:85:50:5d:15:
02:b5:14:94:b7:b4:23:2b:9f:2b:36:2d:87:a3:c4:f3:b5:a8:
07:8b:62:0c:e1:06:65:6a:87:a3:86:ac:3d:d3:88:f6:10:43:
f7:95:52:68:0c:9b:a2:11:79:c9:2f:6b:f9:be:22:e8:dd:ce:
cc:46:7c:c2:7e:c8:29:f3:39:af:dd:66:f6:c8:30:a1:88:44:
26:06:4a:e4:65:f1:61:30:13:96:ea:c1:89:e0:ec:b3:3f:75:
fb:92:b4:7b:18:d2:97:b9:a8:42:25:35:c9:e6:c4:86:19:e4:
fc:2f:6a:9f:5c:69:57:01:24:a2:94:dd:c7:22:cf:59:ea:24:
40:d2:95:44:73:13:12:09:e6:b4:b3:3f:9d:32:bd:72:cf:26:
5d:1a:87:53:61:88:70:f2:80:36:45:06:cb:64:b4:7a:e3:86:
e8:5f:95:0a:52:9b:dd:b1:99:55:f2:eb:a3:31:b8:29:a5:a7:
24:4e:57:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yz18RIu9Ds/PTZlYQTrRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjU3MWI0MDY5NzZjOWZhZjg4NzczMDI4MTljZjU1MGU3
OWUyOWQwHhcNMjYwNTE2MjIwMTUxWhcNMjYwNTE3MjIwMTUxWjAzMTEwLwYDVQQD
Eyg5OWM2MTY5OTI3ZjQyMzlkNDY1YjY4MDNjOGZhNzZmYTk4ZGNlMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kgSfp3HSIvTa0m2RutgpH121J3f
4M7iCAekkvV4mXToaghlJU7ZwYttiIhkpnjSCWlJEJ1GyvWXQIxDk+TX/WtS3VWm
A78iPqqXIgIMTiFN0Ij0YYrCkLXZSe5brhlgRNRHcxBN7s7kdaf+qtaDMe4MkLnL
8Fs8LMpTXlplv2PB6CJnpppD7yOgQwT2TuAScvSI2bsQt/mYRRRwgsd+0xWKpSo0
88m65pEzawcINjibmwkP86/hHt6Z/LM2apYbAaTHYWTd6SuEwYkOaQFbS2L2xPoF
Lfltgj58TCoVpK/4YIKkiFcwDWKSStdjC4dsLcgKXEFuSKIYcC9aidYWPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnGFpkn9COdRltoA8j6dvqY3OMgMB8GA1UdIwQY
MBaAFIZlcbQGl2yfr4h3MCgZz1UOeeKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mZGM3NDEtNWY2Ni00NDZkLWE5NDQt
NWJjOWE2M2NlYWY2LzEvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mZGM3NDEtNWY2Ni00NDZkLWE5NDQtNWJjOWE2M2NlYWY2
LzEvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw+yAi7n
y3RkAUK5vklJgXVbzJ6s67/z1AsRqvLdC+tdAEPtOdBdg7SGxT+tZsROgL0lgYk5
HNl1ZgtMtxzJuawTVlOFUF0VArUUlLe0IyufKzYth6PE87WoB4tiDOEGZWqHo4as
PdOI9hBD95VSaAybohF5yS9r+b4i6N3OzEZ8wn7IKfM5r91m9sgwoYhEJgZK5GXx
YTATlurBieDssz91+5K0exjSl7moQiU1yebEhhnk/C9qn1xpVwEkopTdxyLPWeok
QNKVRHMTEgnmtLM/nTK9cs8mXRqHU2GIcPKANkUGy2S0euOG6F+VClKb3bGZVfLr
ozG4KaWnJE5XTw==
-----END CERTIFICATE-----
Generated at Sun May 17 01:09:22 2026 by rpki-client