Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: 4+cAR3pPr9nDn4+3p6ILXcg04UV630CBN3S1TFXI8YA=
Subject key identifier: 59:F5:6D:BE:8B:44:F7:5C:D9:A1:64:EF:6B:AA:1C:BB:47:95:E3:7A
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 01A1539BE7879A1162432382C55AF3739A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 01C0
Signing time: Mon 19 Oct 2026 10:01:28 +0000
Manifest this update: Mon 19 Oct 2026 10:01:28 +0000
Manifest next update: Tue 20 Oct 2026 10:01:28 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: GXVtgWCQAHd6vfnkRIzcztTpep2rxhfQEEg/7p6Kjjo=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:9b:e7:87:9a:11:62:43:23:82:c5:5a:f3:73:9a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Oct 19 10:01:28 2026 GMT
Not After : Oct 20 10:01:28 2026 GMT
Subject: CN=59f56dbe8b44f75cd9a164ef6baa1cbb4795e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:6f:09:fa:02:f9:0d:9d:f1:50:0e:99:b3:
af:b0:42:6b:2e:53:eb:57:1e:d2:52:25:56:b7:c4:
0f:84:ca:b1:73:1e:d9:eb:0d:9a:5c:38:a9:3b:ac:
b9:00:2d:9b:48:5a:2b:ab:88:92:d5:ba:3c:be:c1:
0a:35:e4:0a:bb:f6:37:0e:a3:d5:06:8d:0b:ef:49:
b7:0b:9c:5f:36:21:1f:f8:33:d3:aa:e4:a9:58:2d:
dc:bb:44:eb:44:63:7a:05:53:ee:65:34:50:2f:a7:
f6:29:93:59:53:d1:f2:6a:cd:aa:b7:db:62:85:38:
85:48:05:18:40:1c:48:af:a5:54:ac:83:87:41:6f:
e4:21:4c:52:91:f0:4f:5f:61:93:c4:d9:00:46:2b:
30:1a:a1:ed:3a:f9:c2:ee:9d:fa:fb:c5:8f:5e:2b:
28:2d:97:ed:e4:74:45:44:ab:bb:da:cc:cd:a5:15:
95:8a:c1:86:86:68:c6:83:f5:f9:45:f3:ba:e5:ce:
6f:36:72:c6:29:6f:1c:99:62:b3:92:b6:f0:30:ec:
6f:31:ee:95:b7:23:45:be:a6:6e:40:e2:3a:9b:fc:
fd:96:ca:4a:0b:01:fc:a4:c7:1e:cc:97:21:d4:be:
01:df:72:af:94:03:c5:23:dc:3b:f7:e9:58:7d:6d:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:6D:BE:8B:44:F7:5C:D9:A1:64:EF:6B:AA:1C:BB:47:95:E3:7A
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:93:07:94:85:36:de:e5:ef:03:15:92:14:91:5c:12:52:05:
a7:d5:a5:27:35:6f:16:f7:f7:38:4d:d4:7e:8d:44:ec:f9:5f:
60:15:52:7a:6d:65:ac:69:5e:a3:20:c3:f4:58:18:2a:a4:ec:
ca:03:98:c4:17:1d:f9:ec:d3:7b:64:92:69:a1:48:01:ba:5f:
fd:ca:d0:24:f4:92:df:b9:93:f3:73:7a:cc:8d:c3:c8:9d:73:
c3:0d:e0:a3:ce:d7:d0:53:9f:4c:6b:53:03:40:ea:a4:b0:b3:
c5:78:8c:35:99:33:2c:1c:23:0a:3e:98:c9:5d:40:f2:38:9d:
fc:7c:65:a1:26:2b:ec:0a:a6:50:bb:c3:f8:be:9a:88:d3:15:
2a:a9:48:ab:14:c7:d8:98:1a:5f:96:db:e3:a0:60:ab:cf:0d:
27:98:b4:af:6b:71:66:cd:ab:f2:c1:ca:1c:c4:06:6f:71:f0:
03:b1:43:70:4d:7d:d7:7c:4f:1a:9f:89:9d:c3:97:ce:90:d3:
e7:a2:69:ae:a6:a1:42:cf:8e:1f:ab:17:4d:2c:ed:9c:a7:2a:
e2:b6:27:77:88:30:85:7c:64:c3:bd:2f:38:88:72:74:64:d8:
43:cd:e9:c3:35:51:08:8c:f6:df:92:37:bc:ce:ed:b5:6f:af:
54:66:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:09 2026 by rpki-client