Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: Syg00HhSZPBW2kJ98sWc6zgg5Zn38hNG8ExCL8wPkaw=
Subject key identifier: B6:94:90:47:05:24:22:6A:DF:17:93:6C:6E:29:95:B3:04:D2:7F:E8
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019CE636857761C68F9F9896D46D6ABC13C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 141C
Signing time: Fri 13 Mar 2026 08:00:58 +0000
Manifest this update: Fri 13 Mar 2026 08:00:58 +0000
Manifest next update: Sat 14 Mar 2026 08:00:58 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 4EdVkRF5ERhbSJ3rZUlTUzbtBQWNaqdL/wnXDSMZofk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:85:77:61:c6:8f:9f:98:96:d4:6d:6a:bc:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Mar 13 08:00:58 2026 GMT
Not After : Mar 14 08:00:58 2026 GMT
Subject: CN=b69490470524226adf17936c6e2995b304d27fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:6a:7f:bf:9b:71:61:be:91:86:c8:b6:b3:
cc:68:8e:86:ae:7a:ce:06:4b:31:5b:95:cc:ed:cc:
96:a9:3f:11:65:cb:95:a9:d2:bd:03:da:b0:4e:92:
6a:a6:56:2d:b8:e7:e7:98:db:90:65:89:c3:f5:5b:
45:a7:a1:03:e0:78:4c:1a:ca:c7:46:0f:98:73:31:
c0:c7:d5:72:e3:23:af:a6:bf:73:32:ea:2c:24:a3:
21:96:5c:0a:9f:53:6a:82:cc:24:db:71:09:15:0a:
0e:20:36:02:a3:59:93:8c:03:67:a3:6f:5e:60:b1:
f6:c2:e1:5c:2f:b9:84:5a:7f:04:e3:cf:fd:bb:ba:
99:6c:91:63:99:b5:19:e1:54:8c:76:d4:a1:9e:37:
66:e9:26:9a:1b:68:ce:78:51:d0:d1:65:97:c0:90:
8e:35:56:21:1e:a1:4e:35:3b:45:bd:04:cb:f7:53:
ef:ec:3e:32:a7:d4:af:bd:a9:c9:f3:d2:21:a4:2e:
b7:ae:d8:0b:1f:68:e6:2e:51:86:1f:bd:7e:c5:71:
69:b6:42:cd:24:89:45:50:16:b8:ac:42:74:e5:6a:
27:02:84:88:27:aa:fd:8f:f6:cb:0b:69:41:ad:e1:
4f:15:c0:1f:6b:18:d5:b2:87:1c:67:b3:f6:ce:08:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:90:47:05:24:22:6A:DF:17:93:6C:6E:29:95:B3:04:D2:7F:E8
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4b:f2:a9:51:3a:01:91:cd:2e:7b:d8:d8:bd:f5:59:0b:d8:
4f:eb:db:54:f8:1b:ec:16:3f:0d:d2:0f:ca:87:83:0e:d8:9c:
2e:33:9b:35:56:34:ac:de:8b:d6:46:12:13:9e:2a:ef:28:23:
f7:a3:a8:8a:00:94:c2:c7:b4:f4:65:13:b8:50:c3:7b:44:7f:
41:80:5c:0b:10:bb:52:e0:74:93:7e:f4:ae:e8:11:c9:69:1a:
be:09:7b:6f:01:55:af:e5:df:42:49:9e:95:aa:76:68:73:7d:
d8:50:e8:43:a5:d0:6f:ca:d5:f3:17:fd:d1:e0:49:d4:28:d4:
0b:ca:16:9a:06:a3:1d:96:b1:a0:02:38:1f:f0:54:76:8e:78:
28:4a:d7:6d:bf:5c:ee:54:3b:c0:71:f8:34:0b:26:fb:db:44:
31:62:04:8b:9d:27:41:e9:32:ea:ae:45:cd:d2:73:b7:0f:f9:
3a:c3:48:ec:08:b2:00:bd:8d:5f:79:ff:fb:91:1b:f7:24:da:
da:81:f1:a6:bf:b8:ca:b7:55:e0:9f:97:70:ae:81:5d:1f:45:
c2:fa:1a:38:16:e9:70:89:ba:7a:0d:e0:05:f6:e2:c8:71:00:
ae:87:b5:5e:81:31:f2:3c:a8:5a:2c:c3:6c:bb:80:39:8e:6f:
de:e8:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:57 2026 by rpki-client