Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: f2bYdC/AbXHRXFleFSFfMRL8fnxfFoLiWFlyr7xhGoY=
Subject key identifier: 23:21:38:FD:45:41:68:6B:13:38:7F:49:43:52:AD:3D:01:AB:78:C6
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019DCDF55898F36F0A14E75E9797F6EF5114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 1494
Signing time: Mon 27 Apr 2026 08:01:41 +0000
Manifest this update: Mon 27 Apr 2026 08:01:41 +0000
Manifest next update: Tue 28 Apr 2026 08:01:41 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: SzlhzK1CK7heVPXWpYR0cSqjdq98fcteSNbojPPYlX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:58:98:f3:6f:0a:14:e7:5e:97:97:f6:ef:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Apr 27 08:01:41 2026 GMT
Not After : Apr 28 08:01:41 2026 GMT
Subject: CN=232138fd4541686b13387f494352ad3d01ab78c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:57:a9:e0:88:fb:73:2f:7f:09:aa:aa:25:
cc:e0:5b:49:74:a4:a1:39:ed:b3:de:a2:b0:b6:12:
79:bd:19:7e:b9:1f:60:c0:7d:79:88:e1:1f:c3:6e:
af:60:59:0a:a5:68:db:22:1c:2a:dc:30:86:9a:66:
e3:88:f4:57:e3:e5:1b:34:7a:11:c5:cf:a1:92:63:
90:31:8b:50:f8:1b:35:44:e7:49:12:93:ca:24:f6:
fb:76:07:56:03:b3:47:f1:99:98:75:f3:0c:ee:3e:
1e:29:69:5c:6b:b1:56:d1:bc:dd:6d:4d:ab:6f:d5:
15:0e:e7:23:6b:69:ff:63:4b:16:9d:94:77:88:ba:
a1:81:fb:7c:de:c4:b3:d1:84:b4:ba:4e:06:8c:cd:
47:93:69:9a:a8:71:9b:09:f1:92:4a:c7:25:07:53:
1d:31:28:82:fd:24:fe:f4:57:9f:eb:c9:7d:3c:13:
bd:df:38:5b:43:43:68:a4:65:8d:7e:58:fb:e0:14:
ee:25:9e:94:0b:24:c2:4d:df:1d:18:8c:c6:2a:f7:
aa:07:67:e8:93:7b:a9:5a:cb:7a:6d:35:4c:34:15:
f0:66:b7:49:0b:94:32:fd:b1:d2:d0:c2:6e:d1:a2:
f9:9f:1e:18:00:a2:79:13:50:18:0b:8b:f9:92:84:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:38:FD:45:41:68:6B:13:38:7F:49:43:52:AD:3D:01:AB:78:C6
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:72:65:d1:c8:b0:d0:c8:26:7a:e6:e5:4e:c1:e7:24:9d:
e6:55:43:40:f6:db:4a:15:5b:cf:d5:43:0f:0a:80:f8:96:bf:
68:2d:03:e2:87:90:c1:50:a5:f8:af:af:6f:9c:5a:5a:df:b9:
39:9d:e4:2c:0f:c5:0a:b3:51:93:2d:47:fa:45:86:99:4c:2a:
d3:1f:ed:ab:c7:62:31:78:a1:ec:85:24:de:0a:90:5d:21:68:
d8:53:92:73:8b:f5:86:68:0f:2c:a0:34:0c:16:8a:d2:f3:6e:
ee:81:b8:1b:ec:30:74:44:22:c2:e0:ee:60:62:66:88:df:47:
ae:6d:72:2d:f5:38:7c:2f:20:7a:2f:e2:39:88:cc:a6:0c:49:
53:ad:cc:15:e1:d5:9d:76:86:79:41:4f:de:7f:e8:23:f3:bc:
4c:72:88:bb:2d:82:5d:5c:b1:49:59:dd:d0:33:c4:4e:27:5f:
5d:fe:ca:e1:50:ee:14:53:22:fa:79:a9:5c:74:09:7e:55:fd:
5f:fc:8c:b0:a1:9c:75:1e:08:72:5f:96:72:46:55:db:bf:d8:
ec:0e:84:15:48:13:86:39:00:b0:d0:19:cf:4e:49:36:f5:73:
8a:b0:4e:46:2f:06:78:4e:c9:07:47:72:75:92:81:85:7c:23:
08:35:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:18:01 2026 by rpki-client