Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: QTSIaGOttSoJ/28n1nyoFoxePEFRqPc9fqi6wiy4LHc=
Subject key identifier: 0A:E4:F4:4F:44:2C:64:4A:8A:9B:44:3B:AB:A1:B8:0B:F2:CF:43:99
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019EB98FB0ABBE773008F78041DD637778B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 150E
Signing time: Fri 12 Jun 2026 02:01:02 +0000
Manifest this update: Fri 12 Jun 2026 02:01:02 +0000
Manifest next update: Sat 13 Jun 2026 02:01:02 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 8fOPolt/WYrWZ1ihzg3E8tbSjilpfZHK2RZNuuhO6BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:b0:ab:be:77:30:08:f7:80:41:dd:63:77:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jun 12 02:01:02 2026 GMT
Not After : Jun 13 02:01:02 2026 GMT
Subject: CN=0ae4f44f442c644a8a9b443baba1b80bf2cf4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:57:51:c5:a5:e3:24:8f:4d:9b:9f:a7:32:
e1:2e:f0:cc:19:70:81:3e:7d:ca:5a:f8:08:d8:ac:
4b:eb:ca:74:db:13:9f:e3:b9:d1:9f:9c:4c:b1:87:
3e:b4:b9:e4:3d:ac:18:b1:15:22:dd:7d:85:f9:47:
c1:e7:65:e4:c8:f4:67:e1:cd:3f:57:68:fc:fa:d7:
8f:82:56:6e:bc:3f:5b:8a:7c:a0:2b:c0:e4:d0:48:
83:aa:b7:4c:74:8b:36:38:56:6a:16:df:b5:a4:be:
f1:87:d0:3c:c6:23:fc:df:cc:42:e3:a6:d9:79:33:
ce:bf:f1:b0:5d:9f:aa:48:17:90:b7:b3:be:0a:1f:
17:41:e9:b1:e3:bf:d3:72:33:b3:70:b5:0a:3f:9f:
13:a0:6c:ec:a2:4c:63:41:b3:dd:ea:57:84:01:08:
12:9f:f3:a3:95:c1:de:1c:2c:6b:1b:68:58:71:d6:
24:91:08:d1:41:f7:8e:de:25:3a:ba:85:6e:a3:ef:
44:ea:e3:1b:6c:80:17:24:49:6e:98:e1:3c:a1:81:
23:51:9d:b4:a2:f1:cb:97:e7:61:c4:10:71:34:2b:
70:e8:8a:fe:da:b6:18:8b:34:8c:1e:de:a7:36:8d:
2d:15:64:76:3d:ba:ae:51:7d:cf:4e:a6:1e:25:c9:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:F4:4F:44:2C:64:4A:8A:9B:44:3B:AB:A1:B8:0B:F2:CF:43:99
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:9c:ad:b3:32:02:17:96:6c:f3:3a:98:1b:72:4e:ab:d1:
63:a7:55:a9:1e:ed:a4:47:e9:7d:fc:2a:84:45:7d:26:71:8f:
b3:ad:4c:1d:0a:fd:bc:05:01:58:d4:1c:30:77:4c:30:42:53:
5d:b8:e4:f1:37:7b:b6:c1:a5:c5:b2:0c:ed:e6:40:16:e1:ba:
c3:c2:14:45:d3:ca:bb:66:55:67:ba:c5:fe:98:09:4b:7e:62:
ec:30:f5:ed:12:da:2e:21:61:4c:68:58:ec:a4:72:9c:e5:c7:
7a:37:05:b6:5d:5d:a1:de:c9:82:63:09:72:9b:74:68:ac:77:
2c:f5:5e:2d:d1:63:a8:78:6b:4b:68:04:66:88:8b:d7:22:9b:
11:da:93:bf:e8:11:bf:ce:c2:ba:7b:fb:83:cc:33:ae:e5:98:
32:48:e1:56:06:08:45:05:60:9f:9a:2b:50:d5:30:e9:ae:ac:
49:ae:d9:a8:00:06:06:14:e6:85:1f:50:3a:2c:f6:98:1a:61:
f0:02:b9:b2:60:a5:ad:4c:fe:d3:40:5f:87:15:1a:cc:7a:2f:
be:c1:a7:d2:5e:d4:09:ac:bd:0b:f7:e9:e0:ff:d8:9d:d0:7b:
f9:8b:69:02:fd:f3:10:ef:2b:84:55:5e:cc:61:1c:ef:cf:01:
bf:fb:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:45 2026 by rpki-client