Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: 4KWxY885Vs5M3JlOX/yLpvgA5NVxeaiuU3zs6fEkSf0=
Subject key identifier: 24:04:AE:2B:84:94:1F:6B:3C:BB:78:0B:BD:A1:2B:73:4F:B5:66:CC
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 01A08AFA15FF6EF81E27374584C165E9D70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 15FF
Signing time: Thu 10 Sep 2026 11:00:40 +0000
Manifest this update: Thu 10 Sep 2026 11:00:40 +0000
Manifest next update: Fri 11 Sep 2026 11:00:40 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: uHtgGQR10K4d4nFsmRoR1s6R+6nQuQqzOjudvb1x520=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:15:ff:6e:f8:1e:27:37:45:84:c1:65:e9:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Sep 10 11:00:40 2026 GMT
Not After : Sep 11 11:00:40 2026 GMT
Subject: CN=2404ae2b84941f6b3cbb780bbda12b734fb566cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:1b:4c:33:f1:5f:de:45:d1:f7:c2:43:16:
a9:69:e9:df:8c:04:af:2b:24:c6:4e:80:08:38:2a:
07:49:fb:c1:a2:06:0a:52:a6:aa:31:90:04:7a:cb:
91:4a:2e:98:08:01:44:c1:e9:45:0b:d5:c5:b1:d8:
bc:a3:62:f8:89:66:10:1f:03:da:d9:24:40:61:ed:
2f:08:f0:26:36:ff:ac:d1:64:83:79:f0:1d:39:e8:
ee:00:61:6e:b0:0b:5a:f7:22:4b:88:f2:2c:b6:eb:
f2:f5:39:5f:79:61:ec:44:30:69:6d:70:14:d4:a3:
05:c8:b4:41:36:e3:ec:17:2f:0d:86:4c:eb:66:72:
10:f4:ac:9a:e1:76:8e:24:59:42:6b:c8:2b:ca:77:
7e:0d:6a:af:d8:98:06:86:bc:6e:69:65:38:f8:5b:
47:8f:bf:1d:9a:f3:fe:c2:a6:f2:a8:fb:88:b0:f8:
03:11:7c:dd:66:a8:13:62:92:04:84:06:bb:a3:a3:
67:92:99:ce:91:f4:2f:9a:6c:b4:35:8c:8c:79:23:
27:68:29:cf:a6:26:c6:32:96:9c:21:8d:9c:28:90:
fc:88:87:c9:4b:56:7c:4d:d3:b1:41:59:13:82:05:
74:93:26:ba:0f:d7:1f:05:37:76:57:b5:86:80:ad:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:AE:2B:84:94:1F:6B:3C:BB:78:0B:BD:A1:2B:73:4F:B5:66:CC
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:e9:be:e9:3a:eb:73:22:dc:12:83:a3:55:03:19:c9:57:
24:e3:8b:86:2f:7e:7c:fd:22:52:34:6d:ec:9b:6a:f7:ac:59:
9d:08:d6:bf:85:ad:77:a2:6b:2f:d9:26:23:2d:4e:14:e3:1d:
ab:39:e8:cb:0b:79:80:70:bd:44:de:8d:2a:03:77:2f:03:ef:
dd:e8:f5:d0:24:59:b0:7d:a8:db:99:f7:97:dc:2e:e4:06:cb:
2f:11:f8:8f:29:1f:34:03:d6:97:05:d4:1d:84:4d:c3:d7:cb:
82:89:30:18:86:15:8b:66:88:4b:cd:26:fe:c0:86:de:9e:0c:
fc:4e:e6:f2:78:99:16:17:d5:80:95:f8:2e:15:54:2d:b7:c0:
24:92:28:5d:9b:7b:49:c1:46:7a:4a:e9:dd:4b:f1:ba:71:13:
0e:39:7a:97:b0:d1:00:7e:24:c6:28:83:ff:40:fa:5a:e1:3d:
24:61:9a:47:26:39:61:62:54:b2:f0:df:b1:e5:53:2f:be:77:
26:80:d1:66:1e:2d:f8:1f:1a:08:98:09:0e:d3:5a:45:2d:48:
d4:1d:fe:16:cb:5b:64:73:0c:5d:b6:9b:67:42:9f:55:7b:4a:
36:d9:8f:6b:a3:34:cc:18:af:31:5a:f6:e7:30:3c:cd:f9:f2:
fb:2a:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:14:34 2026 by rpki-client