
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: L2MFUwiNPUB4mAZSvpjFIr0HKB8rKtozhFni4NpQObQ=
Subject key identifier: 9C:57:4A:EB:DF:54:0A:DC:D4:AD:59:83:BF:AC:AE:48:3B:C5:18:C3
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 01A089B09A18C6837AA355E3E9139738E74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 0AB1
Signing time: Thu 10 Sep 2026 05:00:47 +0000
Manifest this update: Thu 10 Sep 2026 05:00:47 +0000
Manifest next update: Fri 11 Sep 2026 05:00:47 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: 2EPprCdKmXj7Yn9L04yX6fVuZ3iwOKB70hZXQCEiGQk=)
2: pf20ZfIH95O0FG4Yr-GbCP_yFxo.roa (hash: E2FPfOev5punY+1ouImPhZN1NeiLYR9MTzXCvsujI5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:9a:18:c6:83:7a:a3:55:e3:e9:13:97:38:e7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Sep 10 05:00:47 2026 GMT
Not After : Sep 11 05:00:47 2026 GMT
Subject: CN=9c574aebdf540adcd4ad5983bfacae483bc518c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:4f:9d:25:b5:4a:48:3c:29:29:a2:1d:11:
96:32:92:4e:bc:bf:8e:49:98:83:eb:33:10:58:c5:
8a:b0:12:d3:8a:99:1f:69:5c:78:ea:2f:61:98:95:
f1:11:10:8b:68:00:08:db:60:c8:ae:2a:27:98:17:
48:14:9a:aa:b4:df:5a:2b:aa:50:78:91:f6:8e:c5:
5c:68:af:db:07:10:30:c3:1e:74:b1:f2:58:a4:40:
8e:18:c4:a9:af:4d:30:8e:bb:f1:97:8a:30:ea:ab:
ca:bd:40:83:e1:5d:d5:b7:26:5f:f5:e9:74:d1:c4:
e0:52:e6:7b:af:12:2a:ff:ba:1f:b0:79:a1:ae:4a:
44:35:79:dd:aa:60:bb:cf:26:f1:13:23:f2:c9:ff:
02:53:dc:57:0c:bd:b0:55:69:41:97:cc:cb:1c:a5:
24:c9:e0:9e:72:36:af:e5:29:0c:9f:3b:99:28:2a:
a1:57:25:ad:f9:98:7e:24:c4:26:28:fc:47:43:93:
83:87:c4:30:92:50:34:b7:df:32:fb:95:ff:d2:82:
65:64:76:65:59:fe:e7:94:21:63:b5:54:20:4c:72:
e9:79:93:d9:08:af:38:1e:63:da:3a:2a:0d:9b:8b:
ca:62:df:7e:21:9a:a8:0c:53:8c:7a:4a:94:87:c4:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:4A:EB:DF:54:0A:DC:D4:AD:59:83:BF:AC:AE:48:3B:C5:18:C3
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:c1:3b:6d:de:81:64:d6:9a:bd:52:3f:4e:c7:04:ec:c4:
f4:af:81:c7:b8:45:b0:c2:85:3c:f2:1a:75:b7:f3:f9:17:6c:
2b:10:69:d4:4a:54:85:cd:f5:b8:c6:08:f6:03:a0:ec:d8:c6:
0e:3c:7a:3e:b1:a9:b5:b4:c0:ad:81:b0:02:f6:23:a9:09:c3:
4e:ea:58:4e:19:a6:9d:b7:70:78:7f:5f:b9:f7:96:8d:a2:66:
4f:2d:01:23:bf:57:97:0c:22:ea:bd:a0:82:5c:9e:04:dd:66:
63:64:7a:8c:27:22:69:95:0e:1f:c0:9f:3c:d2:e7:4e:1f:00:
16:5b:48:fc:89:05:a7:05:26:0c:8a:f5:8a:75:5c:8b:92:b0:
62:c2:68:11:c5:7b:c2:ec:ed:ce:15:29:16:0c:ff:75:65:fd:
d6:6a:bf:6d:f9:62:3d:68:6d:79:b1:f7:6a:88:b5:5d:af:91:
45:5b:83:d1:29:36:73:39:3d:64:63:5c:06:25:84:8c:05:69:
8e:6f:84:42:31:0d:7a:67:f2:5d:eb:19:a1:9f:92:1f:bc:f4:
1d:91:f2:66:c4:e6:19:dd:23:57:b1:3a:95:2d:03:d6:7f:87:
e4:1c:3b:c0:77:e5:bf:5d:f5:47:01:22:6a:7c:2f:a0:5f:91:
5d:b3:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:28 2026 by rpki-client