Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: psuDhjQfq/tfMkpg+klGfVd0v54s5jpmze2BxSW+M74=
Subject key identifier: 54:4D:B4:3A:BC:6D:3D:B4:25:03:B7:68:C1:0F:67:13:AB:13:E8:ED
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 019D37C07BC2AD501BF38F3628ABCFF65CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 08F8
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: EOInT4h9m4gOrWUQdv0RN3/49z5jAZdHBu1tIznGSg8=)
2: PLI-b-dEqvor_bfeFFOG1C_Iuok.roa (hash: F4VORd4mU+np6RmTvpkvMCjqhk8AClBJilDTjN/zMb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7b:c2:ad:50:1b:f3:8f:36:28:ab:cf:f6:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=544db43abc6d3db42503b768c10f6713ab13e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:65:f9:cf:0b:4b:9c:78:cd:30:82:42:16:
54:ac:ed:2d:d7:96:2c:e1:00:5d:c9:87:2b:99:2f:
39:6a:65:83:9d:d0:48:01:9e:88:5e:c3:e3:bc:50:
6d:98:e5:33:9d:f8:ed:b6:c0:08:01:91:2d:41:49:
e4:12:55:d5:3c:ca:24:f6:ca:35:6e:c7:28:5a:ab:
8a:cd:2c:5e:87:8c:d5:b1:7d:e9:d7:5d:ca:97:53:
ca:2f:d5:04:f1:a3:29:d5:4e:42:50:91:93:35:fa:
da:9b:d6:f8:6a:49:ba:15:cf:43:f5:9c:e7:f6:b8:
5e:a7:33:08:e0:3d:8a:52:49:27:89:61:fd:45:75:
7f:19:f0:d7:06:7f:de:b3:1f:2a:88:31:ae:0c:f6:
07:23:8f:1a:fa:86:d7:5d:f8:df:99:19:34:e1:e0:
25:fb:e2:79:ac:af:8f:3e:fa:65:db:02:55:34:01:
a6:37:a7:6d:44:17:31:a4:5a:b4:03:a1:c1:68:5d:
72:6e:5b:79:5b:a0:09:e6:f8:c4:ff:1b:2f:cf:b6:
75:6c:39:1d:83:e2:eb:6d:6f:12:63:01:4e:cf:04:
d2:af:3b:6e:51:ba:ad:c0:ed:44:16:af:80:54:4c:
d0:0e:18:3c:df:4a:6b:9a:7e:01:8c:95:4f:03:41:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:B4:3A:BC:6D:3D:B4:25:03:B7:68:C1:0F:67:13:AB:13:E8:ED
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:24:3c:cf:8c:c0:bd:75:81:44:bb:ba:b5:15:8a:01:3e:62:
4b:1c:ab:db:07:68:16:19:d2:59:40:7c:3d:83:b7:f6:cf:99:
2f:02:d2:c7:a7:68:dd:97:c3:33:3f:68:d2:55:57:ad:e2:59:
37:3d:03:a2:f0:48:d5:cb:4b:d5:bd:50:a0:81:2c:a4:94:d0:
8b:00:f1:82:48:b2:e5:a8:bb:a6:d7:82:df:f3:c7:a3:f2:6d:
48:6a:0b:24:0e:f3:78:fa:6a:b1:fb:c4:cd:80:1f:17:d7:eb:
f3:c6:39:32:44:92:33:8d:c1:12:4c:5e:d8:20:d5:65:68:f2:
17:22:29:80:f9:85:5d:50:bc:47:4c:41:b5:51:9b:10:61:93:
c9:03:83:58:f9:7f:75:a4:05:2f:38:2a:87:c1:09:8f:9f:3b:
bc:01:39:3d:24:02:20:7a:d9:19:fd:19:bc:94:d7:ac:61:3c:
70:e5:2d:55:27:1b:db:10:a5:0b:40:d6:63:57:b1:d7:1b:be:
5d:c4:c6:98:b6:1e:b9:f0:a8:14:d9:a8:2a:fa:ce:4b:bb:66:
28:f7:fa:83:97:d5:af:27:d8:d4:49:db:ef:69:e8:7b:de:38:
2a:50:96:8d:62:2c:1f:34:2b:e0:2a:3d:29:61:14:d9:0c:1b:
22:a6:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:04 2026 by rpki-client