Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: 6RG/AFU3eWwgqhWUyCpcBQTuAztwb7UQuLgvIjKFOT0=
Subject key identifier: EE:68:FC:5F:1E:85:F6:E6:4F:9F:04:3C:B0:56:DB:56:AB:A6:A5:97
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019D37C0AC5A1C6DED1FD3BDAAD1C16A44F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0DD6
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: 1gdE/oHH+66lWlM/wEARzsiw68oPWAcgVtlUop4CgQc=)
3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ac:5a:1c:6d:ed:1f:d3:bd:aa:d1:c1:6a:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=ee68fc5f1e85f6e64f9f043cb056db56aba6a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:1b:03:5c:9a:a9:34:ed:da:8b:ca:6b:ed:
12:06:62:a9:09:d1:74:ae:17:ea:05:ae:6c:ad:be:
45:a7:e2:27:ec:7e:34:49:08:37:01:93:a5:55:3d:
18:0e:83:9f:54:08:5e:b5:45:fc:c3:a4:2a:18:f7:
76:09:c8:6e:31:86:b1:f0:09:4f:52:4e:38:95:52:
42:61:d1:b9:4f:90:30:4d:64:c8:65:1f:c1:5d:8d:
e6:d2:c3:cf:b5:f9:8f:7d:da:5f:05:88:86:dc:15:
72:71:c2:1e:90:3a:01:dc:f1:73:69:8f:55:f5:5b:
ca:9e:6d:39:0a:27:5c:00:19:37:f3:32:c5:6e:ac:
30:d8:83:bf:51:8f:58:0a:69:49:da:12:78:7e:85:
dd:b4:8c:4c:77:7c:8d:16:c5:4e:5e:37:5e:a7:d2:
7d:55:41:fc:fe:c2:c3:82:3c:23:8a:9a:d1:7a:a6:
35:5e:16:6f:a6:d1:f0:79:72:73:2e:f8:82:97:51:
ec:51:00:82:66:98:cd:bd:ec:53:80:87:b6:1c:f3:
12:f9:a0:cd:8a:76:94:85:7d:1f:b1:f5:a7:81:b4:
f9:10:c1:f9:43:91:46:6e:67:6e:5d:be:d6:34:8b:
7f:55:85:8b:7f:5b:83:30:17:e6:5f:bf:ea:13:fa:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:FC:5F:1E:85:F6:E6:4F:9F:04:3C:B0:56:DB:56:AB:A6:A5:97
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:c0:42:ae:9a:c0:81:3d:f2:bb:ad:1b:b4:57:88:48:1b:
79:eb:18:38:14:d8:e5:50:96:6d:05:54:a0:6a:90:b0:d8:4e:
69:ae:9f:5c:ce:eb:16:09:93:55:1e:69:c6:cf:f6:96:cc:1e:
56:a9:29:ea:17:d8:e0:90:94:22:ce:5e:66:96:c0:79:1b:49:
e7:7f:fe:bb:8f:27:3c:4e:51:63:88:cf:4f:56:d3:33:c0:b4:
00:3b:59:46:98:35:66:38:1f:1a:b0:ad:57:24:26:6e:b2:5c:
d7:32:69:7e:0b:6c:aa:29:d5:9f:0d:a1:89:1f:56:e2:e7:1b:
59:b8:de:87:4a:ae:d9:4b:b5:a3:90:4b:06:a8:9f:85:ab:73:
03:ff:09:2e:c9:f6:d6:6e:28:54:ef:ed:7e:76:12:24:07:9b:
8b:07:25:fa:85:8c:7a:b4:85:f5:e7:7f:7d:c5:63:22:0c:7e:
78:7b:70:cd:50:ae:38:53:ae:22:e8:8e:be:fb:35:bf:b4:bb:
03:08:f8:89:0b:af:22:29:31:28:39:e7:c0:14:85:3f:dc:44:
6f:ff:5a:66:aa:12:b0:96:62:05:01:2a:45:36:2b:09:40:19:
9d:84:35:4e:7d:29:16:dc:e0:20:4f:af:93:92:1e:9e:1d:e9:
2e:6c:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:20 2026 by rpki-client