Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: tQftpdJeszD59H5Z9UgXkXpf+aQaQURp0rmyhzn2Tbc=
Subject key identifier: 96:3B:0A:B1:20:64:73:AA:AC:46:8F:07:B8:5D:7E:3C:28:4F:6B:91
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019EB7D7C66870385E941A1FD1AA8106ACA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 138A
Signing time: Thu 11 Jun 2026 18:00:31 +0000
Manifest this update: Thu 11 Jun 2026 18:00:31 +0000
Manifest next update: Fri 12 Jun 2026 18:00:31 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: hxZuT8T80p+eaNKr6+36cAye4/4EKWLYHUVDGxCoKN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:c6:68:70:38:5e:94:1a:1f:d1:aa:81:06:ac:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jun 11 18:00:31 2026 GMT
Not After : Jun 12 18:00:31 2026 GMT
Subject: CN=963b0ab1206473aaac468f07b85d7e3c284f6b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:6a:24:01:44:bf:ad:72:e5:97:56:02:f0:
98:48:1b:cf:59:e6:ec:f2:ba:83:cc:37:f7:60:ac:
88:54:27:e7:70:0f:96:20:cb:fc:9f:99:96:08:26:
b2:bd:61:a4:a6:b6:7c:46:04:2b:e0:66:4c:47:39:
2f:3c:27:f2:c0:3d:b5:54:ab:51:d2:86:16:f9:3f:
59:d1:8b:36:6b:ec:56:e9:66:20:f0:81:62:85:dc:
e8:d1:24:4e:9a:45:c3:ea:01:ea:01:be:6c:fb:51:
05:7e:23:85:f0:df:aa:a5:9d:99:66:fc:67:a6:51:
50:f3:7a:30:27:39:0f:b9:45:76:e0:da:32:af:87:
6d:a5:d3:51:d0:24:be:58:71:f8:1e:46:4c:71:ef:
51:de:0d:8b:b4:93:5d:92:10:fc:22:2b:98:fc:31:
01:94:22:22:5c:2f:31:fe:29:5a:e1:d0:b5:c5:41:
b6:cb:53:da:6f:b2:b2:29:99:64:8b:26:c7:1c:9c:
9e:96:27:af:66:2f:7e:a5:9f:a8:98:00:d0:18:54:
4d:1c:cc:c8:42:b0:38:14:d5:b3:c2:aa:12:54:9e:
e1:42:ed:fa:4f:48:76:f6:d1:f9:b1:5d:de:ba:3d:
c3:ee:bd:85:fc:78:31:9d:70:95:3e:2c:45:24:0e:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:0A:B1:20:64:73:AA:AC:46:8F:07:B8:5D:7E:3C:28:4F:6B:91
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:a3:38:21:8a:e5:86:db:eb:b9:d9:57:51:52:3b:c4:a5:
aa:48:a4:1e:c8:b1:17:84:17:24:15:44:f9:e1:be:6f:11:10:
23:06:05:16:92:b7:19:2a:78:55:a8:17:fb:8c:29:89:12:cf:
37:f3:55:40:ea:33:27:25:81:44:23:90:6f:37:f8:0e:7f:66:
f4:8d:61:f4:4d:a5:be:db:57:b6:f0:10:24:3d:16:d5:99:ff:
e2:bb:56:f6:cf:74:3b:35:04:d7:96:f9:ce:98:93:2b:25:1f:
f9:ee:3e:2e:4a:43:34:10:13:1a:e4:fe:a1:f9:12:a5:35:23:
6d:65:7e:95:b6:63:9e:f8:cf:e5:5d:7d:dc:d5:42:24:04:e6:
04:0d:97:fc:68:5b:c6:ae:ef:de:3a:be:50:64:2c:1d:74:7e:
2c:28:a7:55:c1:85:fe:b4:ca:88:1d:e1:b2:a0:ff:71:f4:ea:
b6:e8:df:1b:9e:8c:69:7c:1b:89:a8:0a:d5:f5:6f:41:d6:14:
92:12:0b:67:0e:71:68:3b:04:13:b7:27:6b:8b:49:47:33:7a:
9e:20:1e:d3:e4:5d:fd:ea:c8:e1:47:d4:6e:b4:7b:7d:8e:4d:
13:ab:52:93:3c:7c:74:0b:e4:87:bd:79:cc:45:60:ca:66:1e:
d3:c4:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:08 2026 by rpki-client