Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: IM8uZw/aft8hCbm6AGwPcVgsxyP4St6F+wZTQE3FEwc=
Subject key identifier: 1D:9D:23:BF:08:57:E9:96:FA:CF:D9:80:D5:20:0C:11:7E:9F:AD:AF
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019D39419C7AFA4B838B1E9C2E2FAB38C2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 1gA+n/713PJkw1N+O3SHzBSK77/Ez7qZ/GGF7eK3O1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9c:7a:fa:4b:83:8b:1e:9c:2e:2f:ab:38:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=1d9d23bf0857e996facfd980d5200c117e9fadaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:ba:e6:62:eb:cb:14:f3:77:af:55:9f:86:
5e:94:e3:65:98:c3:3d:48:98:4b:60:ad:b6:ff:60:
c9:00:3f:ad:e4:2f:30:2c:7e:c7:ab:7c:72:af:9e:
c5:7e:06:74:4e:12:bb:e4:10:93:8d:8c:d6:c8:bf:
a7:bb:18:6d:48:30:6a:5d:16:7c:4d:b8:56:ea:96:
20:0c:a5:4f:16:f6:05:3d:1b:2a:28:22:74:4b:f0:
af:e4:8a:e3:5a:77:f7:af:98:a7:7a:74:f5:d5:13:
7c:e3:b7:a2:22:70:71:aa:e4:95:b5:05:f3:97:3a:
b5:67:74:6f:23:25:59:ee:98:ac:a0:2a:2c:88:85:
ed:b3:88:47:d4:b2:e5:e4:96:ba:6e:70:7c:aa:75:
c9:2c:d7:b0:47:34:10:99:30:d0:d0:63:9a:9d:11:
df:f0:2f:d4:fe:db:24:09:5f:f3:4a:8c:e1:7b:e3:
82:13:69:4a:f7:c9:42:9a:63:77:3a:a9:2f:9f:10:
e8:3f:f8:e9:02:4b:4b:38:71:f5:65:23:9e:4b:08:
b0:cd:a8:6f:cb:b0:b9:82:bb:a1:5a:38:0a:f8:a4:
af:dc:a6:30:ce:63:b2:65:30:41:ba:60:d9:ea:5c:
61:04:62:2d:e2:82:c0:ed:4d:1e:56:cd:22:10:a5:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:23:BF:08:57:E9:96:FA:CF:D9:80:D5:20:0C:11:7E:9F:AD:AF
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fd:4e:98:33:4c:6a:ff:b3:93:f0:d0:3a:4c:cb:1f:66:e0:
66:80:cc:59:71:30:fd:37:5d:0f:83:ff:35:d2:7d:19:87:63:
5a:12:4a:ff:9c:3a:2d:f2:10:72:ad:ba:67:fa:16:9d:b2:ff:
69:91:b8:c2:74:b1:69:76:67:15:69:7c:13:f8:59:54:8e:b7:
9f:f4:75:d8:90:3a:cb:6e:29:9e:0d:6d:94:c2:16:b2:d3:d6:
9d:15:ac:c0:f5:ed:61:b5:a5:f3:a9:51:e8:45:ff:12:4f:29:
b3:99:56:fb:b7:59:b3:61:10:fe:6e:c3:24:84:27:40:28:48:
ff:a0:7d:0b:85:ec:76:41:bf:53:14:ff:4a:a3:16:e6:9b:a1:
00:39:76:76:39:25:49:78:54:9f:07:6e:6d:41:d0:44:94:72:
05:fd:8d:6f:34:49:39:e3:a5:9e:b7:e1:30:54:c2:e3:44:69:
fd:e2:3b:1b:81:c7:b0:f9:fa:b3:f7:9a:31:90:8f:11:55:a0:
cc:50:6f:e0:50:c7:66:8d:c4:00:96:d8:c8:ee:93:11:12:67:
12:b4:98:04:2e:88:fc:ee:f5:46:cd:cd:d7:eb:e4:e8:15:99:
8c:d6:50:22:78:bf:6d:c4:20:c1:ff:9c:19:e4:a8:bd:3f:20:
cd:9c:e1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QZx6+kuDix6cLi+rOMKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjYwMzI5MTEwMTM0WhcNMjYwMzMwMTEwMTM0WjAzMTEwLwYDVQQD
EygxZDlkMjNiZjA4NTdlOTk2ZmFjZmQ5ODBkNTIwMGMxMTdlOWZhZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN265mLryxTzd69Vn4ZelONlmMM9
SJhLYK22/2DJAD+t5C8wLH7Hq3xyr57FfgZ0ThK75BCTjYzWyL+nuxhtSDBqXRZ8
TbhW6pYgDKVPFvYFPRsqKCJ0S/Cv5IrjWnf3r5inenT11RN847eiInBxquSVtQXz
lzq1Z3RvIyVZ7pisoCosiIXts4hH1LLl5Ja6bnB8qnXJLNewRzQQmTDQ0GOanRHf
8C/U/tskCV/zSozhe+OCE2lK98lCmmN3OqkvnxDoP/jpAktLOHH1ZSOeSwiwzahv
y7C5gruhWjgK+KSv3KYwzmOyZTBBumDZ6lxhBGIt4oLA7U0eVs0iEKXnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2dI78IV+mW+s/ZgNUgDBF+n62vMB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf1OmDNM
av+zk/DQOkzLH2bgZoDMWXEw/TddD4P/NdJ9GYdjWhJK/5w6LfIQcq26Z/oWnbL/
aZG4wnSxaXZnFWl8E/hZVI63n/R12JA6y24png1tlMIWstPWnRWswPXtYbWl86lR
6EX/Ek8ps5lW+7dZs2EQ/m7DJIQnQChI/6B9C4XsdkG/UxT/SqMW5puhADl2djkl
SXhUnwdubUHQRJRyBf2NbzRJOeOlnrfhMFTC40Rp/eI7G4HHsPn6s/eaMZCPEVWg
zFBv4FDHZo3EAJbYyO6TERJnErSYBC6I/O71Rs3N1+vk6BWZjNZQIni/bcQgwf+c
GeSovT8gzZzhXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:17 2026 by rpki-client