Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: T3Q0AwtMlb1kqUtT0nkV19mVgt0Z0cAJNCELkHmf7V8=
Subject key identifier: DC:D5:9B:01:0E:AD:98:6D:81:B4:CA:66:B7:79:83:51:3E:C2:D4:63
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019F5FA51557EEFC558E9FDEBD82BA16F6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 19B0
Signing time: Tue 14 Jul 2026 08:01:22 +0000
Manifest this update: Tue 14 Jul 2026 08:01:22 +0000
Manifest next update: Wed 15 Jul 2026 08:01:22 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: qet3R0VwdHgZ7j/MkgjMqF4dc9/WXy6yuRNiUgRqM4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:a5:15:57:ee:fc:55:8e:9f:de:bd:82:ba:16:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jul 14 08:01:22 2026 GMT
Not After : Jul 15 08:01:22 2026 GMT
Subject: CN=dcd59b010ead986d81b4ca66b77983513ec2d463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:14:4c:9e:82:b8:8b:ab:ac:dd:a7:08:5d:
cf:3e:16:e7:0a:16:23:0c:b6:72:9b:e4:52:ab:4d:
04:b0:55:99:ca:30:50:74:82:4d:bc:dd:d3:00:73:
55:9f:44:99:68:a6:44:c0:8f:c4:13:ee:c8:72:50:
23:fa:a7:ab:e8:79:c8:8d:91:a7:01:91:1b:05:dc:
cc:b4:9c:e4:da:ba:f4:1e:64:ff:26:10:c6:38:de:
cd:84:6a:d4:09:7e:2f:07:7d:5d:a0:11:d2:76:0f:
47:a5:da:b1:c2:51:ac:e6:b1:67:30:91:4a:b8:e9:
ba:a0:49:67:6a:d7:aa:3c:23:6e:95:e8:10:13:8b:
1f:e8:9d:0d:70:ab:34:f2:03:0d:37:b2:ab:14:87:
2c:f9:a1:84:b0:60:f8:4f:5d:3b:3a:6c:15:c6:7b:
cb:77:d9:5f:fc:a5:4d:36:c4:79:ca:2a:3a:22:2b:
f0:d5:a4:f0:c0:be:c9:ec:c2:43:92:52:96:ed:08:
49:a9:9a:fc:d8:e1:51:20:b1:ec:c6:a9:a9:2f:70:
43:4c:c1:8b:8b:07:9f:b3:05:3e:b2:55:4e:a0:d1:
99:ec:22:16:98:ea:b4:3e:91:69:90:9d:5c:8f:90:
09:f6:3c:55:60:a9:19:2d:49:e4:b5:6b:21:65:56:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:9B:01:0E:AD:98:6D:81:B4:CA:66:B7:79:83:51:3E:C2:D4:63
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3c:e1:34:04:f6:a8:6f:30:cd:a2:4a:62:0e:7e:f2:ec:a7:
d0:91:61:c3:0b:94:46:0f:d3:9a:72:d0:6e:99:0a:e1:ef:17:
23:9e:73:7e:34:61:7d:2a:f4:2a:09:51:bb:87:f1:b3:6b:98:
31:2b:3c:8f:b4:87:ea:46:33:5a:d9:29:90:f5:f7:5f:56:f9:
8e:f8:ba:1b:2e:a6:eb:32:d2:33:7d:bf:2a:be:ac:a1:0a:ef:
fd:6e:e6:d4:a1:17:5b:c1:92:e4:d6:d1:e6:70:bf:4b:ff:d2:
ee:48:94:d2:f4:ad:b5:f1:ab:b8:b4:4c:48:18:e0:09:da:71:
2b:b3:82:51:46:ae:d2:de:bb:62:7e:a7:03:ac:30:98:af:5d:
82:6b:96:84:e0:0a:d1:ed:6f:5e:9a:d9:d8:a4:2b:80:68:39:
76:f3:24:dd:4c:ab:d8:be:2e:c7:b3:18:a0:fc:95:d0:42:5d:
48:ae:24:9a:7e:71:bd:ac:79:22:bc:ca:b3:89:cd:6e:42:b5:
27:0f:8b:d2:35:02:5d:84:07:92:6a:f6:63:76:bd:d5:16:21:
42:10:e5:8d:1f:cf:89:23:31:9a:91:5c:d7:c8:08:53:13:cd:
c8:7e:19:3e:c4:04:4d:44:2e:28:4a:03:6d:00:6b:7b:95:28:
2a:15:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 14:41:43 2026 by rpki-client