Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: n0tBk9BavMa4l53CLJH3PAzVmCaqNooTZMAMp+p77CA=
Subject key identifier: 80:6D:73:61:BA:B6:7A:2D:21:4F:B9:2F:11:01:56:1B:A3:96:52:63
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019E1F47BE1CA7957212599988DD672A2F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 03:00:55 +0000
Manifest this update: Wed 13 May 2026 03:00:55 +0000
Manifest next update: Thu 14 May 2026 03:00:55 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: low22c/2OLZPdIxbrr1/RxBwJCGX1zyQZKjx0gOT7g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:be:1c:a7:95:72:12:59:99:88:dd:67:2a:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: May 13 03:00:55 2026 GMT
Not After : May 14 03:00:55 2026 GMT
Subject: CN=806d7361bab67a2d214fb92f1101561ba3965263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:f0:fb:8c:66:f2:82:72:30:9a:5a:04:66:
54:16:14:53:5d:1d:32:2e:18:f5:a9:b1:6c:a3:68:
28:68:7d:f8:87:65:38:22:fc:e9:2e:d6:0b:d6:6f:
49:87:2a:df:62:d2:80:c0:d1:f9:24:bf:e4:e6:b6:
a8:6d:68:5d:1e:7c:f5:88:bf:4c:15:40:d4:08:32:
92:35:55:2c:5f:41:69:b4:4c:36:fe:56:be:88:68:
ee:ed:2e:8e:47:e6:28:4b:23:70:70:88:35:3a:bc:
42:67:3a:6c:e9:8f:6e:6a:1e:13:09:7b:12:f5:b5:
c6:7c:34:c0:d8:6b:db:b1:3f:2c:b0:0a:f6:6e:0c:
34:46:90:64:b6:ba:2b:9f:e8:dc:e6:00:b7:cf:ae:
91:57:0d:e1:50:7e:31:45:a1:7f:e9:47:b0:7d:0c:
5f:e0:f7:b8:26:12:3f:e0:5f:1a:c6:9a:ab:9d:71:
93:df:ba:f5:21:1a:ba:0b:1f:5d:ed:e7:33:41:5a:
c2:26:bc:79:7d:c2:a3:ca:a9:78:a2:13:c9:9a:17:
74:13:b0:70:8f:c8:17:1c:ae:88:1c:5b:94:df:a8:
ad:cc:83:c8:0d:d8:15:cf:b7:75:b1:41:8c:26:13:
cc:47:79:3c:8d:91:cf:f2:a2:32:54:46:47:83:1c:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6D:73:61:BA:B6:7A:2D:21:4F:B9:2F:11:01:56:1B:A3:96:52:63
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:95:b0:b0:65:2f:7d:d2:7a:c0:3d:73:a9:7f:4a:77:a5:
40:0a:42:a1:ad:18:da:40:92:f1:5b:6d:9c:75:f3:43:01:e0:
2d:28:c6:01:a4:49:d0:32:95:55:86:ce:1d:c7:22:c7:76:c8:
e7:75:22:3a:72:4b:07:a9:de:f3:57:a4:94:83:8d:69:58:f5:
bb:d6:f3:b2:14:cf:fb:e1:aa:20:c4:53:f3:4f:79:f5:2d:c6:
b1:99:33:9a:6e:b6:6a:cb:65:44:13:4f:3f:09:31:97:7f:44:
10:bb:21:7e:44:fb:5a:ac:71:cf:c4:51:d8:0d:af:e7:24:1b:
e2:b1:01:41:67:83:dc:5a:f3:bc:fe:78:3f:c1:5b:f6:80:78:
8c:84:9f:f0:60:8c:41:8e:9d:28:28:f9:1a:bf:d2:a3:2b:98:
3b:d1:0e:d1:20:9a:c6:64:d3:91:2a:7b:93:f6:36:00:83:e0:
48:9e:1e:9c:29:b3:ad:5f:c0:05:85:fa:01:d1:59:5e:9a:63:
30:80:df:bf:77:aa:84:d7:80:f2:d0:bb:f3:9a:1d:da:6b:bc:
84:cb:7f:69:ce:a6:2a:11:91:4d:c0:39:a3:7c:c0:e6:34:92:
79:ef:29:a5:06:94:56:72:1b:2c:6c:14:43:93:78:2d:54:a6:
a8:93:70:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR74cp5VyElmZiN1nKi9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4
NzJmYzIwHhcNMjYwNTEzMDMwMDU1WhcNMjYwNTE0MDMwMDU1WjAzMTEwLwYDVQQD
Eyg4MDZkNzM2MWJhYjY3YTJkMjE0ZmI5MmYxMTAxNTYxYmEzOTY1MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMvw+4xm8oJyMJpaBGZUFhRTXR0y
Lhj1qbFso2goaH34h2U4IvzpLtYL1m9JhyrfYtKAwNH5JL/k5raobWhdHnz1iL9M
FUDUCDKSNVUsX0FptEw2/la+iGju7S6OR+YoSyNwcIg1OrxCZzps6Y9uah4TCXsS
9bXGfDTA2GvbsT8ssAr2bgw0RpBktrorn+jc5gC3z66RVw3hUH4xRaF/6UewfQxf
4Pe4JhI/4F8axpqrnXGT37r1IRq6Cx9d7eczQVrCJrx5fcKjyql4ohPJmhd0E7Bw
j8gXHK6IHFuU36itzIPIDdgVz7d1sUGMJhPMR3k8jZHP8qIyVEZHgxzREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBtc2G6tnotIU+5LxEBVhujllJjMB8GA1UdIwQY
MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt
ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh
LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcCVsLBl
L33SesA9c6l/SnelQApCoa0Y2kCS8VttnHXzQwHgLSjGAaRJ0DKVVYbOHccix3bI
53UiOnJLB6ne81eklIONaVj1u9bzshTP++GqIMRT80959S3GsZkzmm62astlRBNP
Pwkxl39EELshfkT7Wqxxz8RR2A2v5yQb4rEBQWeD3FrzvP54P8Fb9oB4jISf8GCM
QY6dKCj5Gr/SoyuYO9EO0SCaxmTTkSp7k/Y2AIPgSJ4enCmzrV/ABYX6AdFZXppj
MIDfv3eqhNeA8tC785od2mu8hMt/ac6mKhGRTcA5o3zA5jSSee8ppQaUVnIbLGwU
Q5N4LVSmqJNwVg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:36:00 2026 by rpki-client