Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: zfAX6bPuNT+KPCunSzMrPciD1r6asXomz9JBKDQLQ2I=
Subject key identifier: 6B:72:23:42:F4:7D:4A:17:99:EE:1D:70:DB:C3:AB:94:D0:07:06:28
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019F924879F10445CFBF5D470BDFD25D1ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1357
Signing time: Fri 24 Jul 2026 04:00:51 +0000
Manifest this update: Fri 24 Jul 2026 04:00:51 +0000
Manifest next update: Sat 25 Jul 2026 04:00:51 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: +Afl1USSrH2g+Vln7jHITFPAVdAkPL3oGAEy6GYFpw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:79:f1:04:45:cf:bf:5d:47:0b:df:d2:5d:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jul 24 04:00:51 2026 GMT
Not After : Jul 25 04:00:51 2026 GMT
Subject: CN=6b722342f47d4a1799ee1d70dbc3ab94d0070628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:e4:0e:e4:08:01:8a:4c:80:dd:cf:14:a7:
da:1f:e2:20:10:b7:1f:d1:95:77:5d:da:df:82:63:
4f:ff:8c:b8:e0:57:00:f1:8c:77:24:05:2e:73:b5:
80:e3:31:ac:f1:99:b8:0b:12:f9:27:87:e2:b5:57:
64:b9:d2:d7:40:9b:d0:41:17:73:5c:13:a1:17:11:
aa:3e:63:e0:ff:e2:15:5a:60:fd:ce:13:09:4b:61:
7c:92:61:db:c4:4b:0e:c2:53:4f:d1:92:0d:4d:11:
23:98:74:1b:4a:62:57:c0:1a:0f:ff:33:6e:a5:c6:
0b:2a:57:15:dc:d4:f7:d4:6f:41:37:d7:d2:f7:44:
95:dd:6f:3d:64:67:f1:58:45:57:7e:56:2f:1e:4e:
3e:b3:32:52:5a:6c:6a:70:db:e1:82:7a:d9:51:07:
f5:31:c8:52:89:57:9d:31:43:e3:32:eb:b8:83:c8:
e8:4f:c9:ba:77:99:9a:17:2b:19:92:8f:15:94:fc:
f0:e0:63:ab:1b:6c:94:42:72:2e:cc:a6:ba:18:74:
10:9a:ea:76:95:24:08:fb:3a:0c:f8:76:c1:2f:a7:
d3:0b:1e:f4:1f:2f:a7:c2:a7:6e:c5:60:8e:aa:0b:
9d:13:cf:a6:bc:39:ca:03:c1:1e:f0:7e:fc:9f:e6:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:72:23:42:F4:7D:4A:17:99:EE:1D:70:DB:C3:AB:94:D0:07:06:28
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:77:34:ca:a3:d0:26:4e:a0:7d:98:2c:d4:75:31:e7:f9:1a:
fe:85:dc:6c:d1:7a:11:6a:df:71:9e:32:df:24:03:8e:f0:35:
af:e6:8e:9d:79:61:56:a6:6c:c8:3a:cd:2d:e5:44:b8:ee:70:
d3:72:0e:c4:5e:4a:8b:b1:25:2e:64:aa:c8:1e:11:ee:fe:7e:
ac:38:fb:c1:de:83:a7:84:af:70:31:08:cd:eb:c8:0c:82:a1:
50:7a:10:cf:a0:d6:e1:b0:68:3d:7f:ef:c8:de:ff:28:4f:aa:
ae:47:71:e9:3c:b8:be:52:28:c5:6e:8c:66:a0:ae:14:92:49:
38:95:3f:67:70:d6:3f:eb:3e:a0:8f:3c:ce:44:35:ad:44:4a:
9e:56:d7:f7:fb:5b:05:13:c3:da:8b:91:5e:4a:69:57:80:47:
7f:79:6b:31:f5:fa:d5:60:7a:e7:73:6b:d1:4d:a3:a3:1f:f3:
c5:0b:81:38:1e:c4:85:19:12:53:45:9d:eb:d9:23:85:ab:58:
6f:c6:e6:34:9d:3e:f0:7d:cb:13:47:97:cf:eb:e7:ba:0f:1b:
1d:04:b6:55:81:e8:ff:4b:02:e3:41:59:6c:95:ea:ad:98:d8:
60:64:45:9f:ec:23:62:6b:9e:86:bb:2a:4a:b1:d9:75:4c:74:
50:96:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:43 2026 by rpki-client