Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: hh2ClrGxPTZrJkjYxHhimSIYL67OEGjKx2hRFNwdkTU=
Subject key identifier: DB:69:11:C0:1C:DB:42:65:D0:2A:52:0F:AF:8D:3F:8E:34:4B:7D:3E
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 01A0D2DE291D59465EACE30D0606B7C4D002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 13FD
Signing time: Thu 24 Sep 2026 10:02:49 +0000
Manifest this update: Thu 24 Sep 2026 10:02:49 +0000
Manifest next update: Fri 25 Sep 2026 10:02:49 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: uBmOXmmMIR7lWQo/J1lVIfh8PdJIoxB43AsREXgCGvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:29:1d:59:46:5e:ac:e3:0d:06:06:b7:c4:d0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Sep 24 10:02:49 2026 GMT
Not After : Sep 25 10:02:49 2026 GMT
Subject: CN=db6911c01cdb4265d02a520faf8d3f8e344b7d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c6:a4:ca:90:53:e7:58:25:95:18:70:9c:4a:
43:4b:24:09:c5:68:30:40:77:91:12:9f:ae:86:94:
86:c2:18:39:bd:95:a9:f6:61:38:8f:48:28:f0:e6:
3a:49:00:1a:fd:50:1f:89:24:fe:35:71:65:69:3e:
91:04:c1:43:f7:5a:56:1a:c7:07:44:c7:24:17:5c:
cf:86:de:66:0f:74:6a:d4:8e:e6:32:1d:65:f7:e7:
d2:21:2b:90:59:73:5b:79:29:83:40:4d:2e:ad:63:
75:81:61:9b:6d:65:e1:ee:e7:4a:f8:c9:12:c1:bd:
d4:1c:4b:0d:70:68:01:6e:bb:9a:64:e2:b4:a9:10:
72:71:d6:ab:f2:4a:73:f8:f0:dd:53:cb:6b:bb:f8:
00:4d:37:b5:83:82:0c:73:7e:4d:97:65:e5:cf:a4:
10:2f:9e:69:fc:3d:2c:a8:3b:73:83:56:ed:af:4a:
be:3d:77:99:86:5d:75:1c:36:ca:e9:90:db:21:29:
7d:c9:a5:f8:06:68:22:5b:22:5f:df:0e:74:c1:ab:
39:40:2f:ea:07:36:93:c5:e7:87:5d:52:8f:21:08:
44:c1:5d:5a:ae:d1:c9:4a:b2:c0:d2:a0:f3:f8:ab:
b8:2d:ad:7a:98:dc:49:e6:65:19:61:0a:b8:64:aa:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:11:C0:1C:DB:42:65:D0:2A:52:0F:AF:8D:3F:8E:34:4B:7D:3E
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:df:41:7e:59:07:73:28:a5:02:7f:6c:86:4f:72:f1:b3:4b:
d1:a5:01:82:8a:27:44:5a:aa:57:d1:96:10:ff:08:71:9a:8f:
2d:f7:87:70:81:05:f2:d7:06:a1:ed:5f:72:e7:1b:37:3d:17:
4b:91:2d:9d:55:8a:5c:6d:87:5e:f8:0a:13:b1:17:ef:15:59:
32:a9:11:01:19:98:a0:ec:6a:79:4c:6c:a3:fc:ec:79:7e:be:
46:ef:2f:7c:31:f1:3c:b3:40:31:d0:d9:e3:93:22:4d:e0:e2:
3b:23:d4:47:33:b5:40:d9:41:1d:64:31:19:b1:3e:0e:a9:f9:
4a:bf:f7:06:60:2b:41:ea:23:3d:72:ec:86:d0:01:93:77:33:
bf:7f:f5:c2:64:3b:b7:8a:b0:33:2a:81:b7:62:a8:f3:85:68:
d0:db:da:9f:98:92:59:29:58:4c:fb:de:84:f2:b1:d8:68:62:
c1:88:bb:d6:20:3f:80:ca:fb:54:c5:59:25:4f:ee:32:29:af:
1d:65:f3:0a:47:aa:37:7d:cf:87:5f:e0:bf:98:4a:eb:8b:81:
9a:d3:49:99:e2:b5:ab:db:24:59:9a:a2:10:25:46:ec:91:de:
64:68:23:67:f8:2d:d2:28:50:a9:73:4f:1c:4e:91:b2:32:17:
ce:65:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:17:53 2026 by rpki-client