Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: KkOTD57jHxgnJX1qtWcXAzyvr2EY8cCwSguSc5k9q7w=
Subject key identifier: 7D:86:D9:8D:D0:A8:3A:F1:FB:55:F6:17:E9:84:C2:0D:34:5A:3F:4C
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019D284DDBBF13A3B80D87E5205C9864EF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1217
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: yyhG4HcaPxP4DbDAzRTJD65GkLTZzk2Z6Vqo4g2cJAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:db:bf:13:a3:b8:0d:87:e5:20:5c:98:64:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=7d86d98dd0a83af1fb55f617e984c20d345a3f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:36:7d:41:a6:5c:d4:a7:d0:51:a9:d2:fb:
72:60:a2:fa:94:ed:5c:6d:ef:9c:49:50:89:7e:64:
11:20:63:7e:02:96:6f:e5:c2:17:1d:62:2b:09:ba:
3e:3f:01:6d:57:8c:44:7a:e9:fc:ad:75:99:0a:6e:
20:7c:a4:53:e3:e6:e6:55:90:a9:b7:ae:98:37:0e:
a3:5a:64:1b:af:3d:9c:19:ad:87:12:bb:74:89:82:
2d:4a:54:86:c9:e6:ad:9a:8e:14:bb:8e:aa:ff:68:
b2:64:fc:e7:f6:15:68:8c:cc:65:75:71:85:16:46:
13:71:9e:69:af:01:82:37:d2:9b:26:95:fa:58:5e:
a3:48:a4:ff:19:25:cc:a8:a2:29:75:ae:68:49:2c:
09:92:8a:a6:80:b8:81:ed:84:52:6d:c5:59:e2:0a:
b1:b2:d9:cf:c3:6d:b6:41:54:bd:c6:a1:a7:54:57:
5b:3b:4d:6c:cd:72:df:22:04:b3:38:64:0f:1c:87:
2d:93:c6:e5:e0:80:f7:fd:0f:5e:98:0e:3a:fe:8c:
78:53:a5:8f:fb:ec:f7:84:db:f6:7d:38:70:bc:12:
93:1d:86:fe:13:b0:75:d9:7a:41:ef:fc:4e:f9:37:
99:d9:33:ba:3a:72:79:98:7b:02:c3:e6:c5:b5:eb:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:D9:8D:D0:A8:3A:F1:FB:55:F6:17:E9:84:C2:0D:34:5A:3F:4C
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:5d:2c:be:89:53:86:71:40:a2:6b:99:69:62:4a:ef:60:
31:bd:8e:10:a8:94:26:35:f7:1b:19:71:13:37:51:14:ce:9a:
0f:88:74:5e:28:07:11:36:f5:3d:62:8e:c4:6b:af:d6:7d:88:
09:22:1a:e3:b7:45:d7:7c:2e:10:74:28:ed:9b:39:0f:d3:45:
01:10:33:f5:77:3a:41:c3:f5:2a:c0:ed:c3:c8:58:c1:51:30:
6f:a3:0a:45:b6:81:b4:ca:31:df:c9:e5:8b:25:c4:c4:8e:fd:
4e:12:84:9e:34:1c:cb:d2:6b:d0:6a:19:b7:f8:d1:3f:e5:18:
8e:e3:4c:46:e6:76:df:fc:78:63:00:ce:5d:1d:41:54:22:22:
df:08:d5:9e:60:ed:02:28:6e:75:12:28:0a:22:8e:cb:d0:37:
18:4a:3d:e2:a2:e8:04:99:1b:93:11:f9:b8:6b:9c:17:f0:01:
a2:b8:3c:ba:11:24:95:c1:55:2e:12:6f:59:c0:8d:54:59:00:
ff:35:f8:5f:62:86:e5:ce:89:d4:8d:e3:f2:3b:be:10:d7:8c:
af:8f:d3:4a:65:70:97:19:c1:ca:f9:b6:dd:41:b4:42:c7:70:
27:45:6a:cc:b8:06:ff:ff:15:9e:cb:95:66:84:b1:21:5f:53:
e1:65:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:03 2026 by rpki-client