
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: LFrH40tVW8Gdofq0CowUN4aSKPse9/wlxxrbhT9ld9U=
Subject key identifier: 9F:77:AB:D9:2F:E0:9D:43:F5:28:F1:63:95:C2:12:D0:1A:69:D4:45
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019E1D9010298B8680D206C49B8CE15C0BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 1296
Signing time: Tue 12 May 2026 19:00:40 +0000
Manifest this update: Tue 12 May 2026 19:00:40 +0000
Manifest next update: Wed 13 May 2026 19:00:40 +0000
Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=)
2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: i6iBCZlM2kZ8FEEIJs32QSlmHbiBo2k2jWaFOi+xuUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:10:29:8b:86:80:d2:06:c4:9b:8c:e1:5c:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: May 12 19:00:40 2026 GMT
Not After : May 13 19:00:40 2026 GMT
Subject: CN=9f77abd92fe09d43f528f16395c212d01a69d445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:cb:fb:2a:5d:27:0b:fe:60:d2:06:d9:12:
18:ab:e3:90:f0:bd:69:d2:e9:a7:a9:a8:d8:23:0a:
c7:4b:c1:55:3e:cf:80:7f:5d:bc:26:2f:4f:c8:a0:
c9:c6:2a:33:e1:89:be:66:42:4d:49:31:63:ec:ca:
9d:ef:4b:ac:dd:c4:9c:02:76:c4:a3:38:24:f7:82:
d8:38:bb:c1:3a:43:84:99:4e:9c:d4:c1:d1:5d:b1:
55:4b:93:a0:e7:3b:df:2c:d2:c3:18:f0:76:57:42:
82:56:50:55:7d:76:3a:ef:80:8a:2d:ad:a0:7f:f8:
3c:b8:2f:c4:30:f2:32:83:a0:40:12:2c:5b:56:41:
02:da:42:51:99:59:0c:66:ea:fa:f1:7d:ff:ac:bd:
5d:45:9a:9c:e6:38:e7:2b:9e:f4:a3:fa:61:c9:95:
8d:28:e2:61:9b:4d:94:83:f0:12:c0:1c:c1:98:4b:
46:32:5d:3a:03:ec:cf:e3:d8:39:f5:63:63:12:85:
78:41:df:8e:6c:19:20:02:63:70:68:4c:49:07:a6:
bc:c7:03:1a:dd:c6:0a:47:de:f1:2d:df:8e:8e:38:
ed:3e:b4:05:b3:8b:03:e8:01:38:bd:1c:ea:f7:29:
bd:04:69:cc:79:f2:30:ee:25:d8:3e:a8:0e:cd:88:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:AB:D9:2F:E0:9D:43:F5:28:F1:63:95:C2:12:D0:1A:69:D4:45
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:4e:4f:fe:f5:8e:61:1f:40:4d:45:78:8f:76:61:33:d7:
41:0e:c9:ae:9f:10:2a:e0:21:b6:2c:f2:8a:df:57:9b:5b:92:
f3:19:62:45:2b:08:01:45:9e:d7:1d:3e:4c:d5:e2:aa:3f:80:
6c:a2:6d:5c:bc:68:4a:39:a8:2c:85:5a:f5:4b:cc:b9:4e:0d:
d5:dc:07:2b:88:d1:9b:46:9c:95:da:86:54:02:a4:63:ec:04:
0f:ff:8b:8f:ea:f3:0f:58:2a:97:15:b0:79:6e:9a:e8:b0:6a:
5e:80:13:77:77:d6:e1:45:f3:1f:05:68:44:61:c4:c7:ef:8f:
79:8f:07:69:a1:39:75:0b:cc:a5:e5:d8:18:ea:a2:00:a1:14:
a8:ed:68:57:76:89:51:53:16:77:8d:af:fe:67:70:68:14:2c:
8b:9d:d7:19:fc:0b:c3:22:2e:33:28:d6:ed:91:9e:26:c8:69:
dd:1b:f8:2c:3a:37:94:7c:e2:20:9d:67:e2:80:7d:3e:6b:d1:
0e:81:8f:84:c7:95:8a:90:0c:f3:4d:f3:4c:cc:38:f6:d9:78:
92:37:c4:61:22:97:a5:6f:4a:85:fa:98:d5:cd:43:12:5b:5c:
f5:dd:36:af:2a:e4:13:44:41:2a:48:9b:a0:ed:08:1c:a0:aa:
2f:75:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:14 2026 by rpki-client