Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: K9QOkpw5ty3rvgyVmQRhf2t2ZE335hN/a/6my895om8=
Subject key identifier: 2B:3B:65:BF:95:F3:1B:D8:DB:C1:DF:43:6F:F0:C3:73:43:EE:8F:4A
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019E1F47FF4BC797910F6F6F3DBB08632A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 03:01:12 +0000
Manifest this update: Wed 13 May 2026 03:01:12 +0000
Manifest next update: Thu 14 May 2026 03:01:12 +0000
Files and hashes: 1: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
2: FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa (hash: cZLJ2r1Doel5lpVBvhmnLBua06MQetotpEsjgD1nP28=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: M1RAwxbXkOa8C8/ggOEojsMQTuFa1RBVHcnDUE2+leU=)
4: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
5: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
6: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
7: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
8: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
9: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ff:4b:c7:97:91:0f:6f:6f:3d:bb:08:63:2a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: May 13 03:01:12 2026 GMT
Not After : May 14 03:01:12 2026 GMT
Subject: CN=2b3b65bf95f31bd8dbc1df436ff0c37343ee8f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:60:34:a6:de:3a:7d:8b:55:25:75:c0:21:
fb:70:4a:c9:c4:89:a0:81:8a:fc:a3:ab:9f:c6:44:
39:0a:fa:5e:e7:9d:55:9c:92:ae:2f:f0:89:f0:dd:
6b:f2:9f:27:6c:72:93:0e:16:35:ef:f1:15:08:4e:
bf:29:8a:de:15:97:ed:1f:17:22:dc:96:7c:aa:e3:
6f:27:c5:7d:ff:30:13:10:ae:20:15:0e:fa:ae:e4:
7e:f2:d1:2f:34:65:16:f8:0f:52:74:64:90:b9:d6:
26:23:13:14:f1:91:c0:b5:3e:d1:d8:7c:3d:c6:9d:
64:79:94:74:9c:8a:00:a8:5d:70:de:cc:fe:05:7d:
1c:33:43:9b:3d:f5:99:ba:32:84:bc:df:5f:c4:df:
39:a2:e7:3b:c8:52:d0:f2:8e:7a:7e:76:b3:5b:37:
2a:29:5e:9b:48:30:b6:27:19:61:04:51:cc:7d:c0:
61:cc:c7:30:6b:bf:54:06:1a:43:07:d0:1e:84:f5:
c2:a0:3f:a8:8d:1a:41:d1:7b:d7:f4:a1:de:26:7a:
d9:09:6c:a5:e8:b5:2b:4b:19:f2:32:d1:30:8f:e3:
7a:78:5a:2f:73:20:ec:09:a9:89:6b:7d:8b:fe:09:
82:fe:32:1d:ec:fb:3d:9c:40:a2:ee:c1:d4:85:d8:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3B:65:BF:95:F3:1B:D8:DB:C1:DF:43:6F:F0:C3:73:43:EE:8F:4A
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:a4:ff:03:f1:2d:49:1c:db:3f:b5:c6:20:5b:3a:0e:d2:
3e:d3:ac:c8:ea:a0:a3:36:c4:f3:51:10:b8:e5:b6:71:21:01:
39:fd:ae:40:20:d5:62:36:63:58:08:74:a1:17:f1:c6:01:86:
58:f0:9e:d4:68:73:64:7f:62:93:2a:67:45:c4:37:1e:13:ae:
19:83:96:00:4e:02:12:8b:8d:6b:15:39:8f:f1:ae:4f:2a:ad:
df:94:64:40:fd:98:9f:f1:df:12:93:51:8b:7c:0c:95:38:9d:
bf:64:6b:57:b1:56:ba:1b:ff:95:21:db:33:7b:50:07:45:51:
9c:70:7e:2c:8c:0d:a3:f0:fd:54:ab:52:9a:5a:bb:6d:81:e3:
d1:02:a1:d2:6f:b3:bf:c9:15:f2:79:5c:12:6c:be:1b:cd:74:
da:e4:e1:e7:d5:6d:be:1d:56:f7:4d:c2:5f:6e:eb:ea:24:98:
3c:c3:55:98:7c:bd:d9:5f:d0:2c:90:64:2d:12:57:f8:5b:2e:
77:1c:8a:e7:d8:79:34:97:34:3f:12:50:f7:eb:5b:09:71:39:
90:64:c3:f2:90:68:6d:76:09:b9:68:ff:fb:0d:9e:51:a4:e2:
20:cf:eb:fe:c3:27:ff:aa:b0:bf:8f:fa:61:a7:d9:bd:bc:bd:
5c:80:ae:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR/9Lx5eRD29vPbsIYypGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz
OGJhMDYwHhcNMjYwNTEzMDMwMTEyWhcNMjYwNTE0MDMwMTEyWjAzMTEwLwYDVQQD
EygyYjNiNjViZjk1ZjMxYmQ4ZGJjMWRmNDM2ZmYwYzM3MzQzZWU4ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArptgNKbeOn2LVSV1wCH7cErJxImg
gYr8o6ufxkQ5Cvpe551VnJKuL/CJ8N1r8p8nbHKTDhY17/EVCE6/KYreFZftHxci
3JZ8quNvJ8V9/zATEK4gFQ76ruR+8tEvNGUW+A9SdGSQudYmIxMU8ZHAtT7R2Hw9
xp1keZR0nIoAqF1w3sz+BX0cM0ObPfWZujKEvN9fxN85ouc7yFLQ8o56fnazWzcq
KV6bSDC2JxlhBFHMfcBhzMcwa79UBhpDB9AehPXCoD+ojRpB0XvX9KHeJnrZCWyl
6LUrSxnyMtEwj+N6eFovcyDsCamJa32L/gmC/jId7Ps9nECi7sHUhdgmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs7Zb+V8xvY28HfQ2/ww3ND7o9KMB8GA1UdIwQY
MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaak/wPx
LUkc2z+1xiBbOg7SPtOsyOqgozbE81EQuOW2cSEBOf2uQCDVYjZjWAh0oRfxxgGG
WPCe1GhzZH9ikypnRcQ3HhOuGYOWAE4CEouNaxU5j/GuTyqt35RkQP2Yn/HfEpNR
i3wMlTidv2RrV7FWuhv/lSHbM3tQB0VRnHB+LIwNo/D9VKtSmlq7bYHj0QKh0m+z
v8kV8nlcEmy+G8102uTh59Vtvh1W903CX27r6iSYPMNVmHy92V/QLJBkLRJX+Fsu
dxyK59h5NJc0PxJQ9+tbCXE5kGTD8pBobXYJuWj/+w2eUaTiIM/r/sMn/6qwv4/6
YafZvby9XICuZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:41 2026 by rpki-client