Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: gvBEAP48EMKZpOp/mMghNvqYWZNy9QA2qpb/ejfrLP0=
Subject key identifier: D3:68:13:23:CE:2D:62:62:9C:BF:7E:DD:64:84:FD:2C:B3:1E:82:F9
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 01A100916B40C37CD5E9ABACCC2B81B63D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 0195
Signing time: Sat 03 Oct 2026 07:01:32 +0000
Manifest this update: Sat 03 Oct 2026 07:01:32 +0000
Manifest next update: Sun 04 Oct 2026 07:01:32 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: jUf5abbqdejvg5wROGg3a8vR9rDAVtL1bpLUWcqvZ0g=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:6b:40:c3:7c:d5:e9:ab:ac:cc:2b:81:b6:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Oct 3 07:01:32 2026 GMT
Not After : Oct 4 07:01:32 2026 GMT
Subject: CN=d3681323ce2d62629cbf7edd6484fd2cb31e82f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:ff:37:52:ca:0e:f1:73:58:f7:1d:76:da:
9c:25:5e:07:b0:c0:71:53:23:d7:c2:fd:c3:3e:fd:
27:96:44:ef:c0:45:70:30:0d:ca:41:4d:cc:43:af:
43:3a:4b:cd:f3:20:95:4b:be:df:9e:e6:6c:f8:88:
9c:da:a2:15:f0:4a:a4:fb:8c:1b:a3:9b:fd:47:2d:
12:64:03:fb:68:e3:4a:3f:d2:39:ac:c2:3d:dc:f5:
f8:9b:06:63:71:c3:8d:fe:a3:a7:2e:61:5e:5c:58:
50:f3:76:79:93:f5:ab:36:5f:c1:db:43:55:c0:17:
4b:ac:36:2c:fe:d7:07:5b:3e:17:70:08:1a:7e:34:
2f:79:cc:f3:5d:d8:43:61:92:53:af:32:29:e9:dc:
db:27:9d:c4:48:8a:22:e0:b6:a4:6a:2f:70:e8:59:
85:56:a2:ae:7b:d4:98:ea:33:37:31:10:b6:be:52:
6d:f4:e2:57:7b:b2:19:f7:fc:08:be:cb:78:4b:33:
e2:6f:0f:f8:ad:64:ed:db:31:83:49:c0:6c:52:e2:
ed:71:2e:e0:6a:dc:0c:f6:dd:5b:b3:99:b3:9b:23:
26:90:1e:96:8a:8a:dc:33:4e:6e:6f:c4:7b:bf:99:
12:a2:57:a7:00:a9:44:74:45:66:a7:6b:df:4c:57:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:13:23:CE:2D:62:62:9C:BF:7E:DD:64:84:FD:2C:B3:1E:82:F9
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:68:f4:ee:78:82:2f:49:a8:16:a8:e7:c8:0b:5c:b8:e7:
38:dd:14:89:43:02:74:11:36:7b:cd:07:7c:9c:62:06:cb:e1:
c7:1d:f0:34:06:61:dd:71:22:1e:b4:8f:90:f0:7a:8d:8a:92:
a1:39:7c:f9:eb:d6:2d:93:99:06:bb:a0:98:50:05:f6:55:92:
d4:8f:ce:e5:1b:7a:71:3a:ff:ac:97:f0:a5:30:43:5a:58:05:
72:38:e3:ad:57:0d:f0:12:65:5e:09:57:3c:e1:b3:fa:58:1f:
54:a1:fa:09:63:62:d7:a7:10:09:4a:f4:5d:e8:69:b0:f2:fa:
62:5c:3e:31:41:23:2c:cb:89:75:58:87:2b:62:bf:b9:42:36:
35:ad:6b:24:bc:1f:b0:34:35:3f:ab:0d:f5:c2:e4:1f:8e:0e:
21:de:92:69:e7:1a:fc:ef:c1:be:11:ab:bb:d2:49:56:e9:4e:
3e:24:28:26:6a:84:77:fe:5b:e9:3d:fa:75:85:76:bd:42:71:
15:33:d7:04:bb:e7:6b:e0:2a:8c:87:c9:9c:19:5b:8d:04:13:
6a:c4:d6:16:fc:9f:24:96:20:b9:ec:5d:db:cd:f4:03:d6:39:
77:ce:f2:78:c2:a8:92:3d:c3:00:29:55:d5:9c:c7:5f:1a:2c:
6f:e6:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:08:29 2026 by rpki-client