Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: 8wFz1Hmy+Xf4Sl600lgpkFA0heXSzOvhIkqD04lYsaM=
Subject key identifier: 6E:7F:08:5D:5D:51:88:15:8A:C0:F7:D1:35:1A:1F:2A:C9:3F:E8:78
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 019E1F7EA16DD4DE1D1D927C3AB26D222EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 17
Signing time: Wed 13 May 2026 04:00:52 +0000
Manifest this update: Wed 13 May 2026 04:00:52 +0000
Manifest next update: Thu 14 May 2026 04:00:52 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: hmdOyyZRO+NueK7jvzV7nkY+Ox/Zgm1Ps2XvNttheQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:a1:6d:d4:de:1d:1d:92:7c:3a:b2:6d:22:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: May 13 04:00:52 2026 GMT
Not After : May 14 04:00:52 2026 GMT
Subject: CN=6e7f085d5d5188158ac0f7d1351a1f2ac93fe878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:60:b4:96:55:c4:11:e6:1c:05:9b:c0:b2:
a0:24:2f:1e:2c:33:05:fb:24:b1:1f:9c:23:33:82:
96:c4:c4:11:48:45:99:c4:74:90:f4:0b:c5:32:64:
6a:69:b8:a6:c0:18:83:40:11:41:23:39:dc:2c:63:
18:88:e9:62:4c:0a:3d:8c:74:9f:0d:e6:04:fe:2c:
7c:f0:43:21:c8:4d:c4:ba:92:a0:7a:1f:3e:c5:a8:
30:9b:3f:f5:06:90:cc:19:30:c1:5f:e4:8a:1c:4e:
10:77:c5:42:1b:a8:8b:e8:d4:da:31:1a:88:d9:54:
d1:a8:25:d5:74:03:3b:cc:f5:ca:c1:60:80:50:3c:
55:2a:b8:cd:3b:bb:0e:39:c4:77:b3:5d:80:83:04:
69:46:40:9b:9c:b1:dc:3d:f7:07:56:ae:57:35:eb:
0a:2c:f6:21:87:ed:20:22:e0:2e:8f:81:2e:da:80:
8c:9c:5e:8e:1b:e9:99:28:da:4a:b1:f3:ab:f8:04:
0e:0c:44:cd:89:00:86:1b:22:87:41:54:f6:d9:d3:
34:b8:08:fb:43:d7:99:62:e1:02:da:73:7a:c5:f7:
eb:8f:49:14:72:26:d4:c8:f1:bd:05:a4:9f:b1:fd:
db:30:dd:e2:94:65:ee:a2:61:16:b7:ed:81:e0:d2:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7F:08:5D:5D:51:88:15:8A:C0:F7:D1:35:1A:1F:2A:C9:3F:E8:78
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e7:e3:98:dc:3a:43:3e:f3:80:6f:b2:44:3f:d7:39:c6:fa:
cb:64:9c:33:97:05:73:58:b8:d5:77:e6:a3:8c:f8:2e:94:40:
78:1d:d1:a2:07:1a:0a:91:38:2f:d7:72:6d:b5:fa:80:8d:15:
e0:3e:5a:b6:24:c9:76:32:4a:61:53:89:4b:c8:e6:ca:a0:59:
ad:e7:d7:dd:12:0b:cf:30:fa:fa:de:54:29:ac:9a:e7:b6:c8:
89:2c:ab:ee:14:d1:13:d4:eb:ab:a2:3c:ad:16:2a:cc:44:cf:
bc:b0:f3:20:e0:e6:e2:7a:d9:19:55:9b:4d:99:6f:db:7c:a0:
4a:d1:d8:46:54:bd:c9:cd:f0:67:56:fb:f8:51:c4:fc:1e:7b:
f9:47:31:65:9a:c7:f1:f6:25:2b:67:96:31:cc:2a:b2:24:b2:
b2:f0:89:18:d8:ae:52:33:c6:70:53:b5:a5:35:47:7f:5e:eb:
fb:43:9b:3f:6f:44:5b:6e:8d:42:b4:4d:4a:d8:a5:1e:ab:50:
e6:d4:53:39:8e:2e:b4:b5:9b:5d:9e:5b:76:5f:73:20:88:24:
c2:9c:6f:78:3b:58:48:b4:e7:73:08:e5:97:e8:2f:ca:ff:5d:
7a:34:05:08:fd:5c:35:36:1b:40:be:67:3e:60:b7:bc:31:a8:
51:45:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:40 2026 by rpki-client