Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: Eqs26SlqFdkB6dcXsA0YgGlOv7S9Sehk6j07Q9e7Iwo=
Subject key identifier: DF:0A:47:1C:B3:05:FB:48:6A:4F:F4:6C:E8:A2:F3:AB:3D:62:1A:0C
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019F91DAA628A80CE068D5B952AA635E0C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 157E
Signing time: Fri 24 Jul 2026 02:00:53 +0000
Manifest this update: Fri 24 Jul 2026 02:00:53 +0000
Manifest next update: Sat 25 Jul 2026 02:00:53 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: C2dWZR4lkU6tHeHXl5egYzOsAy4IBLdJhkGg42TUJRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a6:28:a8:0c:e0:68:d5:b9:52:aa:63:5e:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jul 24 02:00:53 2026 GMT
Not After : Jul 25 02:00:53 2026 GMT
Subject: CN=df0a471cb305fb486a4ff46ce8a2f3ab3d621a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:17:a8:08:0e:2b:65:55:fb:0e:c8:57:b3:
1b:0d:cb:55:4d:4f:b3:a8:d6:29:5b:a4:ba:41:ac:
4b:02:02:14:5b:89:54:bd:fb:a8:a5:46:62:84:29:
aa:85:9e:c2:a4:df:40:2e:55:74:9a:ed:6d:d0:7f:
11:0d:41:11:6b:60:c5:45:65:f3:1e:35:9f:23:a8:
d0:bc:ad:96:44:08:75:73:83:02:57:11:f6:8b:73:
8d:dd:13:3c:b3:31:96:d1:6d:d3:1a:92:f1:25:63:
bc:71:5f:5e:90:41:d7:df:05:9d:cf:6d:ce:1e:9a:
0f:5e:67:49:dd:0d:85:fc:62:f5:64:22:2c:15:fc:
f7:7f:2e:a9:fa:cc:90:83:a2:a2:e5:d0:fc:42:5a:
91:79:c9:19:6a:5e:36:82:e8:be:d2:49:54:dd:9d:
32:e2:1c:5c:1c:db:ab:50:18:be:72:ee:da:ca:29:
44:6e:fd:0b:d0:22:bf:49:98:24:2f:52:ba:c6:bb:
3a:67:30:44:cb:b8:d3:69:48:74:05:77:78:08:bf:
1e:e9:a4:fa:6f:ec:a8:a4:69:97:91:a5:1b:8e:5b:
4b:81:19:39:a7:08:ed:dd:89:f0:86:96:a5:a6:0a:
ea:bb:3c:99:1f:ee:e1:3f:85:37:27:bd:17:14:f4:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:47:1C:B3:05:FB:48:6A:4F:F4:6C:E8:A2:F3:AB:3D:62:1A:0C
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:a0:58:4e:69:e0:70:c6:4f:7d:fc:b9:6f:54:d7:07:2c:
04:f4:1f:06:e7:82:2b:e8:12:7a:1d:98:4c:45:6e:2e:0c:a8:
9c:f9:01:27:44:a9:28:65:69:7a:57:70:ce:e7:8c:22:b3:93:
0a:3e:e3:15:a9:40:ce:50:fc:ea:e8:78:5a:52:6d:3c:50:1d:
62:5b:87:82:b8:a1:3f:1a:a7:ac:28:70:4b:6a:33:4d:5b:aa:
b2:96:f5:02:4b:65:05:2c:2e:fb:35:77:23:c7:3d:50:dd:83:
1e:58:26:61:6d:52:ed:16:62:0a:f7:02:e0:6c:ba:bd:97:1d:
b3:e1:2c:c1:7b:64:b7:96:9a:b8:19:4a:3d:27:b2:a8:8a:73:
e3:41:3e:ae:12:c6:cc:66:a0:85:0f:12:f2:a8:c1:2e:aa:32:
68:d1:8d:b1:51:bb:5f:2c:0d:28:68:b6:99:d3:ed:1a:f0:65:
14:f4:f8:0b:cb:34:04:c1:37:2f:59:ca:02:8c:2d:34:14:83:
6a:de:0d:a1:40:ac:8f:8c:3e:fc:56:ec:55:8c:27:c7:1f:c4:
26:64:96:26:50:a2:67:57:65:19:5e:48:8d:18:b0:de:5c:33:
80:8a:80:78:3b:0a:51:ba:e4:53:00:59:ce:09:c2:ab:08:31:
3e:7f:07:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2qYoqAzgaNW5UqpjXgxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjYwNzI0MDIwMDUzWhcNMjYwNzI1MDIwMDUzWjAzMTEwLwYDVQQD
EyhkZjBhNDcxY2IzMDVmYjQ4NmE0ZmY0NmNlOGEyZjNhYjNkNjIxYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH4XqAgOK2VV+w7IV7MbDctVTU+z
qNYpW6S6QaxLAgIUW4lUvfuopUZihCmqhZ7CpN9ALlV0mu1t0H8RDUERa2DFRWXz
HjWfI6jQvK2WRAh1c4MCVxH2i3ON3RM8szGW0W3TGpLxJWO8cV9ekEHX3wWdz23O
HpoPXmdJ3Q2F/GL1ZCIsFfz3fy6p+syQg6Ki5dD8QlqReckZal42gui+0klU3Z0y
4hxcHNurUBi+cu7ayilEbv0L0CK/SZgkL1K6xrs6ZzBEy7jTaUh0BXd4CL8e6aT6
b+yopGmXkaUbjltLgRk5pwjt3YnwhpalpgrquzyZH+7hP4U3J70XFPRsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8KRxyzBftIak/0bOii86s9YhoMMB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkGgWE5p
4HDGT338uW9U1wcsBPQfBueCK+gSeh2YTEVuLgyonPkBJ0SpKGVpeldwzueMIrOT
Cj7jFalAzlD86uh4WlJtPFAdYluHgrihPxqnrChwS2ozTVuqspb1AktlBSwu+zV3
I8c9UN2DHlgmYW1S7RZiCvcC4Gy6vZcds+EswXtkt5aauBlKPSeyqIpz40E+rhLG
zGaghQ8S8qjBLqoyaNGNsVG7XywNKGi2mdPtGvBlFPT4C8s0BME3L1nKAowtNBSD
at4NoUCsj4w+/FbsVYwnxx/EJmSWJlCiZ1dlGV5IjRiw3lwzgIqAeDsKUbrkUwBZ
zgnCqwgxPn8HPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:41 2026 by rpki-client