Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: XB7NSMkk3/x7fIUeTK98Agw/6+VbrfY9wg3/OthufbE=
Subject key identifier: 7A:B5:3A:AE:DC:03:3A:68:D9:C4:8F:62:C8:94:05:96:73:7E:8A:45
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019E1F11B18B7EB672E0F5DC4CEE444E7107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 14BE
Signing time: Wed 13 May 2026 02:01:53 +0000
Manifest this update: Wed 13 May 2026 02:01:53 +0000
Manifest next update: Thu 14 May 2026 02:01:53 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: fyTfGm5BcRG70PaGTx3gMpZKQNOp0gUorf+fwMQvV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:b1:8b:7e:b6:72:e0:f5:dc:4c:ee:44:4e:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: May 13 02:01:53 2026 GMT
Not After : May 14 02:01:53 2026 GMT
Subject: CN=7ab53aaedc033a68d9c48f62c8940596737e8a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:f8:1b:58:01:d8:b3:ab:86:4f:a4:46:25:
07:59:9d:ef:46:76:f9:53:ae:71:a2:34:df:8c:01:
dc:2d:ad:81:2c:df:81:19:72:6c:c4:71:43:68:51:
a0:8c:81:02:82:28:ae:2b:f3:a5:29:d2:b8:5d:4f:
35:d0:d1:93:13:af:c7:4f:7e:b1:10:1c:0e:52:48:
43:e8:d8:eb:46:f8:a1:60:27:07:f9:04:01:24:67:
cf:b1:40:46:c3:d6:f2:18:e4:53:2d:f2:9f:08:45:
10:93:7b:fd:27:a2:8b:31:6c:a9:f7:8f:e6:e8:02:
d3:62:15:e4:75:42:e0:93:ba:75:94:b2:06:91:6b:
51:80:3b:2e:19:3d:b7:56:38:f2:d8:f7:39:50:39:
c6:4f:8a:ab:e9:44:fd:95:4c:9f:7c:a7:e0:da:a5:
1d:99:d0:5c:e3:62:73:aa:a8:9c:d9:42:13:70:8d:
9f:4d:6a:bd:d7:5f:3f:28:31:c8:ea:43:8d:d3:f0:
69:9b:58:c2:2e:3d:f2:b2:b3:b8:b4:4d:92:e4:a4:
eb:34:d5:bc:73:3e:b0:69:2d:99:50:d7:79:0d:8d:
41:0f:5d:77:36:ef:d2:f2:45:c1:7c:0a:68:2d:42:
e0:32:b5:7e:37:61:73:12:87:4b:7c:37:fa:1c:b6:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:3A:AE:DC:03:3A:68:D9:C4:8F:62:C8:94:05:96:73:7E:8A:45
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:2c:37:25:94:f8:23:68:e6:6e:dd:fa:72:61:83:6d:c4:
e3:04:94:d1:3b:00:07:1c:61:ef:ee:1f:ef:2e:40:8b:48:dd:
68:87:a7:22:57:57:49:c3:a6:53:5f:c2:e0:42:79:95:e5:25:
0e:f6:32:42:8b:4c:83:b1:d2:83:1e:5b:72:ac:1b:f3:26:46:
44:e3:cf:08:bc:f8:72:79:42:c7:64:9e:ce:f1:33:31:f3:69:
bf:5a:24:c1:b5:06:77:76:b7:87:b1:47:61:4b:e1:c6:43:2d:
fe:b9:00:75:d3:91:24:6f:b0:0d:41:d2:a4:54:a0:10:fd:3f:
0b:43:01:c2:e2:e1:ec:5f:2c:01:0f:12:8a:bf:88:ec:e6:96:
e2:73:01:d9:6a:b2:12:5d:fa:f7:84:3e:2b:30:d9:61:0f:4d:
aa:d6:6d:33:29:c2:de:6f:ad:9e:f9:5e:e9:d4:a2:b1:f3:28:
89:7b:7e:8d:a3:af:f9:7f:f4:82:e6:1d:5f:3d:26:81:91:13:
de:fb:f7:fd:f9:8c:eb:6d:4d:5f:77:64:94:09:e3:2c:23:28:
4d:77:e1:ac:6c:2c:97:b1:86:6a:48:69:fe:85:9a:33:1e:67:
7c:cb:5f:a1:15:86:de:b2:44:ae:1b:13:66:be:3e:e3:6b:b1:
65:fc:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:35 2026 by rpki-client