Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: /KQm6Nk70u+6avnKZVCuKNjbAWVcRPeehcKzD84pvNg=
Subject key identifier: B0:3B:FC:BF:53:DA:26:4B:A9:10:A2:18:CC:31:01:31:1D:B6:B6:6A
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 01A0DE05A605AD70FCA974F7CC63C0A89F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 162A
Signing time: Sat 26 Sep 2026 14:01:47 +0000
Manifest this update: Sat 26 Sep 2026 14:01:47 +0000
Manifest next update: Sun 27 Sep 2026 14:01:47 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 3drTEPVjae+w1wtu9QdIv6BNHPS6C91vOGwzmW8coDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:a6:05:ad:70:fc:a9:74:f7:cc:63:c0:a8:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Sep 26 14:01:47 2026 GMT
Not After : Sep 27 14:01:47 2026 GMT
Subject: CN=b03bfcbf53da264ba910a218cc3101311db6b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:a6:6b:ed:5d:3f:64:e4:5c:a9:89:4a:3b:
ce:05:22:73:d9:8a:7f:46:21:f2:5d:b6:a8:52:63:
6f:97:a1:40:f6:bb:16:9b:6b:93:82:d1:87:86:d1:
78:da:fa:46:11:af:a7:19:56:64:9a:00:42:bc:db:
60:79:4a:c5:84:72:84:ad:2c:c0:df:ed:08:a8:bd:
8b:41:6d:ea:ca:76:71:f3:59:fb:9c:c6:73:60:69:
93:8d:be:b2:9e:ef:b3:3b:bc:76:45:06:95:a1:c2:
e8:c3:27:96:57:85:b8:01:70:69:6a:8f:78:46:16:
6a:0a:b8:29:12:cc:96:4d:37:ab:aa:fe:72:b9:10:
ce:20:f8:18:2c:cf:96:29:d1:f7:be:64:22:19:57:
cd:52:3c:48:5a:a8:24:8e:a6:3a:f6:5f:bb:b8:e6:
dd:8c:16:51:cc:90:53:12:b9:10:a0:0d:b9:89:3a:
a7:ca:f3:d4:81:8a:92:19:e7:09:c0:62:66:62:61:
03:5e:97:e4:8a:3a:56:0f:8d:67:0b:73:b8:68:b2:
14:4b:69:30:e1:c6:ac:ef:0f:f4:2d:53:9a:14:94:
2d:18:23:e3:07:e3:7b:3a:a5:31:aa:b8:63:a5:52:
ef:ed:69:89:a5:51:39:a0:ac:b9:4f:27:23:01:f0:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:FC:BF:53:DA:26:4B:A9:10:A2:18:CC:31:01:31:1D:B6:B6:6A
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:fd:0c:d4:3e:f0:07:71:85:00:8f:e6:1e:58:fd:4e:f9:
f9:e8:ae:4b:a1:2a:b3:23:9f:c3:b3:f0:33:16:f4:d1:23:29:
22:24:f9:8c:05:4d:2f:25:c2:29:f1:d1:ad:ba:61:ff:d0:a2:
1e:bd:76:4e:65:a6:38:bc:0b:fa:40:f9:52:02:f0:b1:c8:7e:
80:a7:ff:7a:b6:c1:b0:02:c4:80:2d:ee:79:7a:83:cd:15:30:
34:88:f3:9e:9d:65:20:a6:c0:01:e5:32:d4:03:fc:26:e9:37:
ba:a8:66:24:9d:be:04:7d:2b:dc:e2:df:a2:9a:33:98:88:8c:
9d:fb:46:ca:30:5b:72:a5:2d:09:ad:93:cf:b0:e2:8b:64:5b:
14:18:9a:e9:24:6d:81:fa:f5:dc:ae:aa:02:4e:b4:8e:ec:20:
a6:84:e4:43:4e:03:1c:07:a5:97:4c:66:74:97:26:75:ed:de:
ce:b0:6e:2a:82:a1:51:99:dc:9b:78:8f:60:07:43:a5:67:1c:
f9:83:5c:54:44:c8:5c:b3:9d:51:60:b8:d6:bc:72:55:cc:f0:
23:56:a9:1f:44:a1:4a:48:e9:0d:8d:be:7e:fa:77:ad:84:62:
db:05:d4:d1:92:87:39:2a:b6:73:a8:bd:7e:ec:cd:df:41:9c:
07:8c:8e:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBaYFrXD8qXT3zGPAqJ9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjYwOTI2MTQwMTQ3WhcNMjYwOTI3MTQwMTQ3WjAzMTEwLwYDVQQD
EyhiMDNiZmNiZjUzZGEyNjRiYTkxMGEyMThjYzMxMDEzMTFkYjZiNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2qma+1dP2TkXKmJSjvOBSJz2Yp/
RiHyXbaoUmNvl6FA9rsWm2uTgtGHhtF42vpGEa+nGVZkmgBCvNtgeUrFhHKErSzA
3+0IqL2LQW3qynZx81n7nMZzYGmTjb6ynu+zO7x2RQaVocLowyeWV4W4AXBpao94
RhZqCrgpEsyWTTerqv5yuRDOIPgYLM+WKdH3vmQiGVfNUjxIWqgkjqY69l+7uObd
jBZRzJBTErkQoA25iTqnyvPUgYqSGecJwGJmYmEDXpfkijpWD41nC3O4aLIUS2kw
4cas7w/0LVOaFJQtGCPjB+N7OqUxqrhjpVLv7WmJpVE5oKy5TycjAfBDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA7/L9T2iZLqRCiGMwxATEdtrZqMB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHL9DNQ+
8AdxhQCP5h5Y/U75+eiuS6EqsyOfw7PwMxb00SMpIiT5jAVNLyXCKfHRrbph/9Ci
Hr12TmWmOLwL+kD5UgLwsch+gKf/erbBsALEgC3ueXqDzRUwNIjznp1lIKbAAeUy
1AP8Juk3uqhmJJ2+BH0r3OLfopozmIiMnftGyjBbcqUtCa2Tz7Dii2RbFBia6SRt
gfr13K6qAk60juwgpoTkQ04DHAell0xmdJcmde3ezrBuKoKhUZncm3iPYAdDpWcc
+YNcVETIXLOdUWC41rxyVczwI1apH0ShSkjpDY2+fvp3rYRi2wXU0ZKHOSq2c6i9
fuzN30GcB4yOXA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:29:15 2026 by rpki-client