Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: havECjM5tIk9NdmrEH/BqNhmnGcrH2Z0UTFHlYZEPkQ=
Subject key identifier: 57:6F:70:14:57:DA:D4:F4:6B:36:F3:0D:EE:BF:CC:E0:3C:D0:31:55
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019D25F1CD28D97AB1CAB65C6E17D3A4F0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 143D
Signing time: Wed 25 Mar 2026 17:01:36 +0000
Manifest this update: Wed 25 Mar 2026 17:01:36 +0000
Manifest next update: Thu 26 Mar 2026 17:01:36 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: pTFXcCqY2XDKSVIatmAVahYSXJeQQT2wZx4BNviEVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cd:28:d9:7a:b1:ca:b6:5c:6e:17:d3:a4:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Mar 25 17:01:36 2026 GMT
Not After : Mar 26 17:01:36 2026 GMT
Subject: CN=576f701457dad4f46b36f30deebfcce03cd03155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:fb:da:fc:b3:01:e5:af:02:18:51:12:32:
cc:5d:00:8d:a6:93:10:22:b5:3b:fa:95:82:00:82:
92:20:1c:ff:fa:6a:a7:c6:d2:11:37:59:30:fe:6a:
36:37:bc:df:5a:67:0e:d0:56:01:bb:c1:7e:64:aa:
be:74:01:8c:12:45:f6:c2:ac:55:00:f2:6f:09:31:
d9:41:d2:85:65:72:fc:70:b3:e2:41:aa:7a:a5:0b:
1c:6a:cb:59:7d:e1:f2:c1:13:91:34:30:ae:02:16:
b3:06:b2:ec:9c:6a:32:2a:f7:e2:ce:ed:a1:36:7b:
42:32:04:5c:02:8e:4e:d2:38:d0:71:1e:49:8c:f1:
de:96:c7:5a:13:bb:08:82:62:ba:eb:a9:0d:fe:48:
ef:b8:06:58:53:75:5f:d5:b9:d5:7a:e5:09:f8:b9:
6b:bb:f1:86:d1:a5:ce:74:d3:fe:5c:fe:a8:8e:7e:
17:35:c8:ec:20:a0:14:8c:80:d7:ba:01:b3:e5:81:
4f:33:1f:06:e2:85:db:83:b7:60:8f:89:19:6e:ba:
b0:c4:8a:12:57:b7:38:22:71:27:40:ef:c3:03:6f:
85:18:99:fb:39:11:af:54:97:fc:0f:b7:09:96:22:
12:f6:aa:ad:b5:c5:a5:63:c6:ff:a5:e6:26:2c:4c:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6F:70:14:57:DA:D4:F4:6B:36:F3:0D:EE:BF:CC:E0:3C:D0:31:55
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7c:1d:f6:bf:e5:a9:ef:16:71:05:ed:89:80:ee:c7:12:89:
5d:95:22:ab:67:35:67:39:cb:b8:78:68:39:ca:54:97:38:d6:
19:27:ac:f4:1c:16:fd:37:fc:63:12:82:bb:7f:44:35:56:59:
21:a0:84:04:98:fe:8b:2b:44:30:3f:3d:d7:18:8e:43:e9:1c:
fc:ed:c2:1a:ac:9d:4e:39:f1:b2:7c:46:7d:ba:ad:99:79:60:
94:fb:48:22:4d:92:76:e2:48:e6:cc:63:cb:f0:f7:35:b3:f9:
bd:67:2e:0a:fb:3c:9b:d9:24:77:1b:47:44:93:9b:79:ec:16:
f6:75:eb:75:6d:b9:4d:cc:07:cc:9f:cc:2c:e0:a6:64:c6:42:
0d:f3:18:e8:28:36:7c:dd:30:aa:fc:41:1c:a5:eb:22:82:29:
21:ad:0c:df:6d:c2:f0:ef:31:7a:2c:c2:9a:e5:05:74:a8:a6:
09:2f:af:3c:5a:8c:46:b7:93:ba:92:b3:3e:bd:e6:7e:6e:41:
83:a3:f6:55:f0:ae:f8:33:b7:5c:68:e9:73:81:8c:5d:b4:90:
2b:93:42:e4:7a:36:bb:15:02:29:5d:f9:e5:3a:de:43:1e:c6:
4a:e1:8c:3a:7c:56:fb:6a:42:07:6d:7e:8b:64:13:51:44:9e:
fe:d7:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:43 2026 by rpki-client