Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: pWmo/+eUSTfo4oldsNdmy44MKduqYQ498DQ6kwKgS2Y=
Subject key identifier: 60:2A:DA:CA:8D:23:A6:F0:BD:45:4E:9A:E8:76:4F:A3:E8:A4:17:34
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 019E1E6C14929F30EC84542ABEF59942C66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:00:59 +0000
Manifest this update: Tue 12 May 2026 23:00:59 +0000
Manifest next update: Wed 13 May 2026 23:00:59 +0000
Files and hashes: 1: ZDyULkY7XdQ11kYjdum05r2DwuM.roa (hash: zq3BSwMTqEueaum+sWRBlqipTKD1rJ/mmOl8XQsz7Vs=)
2: dAmCb4Q0Lu8OSnL465WyYmvHdqs.roa (hash: ihhOeF2biIt0LZI2QoL/OX+WXgwfGmKMeTYYQxzMVw4=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: uUnIlPbYUN+hsrjwCBiijQM/gEA6hEMZZCu1VU1iXAc=)
4: rU_aup43-JcvplAJDdsQtTE8z3s.roa (hash: 8xZqax6dDOxidmRdOp80eUZcDr3nHq4tvorScngCUzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:14:92:9f:30:ec:84:54:2a:be:f5:99:42:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: May 12 23:00:59 2026 GMT
Not After : May 13 23:00:59 2026 GMT
Subject: CN=602adaca8d23a6f0bd454e9ae8764fa3e8a41734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:e8:53:bb:f6:d6:a1:ca:66:65:ef:9f:3b:
12:09:2c:f5:c4:cb:76:0b:59:97:76:03:82:a4:78:
40:72:e2:11:d7:c8:e4:78:e8:00:bf:7c:0f:17:c7:
e7:d1:4a:98:f5:f2:ad:91:e6:d0:6e:3f:45:5c:fc:
b7:4f:b3:26:0b:39:84:cc:87:5d:8c:7f:ab:df:5a:
2b:9d:c9:25:dd:69:c8:20:c4:64:f6:2d:74:56:67:
fe:e3:b8:89:38:6b:08:2a:0c:db:02:4b:75:3a:df:
10:2b:72:8f:1d:db:63:4a:11:c7:d7:4d:36:2f:35:
15:b8:8e:a2:6d:b1:21:ee:5b:f9:36:34:90:65:32:
dc:4b:0d:5a:12:e7:06:2a:17:e6:2f:2d:ea:76:c0:
b9:4e:20:c2:b8:2b:e2:53:27:c0:18:91:93:3a:51:
00:77:43:4a:24:0b:76:90:94:90:01:be:5c:3b:4c:
16:f5:05:97:eb:54:97:60:83:a4:15:c6:9c:f5:70:
05:0b:fb:a9:52:ab:c9:c2:12:ee:9a:77:ba:b4:d6:
50:55:5c:b3:65:b4:30:8d:19:8e:c6:96:c8:bc:78:
cc:54:b4:ce:c1:9c:0f:da:03:70:bd:bd:70:da:6a:
88:60:d0:c6:18:76:6b:b5:66:b1:75:d0:f1:eb:5b:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:DA:CA:8D:23:A6:F0:BD:45:4E:9A:E8:76:4F:A3:E8:A4:17:34
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:ab:88:0f:44:fa:12:a8:9c:19:a0:0f:f4:58:22:15:8b:
f4:f3:b1:50:1f:c2:3a:d3:3b:e4:0d:39:97:3e:c8:1f:3c:61:
a1:9d:18:be:0c:5a:7f:eb:ba:9f:b4:c0:bd:a9:f8:05:a4:db:
91:4d:f9:5f:f2:43:d1:79:4b:42:b9:44:b7:12:c0:88:e9:f7:
9d:a1:38:76:7f:8b:12:d9:7e:d6:b4:5a:a5:00:bd:36:9e:5b:
be:54:c9:22:d8:bb:07:d6:19:42:71:8f:89:50:94:e2:9e:ff:
4f:63:ff:ba:79:90:8a:1f:21:59:64:75:9b:4a:e3:18:76:36:
58:38:90:53:19:92:8a:4a:b5:df:52:3b:06:24:67:13:38:70:
0d:71:2d:98:f3:58:92:a6:b3:e2:f2:7d:22:04:09:26:e5:0d:
62:df:c3:0b:89:dc:75:94:1f:c7:ea:e1:ea:99:fc:52:f5:68:
57:c0:b2:a1:5e:c6:a6:51:2b:23:7d:33:e0:bf:ad:03:47:87:
c7:33:ab:d9:cc:b8:1b:ca:b7:30:82:d8:4d:5e:09:b3:f6:c8:
ed:d5:3b:21:8a:23:06:56:1e:0c:3a:61:89:c6:b0:a9:d6:3c:
a1:0b:8a:f9:b4:0b:65:d5:f9:c8:3e:70:d1:08:8f:3f:51:9c:
7d:bb:c3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebBSSnzDshFQqvvWZQsZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2
OTIwNDcwHhcNMjYwNTEyMjMwMDU5WhcNMjYwNTEzMjMwMDU5WjAzMTEwLwYDVQQD
Eyg2MDJhZGFjYThkMjNhNmYwYmQ0NTRlOWFlODc2NGZhM2U4YTQxNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpfoU7v21qHKZmXvnzsSCSz1xMt2
C1mXdgOCpHhAcuIR18jkeOgAv3wPF8fn0UqY9fKtkebQbj9FXPy3T7MmCzmEzIdd
jH+r31ornckl3WnIIMRk9i10Vmf+47iJOGsIKgzbAkt1Ot8QK3KPHdtjShHH1002
LzUVuI6ibbEh7lv5NjSQZTLcSw1aEucGKhfmLy3qdsC5TiDCuCviUyfAGJGTOlEA
d0NKJAt2kJSQAb5cO0wW9QWX61SXYIOkFcac9XAFC/upUqvJwhLumne6tNZQVVyz
ZbQwjRmOxpbIvHjMVLTOwZwP2gNwvb1w2mqIYNDGGHZrtWaxddDx61sImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAq2sqNI6bwvUVOmuh2T6PopBc0MB8GA1UdIwQY
MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt
NjFiYzdlY2M0ODVjLzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj
LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPWriA9E
+hKonBmgD/RYIhWL9POxUB/COtM75A05lz7IHzxhoZ0Yvgxaf+u6n7TAvan4BaTb
kU35X/JD0XlLQrlEtxLAiOn3naE4dn+LEtl+1rRapQC9Np5bvlTJIti7B9YZQnGP
iVCU4p7/T2P/unmQih8hWWR1m0rjGHY2WDiQUxmSikq131I7BiRnEzhwDXEtmPNY
kqaz4vJ9IgQJJuUNYt/DC4ncdZQfx+rh6pn8UvVoV8CyoV7GplErI30z4L+tA0eH
xzOr2cy4G8q3MILYTV4Js/bI7dU7IYojBlYeDDphicawqdY8oQuK+bQLZdX5yD5w
0QiPP1GcfbvDFg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:13:39 2026 by rpki-client