Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: zLUN70CrErQf5Y7VBuji/jkjpVKoA91NadlSwRh+kf4=
Subject key identifier: A0:0F:5C:22:7D:DA:4F:2B:E9:10:5F:89:03:8E:1A:03:D6:0A:FF:94
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01A0DE732C69DFE7DCE07BFF066C0E335C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 095E
Signing time: Sat 26 Sep 2026 16:01:24 +0000
Manifest this update: Sat 26 Sep 2026 16:01:24 +0000
Manifest next update: Sun 27 Sep 2026 16:01:24 +0000
Files and hashes: 1: D8tVqO3BJjchT6NM_HDGczaKws0.roa (hash: fIZsVjJEkijeWKIzd1zHSBv3Dper18loUlNZnU50gPc=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: NHnq0CP7Pn+c3fYqZEhilT7l/T/DxEoQ9r2H1gfz21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:2c:69:df:e7:dc:e0:7b:ff:06:6c:0e:33:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Sep 26 16:01:24 2026 GMT
Not After : Sep 27 16:01:24 2026 GMT
Subject: CN=a00f5c227dda4f2be9105f89038e1a03d60aff94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:5a:2e:36:bb:13:ee:34:c4:f9:53:52:ed:
12:31:a9:46:1c:64:b7:b1:9a:83:37:18:6f:ca:98:
c1:fa:6c:32:28:2c:84:95:12:7b:8c:26:13:2d:ad:
36:3e:ab:9d:9e:79:ff:5f:15:8c:6e:76:33:4c:1a:
1b:1d:8a:75:b9:c9:d9:01:5f:15:08:3f:e2:78:97:
6c:14:e9:ce:f9:66:41:ab:34:6d:91:91:0e:ce:9b:
41:55:4e:31:44:e6:27:74:62:18:0b:82:2e:82:5c:
e4:c9:3e:88:0e:52:74:d0:47:67:a6:f7:94:17:11:
e5:50:36:d8:fd:76:c4:1c:ba:41:9a:68:5b:4a:ce:
f3:29:d4:35:92:fa:7a:68:7c:e3:ce:5d:61:1a:c5:
20:53:e5:30:de:94:0a:ec:27:5d:af:c3:56:35:65:
c5:ff:66:82:ba:90:b8:d6:6a:b4:4a:ef:59:86:23:
75:2c:52:54:0f:fa:42:b6:a7:e8:3a:9e:04:10:7e:
6e:de:89:55:ef:44:ba:fb:1d:fa:29:36:dc:42:bf:
86:eb:b5:0f:b5:30:1f:61:75:9a:d2:f0:f8:19:50:
8d:75:f9:71:f7:51:89:3f:69:98:39:cf:76:2f:47:
38:c7:10:30:4e:a2:30:ef:5b:f2:9a:6f:dc:af:86:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:5C:22:7D:DA:4F:2B:E9:10:5F:89:03:8E:1A:03:D6:0A:FF:94
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:0b:9a:a5:90:8e:11:d8:19:b1:3b:52:10:fb:a4:5f:b6:
24:84:e4:8f:70:96:88:15:b9:85:d7:da:1a:c9:26:4f:f8:57:
b5:7e:13:76:20:58:af:b0:62:4a:90:cd:ce:51:06:06:d6:82:
08:38:3e:90:11:6e:e7:5a:47:ea:4b:6b:88:31:86:e7:02:4c:
0f:58:f0:1b:ed:f5:7c:75:4d:79:08:d0:de:39:b7:00:b3:d1:
ae:a2:a3:cb:bb:ff:10:a0:ad:43:60:9b:ad:50:5a:e9:31:50:
e4:81:f5:aa:fd:39:c0:78:97:37:d3:f7:e5:f0:63:b1:0d:40:
8a:64:39:1a:14:d1:31:1d:2c:76:f8:1f:20:6a:7c:15:d0:e3:
ed:36:89:bf:06:19:cc:0f:6d:b6:9e:b5:7b:4c:73:8c:19:a2:
11:09:9b:b9:54:4b:39:f1:56:96:e3:34:21:51:ee:9c:6b:ea:
9d:59:50:94:bc:e9:8d:f0:67:94:cb:1d:ca:87:e2:28:ad:02:
5b:90:64:d2:ef:55:4b:6e:9c:a1:72:fb:59:3d:dd:dd:76:56:
8e:aa:d3:0d:1a:6d:6f:14:71:c8:52:7a:8a:80:f2:1f:29:34:
59:62:87:b5:e5:0c:16:34:25:a0:5b:bf:bc:b2:57:2b:44:87:
ca:5e:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:31:30 2026 by rpki-client