Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: Tp/eQr1Fe2Jt/kAt2J6FDiiwXrYbaIqU9TIomKzYZKk=
Subject key identifier: 7A:65:2D:B9:5F:3A:B1:50:8A:B7:34:83:96:E6:DC:52:D1:8A:73:41
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 01A0D8A7CBCB8D0467A9E20B48FEE5F1C189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0FB7
Signing time: Fri 25 Sep 2026 13:01:10 +0000
Manifest this update: Fri 25 Sep 2026 13:01:10 +0000
Manifest next update: Sat 26 Sep 2026 13:01:10 +0000
Files and hashes: 1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: QxkSG/Ke8J6hVIoDGTqEgWpJtBeBt7gWMrqNMw1a72w=)
3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:cb:cb:8d:04:67:a9:e2:0b:48:fe:e5:f1:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Sep 25 13:01:10 2026 GMT
Not After : Sep 26 13:01:10 2026 GMT
Subject: CN=7a652db95f3ab1508ab7348396e6dc52d18a7341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:46:97:aa:48:0f:4c:8c:cf:60:b9:6a:ef:
34:0a:2e:5b:80:6f:da:9a:70:a8:69:84:82:4a:25:
b7:c2:e6:22:9a:3b:4f:a5:2d:bd:95:52:e1:9d:f6:
9d:67:47:44:8f:40:7b:82:45:f5:a4:7e:0b:f3:dc:
76:a0:0a:7b:c2:1c:eb:58:82:a1:ae:ce:ef:3b:07:
b5:3c:b0:7b:b4:9f:ba:29:33:5e:dd:58:89:04:c6:
cb:29:58:0b:34:f9:65:78:19:f8:cc:c5:11:15:7a:
c5:21:70:86:e5:02:36:b2:f9:eb:2d:c1:3e:ea:e5:
8f:ea:80:f8:e9:ed:f7:65:a1:56:e4:b2:e6:bb:a0:
c0:07:48:9f:d7:2a:75:02:e6:31:c6:70:47:2b:19:
17:ae:21:06:5e:6d:3b:43:bb:c9:78:95:7d:be:7b:
9b:08:fb:b5:77:28:3d:5b:50:d6:66:1f:54:6d:de:
01:5f:e0:da:81:c4:97:f6:c4:e9:55:ba:0d:de:08:
09:d6:a9:b3:30:96:5a:44:15:92:2f:a4:59:44:15:
eb:65:e3:eb:8a:10:2a:98:2a:98:30:74:0f:f5:c1:
75:28:7e:62:91:f2:16:00:13:07:47:a4:13:98:44:
61:dc:48:f8:01:e5:4a:91:b0:78:2b:81:01:1f:b8:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:2D:B9:5F:3A:B1:50:8A:B7:34:83:96:E6:DC:52:D1:8A:73:41
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8b:a1:73:19:c7:1e:b4:5b:12:9a:8b:41:ae:55:70:0b:cf:
20:57:54:c6:a8:ec:3d:23:63:32:c9:9d:20:13:17:64:48:6e:
03:c7:e3:92:57:18:a9:40:f6:6b:de:3c:36:3f:73:37:26:ae:
c4:9d:9a:0c:02:3a:8d:0e:83:ad:11:60:f3:21:2f:d2:35:a4:
2c:10:e8:ea:3c:80:3a:8a:df:d0:ac:ed:c8:33:b2:f7:4e:79:
c0:26:eb:fe:c5:38:67:96:b8:8a:ac:44:68:9f:38:c7:b5:7f:
11:ce:ea:79:d1:d7:cb:c6:10:17:7c:7d:b2:f4:50:60:c9:9c:
f6:c0:af:96:26:26:8d:36:7e:cd:df:ee:d8:f8:67:df:fb:33:
67:50:74:fc:cc:50:53:82:1d:17:1f:a4:d1:1d:34:35:5e:62:
da:9e:ad:bc:f1:96:6d:50:f7:2f:dd:50:9e:21:20:99:bd:e5:
09:23:dd:8b:95:ed:73:e3:d2:14:4d:db:3a:10:5a:69:00:71:
a1:e9:3b:45:d5:7f:b0:d3:e6:f4:d2:1a:2a:b3:2f:cb:59:d3:
82:fb:21:7c:f7:03:28:0f:cc:b2:cc:14:d1:4b:7e:a8:58:bd:
e0:4e:1f:8f:b8:3d:10:bc:63:16:f7:0a:f7:09:ee:13:fa:84:
1e:78:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:39 2026 by rpki-client