Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: g6hoEDMPoh19Tlc08Qpo0/pnhTZjHCBX1J4OLbbJbUc=
Subject key identifier: BE:C6:FE:74:DC:BD:92:68:1C:4A:B7:48:01:A1:3F:71:69:2A:85:E5
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019D284D9B01D5925D6B83601CBA8E0A8631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0DCE
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: cZyY+oD7zPrMnR4+wc28fO8ZlOcuPo3AMr+KFxBoElo=)
3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9b:01:d5:92:5d:6b:83:60:1c:ba:8e:0a:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=bec6fe74dcbd92681c4ab74801a13f71692a85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:be:31:ed:c7:cc:2b:d6:8d:6b:7a:95:7c:
80:e0:76:60:e9:4c:40:d9:6a:33:8b:0b:f5:e6:84:
63:78:c2:93:76:fe:27:99:13:b7:5b:2f:f7:f8:77:
54:c4:48:6b:b1:bd:6a:d8:9b:53:e2:92:32:e3:15:
f7:ef:40:b2:3d:60:99:57:eb:e1:6a:3d:41:fe:9c:
a0:fb:4d:b3:c8:ae:22:34:e0:d8:c4:38:95:ac:ec:
1e:34:ca:6a:96:9f:1a:ec:ec:d5:5c:43:69:2d:83:
eb:dd:a3:0c:aa:68:57:7c:b9:fa:4e:f9:9f:55:8e:
ac:5e:bc:6d:6f:26:64:11:e1:6e:b7:d9:1f:80:3c:
a1:98:3f:c0:99:01:28:c4:b5:6a:13:61:90:35:23:
0d:9c:5a:68:33:e7:0f:85:6d:64:f4:68:8f:33:5b:
3b:c1:99:35:6e:e4:79:d5:a0:fa:1f:27:0c:9a:d1:
7b:ff:13:31:5f:ff:20:0c:8d:ff:37:51:c9:61:b1:
8f:e7:42:6e:54:96:3c:70:2a:1d:66:c7:f3:15:14:
a8:42:fb:62:15:19:35:99:5f:c5:5a:ba:3f:f1:d3:
99:a0:86:e0:b5:57:a2:4d:d6:cb:da:8e:34:a7:34:
a3:80:ee:b4:0b:26:cd:43:b5:7c:07:04:0f:2e:a6:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:FE:74:DC:BD:92:68:1C:4A:B7:48:01:A1:3F:71:69:2A:85:E5
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:a0:d6:b1:12:3b:f4:86:6a:08:33:86:f9:5a:9e:92:2c:
b6:54:b1:75:28:40:41:95:64:0e:a7:76:2f:2b:32:ce:12:4d:
bd:2f:59:52:ad:09:22:c8:98:f7:7f:b3:27:00:6f:28:91:8b:
c2:0f:65:32:dd:11:45:f3:29:9b:75:83:b8:62:fa:9c:93:6f:
47:61:aa:0b:d7:bd:75:23:cc:ac:ac:3a:03:6a:64:50:a9:49:
80:87:3f:84:b6:dd:de:2d:66:d0:4e:4f:75:a7:84:65:17:1f:
a5:b3:bb:95:41:2a:ac:80:6e:d0:fe:b8:d7:e8:53:a5:4e:e2:
40:3d:32:d8:a5:b4:34:bd:d8:65:61:30:51:79:8c:17:a5:bb:
dc:c3:e7:b5:1d:e3:0d:4b:0d:10:e5:8e:51:c0:20:8d:ca:64:
cf:bc:37:64:eb:db:d0:8a:6c:b9:8c:e6:a4:54:ea:ff:63:61:
50:27:c9:e2:9f:ab:cb:0f:1e:c5:23:c6:08:b3:f1:c5:b7:24:
d4:45:f9:d1:c9:2a:9c:9a:5c:5a:12:41:89:aa:cd:98:9d:4d:
fc:b4:72:8d:89:af:84:2f:1a:6b:ae:53:d7:ee:45:8d:36:1c:
fd:fe:61:29:20:1f:83:ff:4b:d8:b7:ea:15:82:97:d4:6d:2f:
28:1e:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:24 2026 by rpki-client