
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: WYDuuUCLrHw+TmfdIsWvz2/FqA0sO8q4P36d7ORw/gE=
Subject key identifier: ED:C7:07:DC:7B:A8:2B:60:8F:2A:7F:C7:ED:28:37:EE:EF:02:14:02
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019E1D9145BEA0F314E981A5BED70373C4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0E4D
Signing time: Tue 12 May 2026 19:02:00 +0000
Manifest this update: Tue 12 May 2026 19:02:00 +0000
Manifest next update: Wed 13 May 2026 19:02:00 +0000
Files and hashes: 1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: y2Ywed8rhfvKUdFCfRRUUC7dfdJXCwwe6A2kxbMu3qI=)
3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:45:be:a0:f3:14:e9:81:a5:be:d7:03:73:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: May 12 19:02:00 2026 GMT
Not After : May 13 19:02:00 2026 GMT
Subject: CN=edc707dc7ba82b608f2a7fc7ed2837eeef021402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:eb:79:65:b9:1b:b4:30:1a:ef:78:47:98:
09:03:3c:26:aa:55:50:34:fe:3a:c4:8a:97:60:d9:
59:42:a1:1b:93:88:da:e5:26:d6:0f:b0:48:91:63:
b9:ce:f7:c4:f3:b7:6e:98:c8:91:09:71:f3:77:76:
e5:67:bb:1b:cd:88:82:ff:31:99:e3:dd:b3:95:ce:
30:c3:8b:b8:b6:4e:6e:69:63:47:97:16:f4:81:08:
1a:c5:38:fe:1d:67:40:1b:61:9b:12:ce:bf:f9:4c:
4e:b5:63:e8:27:8b:65:ad:ef:1e:fc:7d:5f:7e:94:
d2:26:2d:d2:e6:5b:31:42:68:d7:30:82:8e:66:f5:
00:cc:bc:47:51:9f:bf:2c:5f:52:b1:ae:01:53:78:
bf:81:c1:62:2c:a8:2f:fb:fb:4f:c9:12:a9:00:e2:
af:69:3a:ea:a2:db:33:74:96:19:32:19:6e:2a:5e:
e5:fb:7b:f5:db:b3:3c:09:81:d4:83:bd:57:92:f3:
31:7f:82:ec:f1:11:95:83:07:41:1a:9b:d2:8d:d8:
3b:d5:2e:39:1a:72:2b:f0:7e:a4:d3:e9:17:61:8e:
68:ae:ed:c3:96:df:14:47:26:b4:04:eb:5d:0d:b0:
b3:fc:09:44:80:fa:00:78:22:08:d9:f6:90:5f:0a:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:07:DC:7B:A8:2B:60:8F:2A:7F:C7:ED:28:37:EE:EF:02:14:02
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:7d:32:01:02:65:92:4b:62:1c:fd:dd:8f:31:48:93:81:
58:ec:42:e7:b2:02:d0:77:9b:39:f4:b0:31:74:1f:3a:6a:e2:
88:a7:a4:ee:7b:67:c9:07:6e:05:21:ec:ca:c3:c5:d8:76:d1:
d6:4b:de:fc:21:ac:2c:b4:c1:64:6f:95:07:be:27:b1:8e:37:
ea:e3:64:d0:85:8b:6a:2d:17:b3:f2:8b:99:0f:ad:df:54:37:
5c:ba:cd:63:7d:76:84:60:1f:2d:6f:77:87:6d:d5:a5:6e:91:
60:b1:80:90:f0:17:52:df:f5:2d:f0:7c:d2:15:d6:42:c3:54:
e0:5f:ea:6b:c9:01:85:13:f8:60:e7:21:fb:d0:dd:34:4c:c6:
7f:aa:2d:31:7a:be:af:88:ad:e0:9f:ff:51:54:32:4b:22:d2:
2d:ab:2f:01:41:3a:fe:5f:46:a3:92:08:db:59:a3:a9:38:0c:
56:ee:b2:89:ff:86:e4:4a:ef:64:33:db:59:8c:9e:52:70:d3:
dd:24:8d:dd:dd:f8:be:c1:b5:c2:dc:e6:f2:f6:74:d9:ff:ef:
03:87:8d:8c:c4:8b:96:b9:74:64:e7:c7:71:44:4b:12:05:77:
76:34:ee:07:ea:35:79:87:0e:86:28:4e:e6:ba:60:09:37:ec:
bc:09:6d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkUW+oPMU6YGlvtcDc8TcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjYwNTEyMTkwMjAwWhcNMjYwNTEzMTkwMjAwWjAzMTEwLwYDVQQD
EyhlZGM3MDdkYzdiYTgyYjYwOGYyYTdmYzdlZDI4MzdlZWVmMDIxNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr83reWW5G7QwGu94R5gJAzwmqlVQ
NP46xIqXYNlZQqEbk4ja5SbWD7BIkWO5zvfE87dumMiRCXHzd3blZ7sbzYiC/zGZ
492zlc4ww4u4tk5uaWNHlxb0gQgaxTj+HWdAG2GbEs6/+UxOtWPoJ4tlre8e/H1f
fpTSJi3S5lsxQmjXMIKOZvUAzLxHUZ+/LF9Ssa4BU3i/gcFiLKgv+/tPyRKpAOKv
aTrqotszdJYZMhluKl7l+3v127M8CYHUg71XkvMxf4Ls8RGVgwdBGpvSjdg71S45
GnIr8H6k0+kXYY5oru3Dlt8URya0BOtdDbCz/AlEgPoAeCII2faQXwpfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3HB9x7qCtgjyp/x+0oN+7vAhQCMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7Z9MgEC
ZZJLYhz93Y8xSJOBWOxC57IC0HebOfSwMXQfOmriiKek7ntnyQduBSHsysPF2HbR
1kve/CGsLLTBZG+VB74nsY436uNk0IWLai0Xs/KLmQ+t31Q3XLrNY312hGAfLW93
h23VpW6RYLGAkPAXUt/1LfB80hXWQsNU4F/qa8kBhRP4YOch+9DdNEzGf6otMXq+
r4it4J//UVQySyLSLasvAUE6/l9Go5II21mjqTgMVu6yif+G5ErvZDPbWYyeUnDT
3SSN3d34vsG1wtzm8vZ02f/vA4eNjMSLlrl0ZOfHcURLEgV3djTuB+o1eYcOhihO
5rpgCTfsvAlt5w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:31 2026 by rpki-client