Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft
File: hvKEMvItcjPdX3Xz07HMCHN4-0g.mft (raw, json)
Hash identifier: a37GI2uIInM9erQPDAtmGd3esqvyT+k32RS/Fils6qo=
Subject key identifier: 8A:CD:64:1A:D5:42:A2:E8:9E:5C:71:7A:37:76:75:C9:ED:75:8E:4B
Authority key identifier: 86:F2:84:32:F2:2D:72:33:DD:5F:75:F3:D3:B1:CC:08:73:78:FB:48
Certificate issuer: /CN=86f28432f22d7233dd5f75f3d3b1cc087378fb48
Certificate serial: 019D26CD8558A48085F5A883C7FAAF3F5641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft
Manifest number: 0232
Signing time: Wed 25 Mar 2026 21:01:36 +0000
Manifest this update: Wed 25 Mar 2026 21:01:36 +0000
Manifest next update: Thu 26 Mar 2026 21:01:36 +0000
Files and hashes: 1: hvKEMvItcjPdX3Xz07HMCHN4-0g.crl (hash: W7Ubwho2sFMvdTneEcCKfwa+PmH/Ww8MCVJv54iaFzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:85:58:a4:80:85:f5:a8:83:c7:fa:af:3f:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f28432f22d7233dd5f75f3d3b1cc087378fb48
Validity
Not Before: Mar 25 21:01:36 2026 GMT
Not After : Mar 26 21:01:36 2026 GMT
Subject: CN=8acd641ad542a2e89e5c717a377675c9ed758e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:52:ba:7d:c3:25:e5:df:3c:90:7a:30:5e:
f8:48:f5:a2:10:65:92:90:dc:0a:4d:50:16:bd:d6:
b4:ee:0c:79:34:94:af:d0:f5:3c:d9:e5:70:e1:96:
5f:2d:50:2f:c6:3e:3a:ca:44:01:97:8b:ea:ad:bc:
98:29:88:a3:87:71:a4:9c:6c:fc:33:dd:bc:4a:1b:
04:a7:13:f9:98:c6:26:f4:fb:c4:c0:30:cf:45:4c:
a1:c2:8c:57:67:04:68:12:13:2d:46:8e:92:60:57:
43:e5:01:46:7e:2e:38:f6:ba:cb:f4:fc:be:5f:72:
d9:1e:19:70:b1:08:49:4a:2f:b3:ec:12:fb:19:6a:
99:5c:e4:c9:a8:5d:0b:3a:b9:8b:f7:f7:74:3b:ea:
b4:73:3c:6c:56:6c:cf:97:49:d2:80:98:d2:25:ed:
3d:7d:c8:bc:08:d0:44:34:8d:45:4b:c7:b3:b5:bd:
59:dc:14:95:45:6f:41:ea:fe:33:25:36:30:4c:b0:
45:a9:ee:65:5e:6a:42:b4:84:01:be:74:26:02:68:
96:9a:b2:fc:07:a0:62:ee:fa:9d:33:7f:ca:29:e7:
a0:09:e8:2c:87:4c:44:ac:f8:18:5f:b7:7b:8e:f8:
b2:04:d0:5f:b1:73:89:fc:c8:28:b4:75:ad:a7:54:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:64:1A:D5:42:A2:E8:9E:5C:71:7A:37:76:75:C9:ED:75:8E:4B
X509v3 Authority Key Identifier:
keyid:86:F2:84:32:F2:2D:72:33:DD:5F:75:F3:D3:B1:CC:08:73:78:FB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:9c:af:f1:52:6e:15:b0:09:1a:5a:15:bb:55:b5:25:14:
f5:9a:69:41:b1:55:48:b3:20:bd:e7:05:e9:4a:0c:90:6c:d6:
8d:23:db:27:99:06:87:5f:ae:04:c4:3c:f4:b8:6e:0a:8d:39:
fc:5b:a2:0e:55:ad:e9:3d:27:af:9e:da:18:aa:2d:ad:8a:01:
0e:78:63:62:33:f7:7a:cd:c0:0c:33:1b:e5:3d:ac:cc:64:c5:
c3:1c:65:a7:5e:52:db:75:85:24:8c:e9:6d:eb:fb:06:6e:47:
fd:63:8f:13:20:14:d5:1a:81:1b:64:2c:59:35:1a:99:17:e1:
9e:c7:cc:4d:8e:fe:87:b2:cf:d0:66:c3:67:de:ce:fa:75:13:
c4:a0:fd:e8:1a:90:58:f0:4b:52:d4:db:e6:f5:e3:08:f7:c5:
83:3c:a6:8a:9f:c6:25:07:e5:c3:d0:9b:c1:75:6b:e1:9b:36:
60:90:5c:51:f0:30:d5:80:93:84:54:04:d3:1d:d9:f3:5c:26:
89:b9:ab:d8:53:b0:9b:35:c2:b2:6f:7d:6c:e5:d0:7c:4c:fe:
e1:d5:3d:2e:e4:d1:4f:03:42:01:ac:f6:ed:5e:cf:64:40:c5:
b0:a5:b4:97:84:50:c8:60:ad:42:ee:5b:2e:1d:f8:f3:03:7e:
54:fc:df:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYVYpICF9aiDx/qvP1ZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjI4NDMyZjIyZDcyMzNkZDVmNzVmM2QzYjFjYzA4NzM3
OGZiNDgwHhcNMjYwMzI1MjEwMTM2WhcNMjYwMzI2MjEwMTM2WjAzMTEwLwYDVQQD
Eyg4YWNkNjQxYWQ1NDJhMmU4OWU1YzcxN2EzNzc2NzVjOWVkNzU4ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KJSun3DJeXfPJB6MF74SPWiEGWS
kNwKTVAWvda07gx5NJSv0PU82eVw4ZZfLVAvxj46ykQBl4vqrbyYKYijh3GknGz8
M928ShsEpxP5mMYm9PvEwDDPRUyhwoxXZwRoEhMtRo6SYFdD5QFGfi449rrL9Py+
X3LZHhlwsQhJSi+z7BL7GWqZXOTJqF0LOrmL9/d0O+q0czxsVmzPl0nSgJjSJe09
fci8CNBENI1FS8eztb1Z3BSVRW9B6v4zJTYwTLBFqe5lXmpCtIQBvnQmAmiWmrL8
B6Bi7vqdM3/KKeegCegsh0xErPgYX7d7jviyBNBfsXOJ/MgotHWtp1QtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrNZBrVQqLonlxxejd2dcntdY5LMB8GA1UdIwQY
MBaAFIbyhDLyLXIz3V9189OxzAhzePtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84NTM5Y2QtODBiYS00YzY2LWJhMjct
ZmU1MWE0OGM2ODAxLzEvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84NTM5Y2QtODBiYS00YzY2LWJhMjctZmU1MWE0OGM2ODAx
LzEvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSOcr/FS
bhWwCRpaFbtVtSUU9ZppQbFVSLMgvecF6UoMkGzWjSPbJ5kGh1+uBMQ89LhuCo05
/FuiDlWt6T0nr57aGKotrYoBDnhjYjP3es3ADDMb5T2szGTFwxxlp15S23WFJIzp
bev7Bm5H/WOPEyAU1RqBG2QsWTUamRfhnsfMTY7+h7LP0GbDZ97O+nUTxKD96BqQ
WPBLUtTb5vXjCPfFgzymip/GJQflw9CbwXVr4Zs2YJBcUfAw1YCThFQE0x3Z81wm
ibmr2FOwmzXCsm99bOXQfEz+4dU9LuTRTwNCAaz27V7PZEDFsKW0l4RQyGCtQu5b
Lh348wN+VPzfhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:24 2026 by rpki-client