Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: RT0ZiS/1QdXWmPh6/WLEQajCqoYvOw40solTwRKEg+E=
Subject key identifier: E8:8F:EA:BC:42:2E:14:AF:FB:A9:F1:8F:A6:DF:14:F3:92:09:8F:B5
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019D29CE1B750D7C6E0F2010FB933AFD72CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 11:01:06 +0000
Manifest this update: Thu 26 Mar 2026 11:01:06 +0000
Manifest next update: Fri 27 Mar 2026 11:01:06 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 5v6Lk+CdGtyUKLyFDmMkcVw7T18DpFCGXQ5QHYRKyTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:1b:75:0d:7c:6e:0f:20:10:fb:93:3a:fd:72:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Mar 26 11:01:06 2026 GMT
Not After : Mar 27 11:01:06 2026 GMT
Subject: CN=e88feabc422e14affba9f18fa6df14f392098fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:7b:57:16:61:41:d2:40:bc:2f:e8:d3:d0:
a1:de:a2:fd:f5:c6:ed:71:8f:b2:3c:e9:1d:92:02:
c1:00:23:84:0f:70:0c:1d:35:2d:14:8a:4f:6b:53:
10:ce:ee:4d:4e:3e:0c:36:49:e2:69:23:f5:df:df:
bb:20:69:1f:69:91:b1:60:08:6e:69:9d:8b:c9:39:
f3:51:03:de:06:64:be:97:ef:3e:c3:bf:56:92:38:
45:c6:20:64:5b:41:c6:66:bf:fc:d5:08:72:68:17:
c5:b9:d2:72:e3:63:37:4d:02:96:2e:ea:a1:61:c0:
62:db:f6:8c:fd:a7:ed:57:d2:9e:4b:9d:4a:57:48:
8e:07:68:b8:c0:9e:39:5a:ff:86:9c:bf:e2:ba:b6:
b8:75:13:24:ea:97:d6:26:e0:66:93:a0:ad:47:09:
8a:d3:2d:4d:ae:6d:3b:54:5e:97:d5:6d:4d:7f:87:
1f:37:af:99:45:fd:f9:32:11:70:76:6b:a0:40:3b:
f0:8c:ee:0f:1c:b4:2a:0e:72:26:0e:28:a5:7b:25:
46:cc:05:de:0f:25:43:8c:38:58:e8:f8:8c:5d:5e:
29:bf:37:4b:51:18:01:50:86:d7:8f:5a:65:e1:30:
62:4a:24:57:a3:b5:29:10:2e:39:9c:2e:07:06:bf:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:EA:BC:42:2E:14:AF:FB:A9:F1:8F:A6:DF:14:F3:92:09:8F:B5
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:67:11:5a:ec:0b:bf:57:da:6e:1e:e0:41:ca:92:52:53:0f:
35:d7:56:c1:7c:1d:52:82:13:28:b3:6d:2b:93:4c:59:6a:9a:
64:a0:48:d1:7d:b4:1b:77:27:69:a4:f4:29:b7:60:7f:be:2e:
6a:93:70:76:d1:97:d7:5b:5e:74:0f:85:ae:12:bc:5c:90:9a:
34:9d:d1:c0:ef:c6:3c:5d:7d:3f:58:f5:d4:79:87:f2:68:f9:
a0:74:d5:57:f9:73:d9:65:34:1e:61:3a:4c:52:cb:e2:8c:0a:
6a:99:6f:e5:2b:5e:7b:eb:00:a7:a4:b6:d6:5b:11:92:29:9d:
73:5c:94:13:d4:a8:c1:80:b0:82:a9:bb:c8:98:52:8d:71:1d:
f2:9b:ee:af:97:da:1d:2a:2c:97:ad:6c:90:11:24:e5:b2:61:
cc:b3:24:c8:7d:ce:13:9e:bc:8f:33:7b:63:cf:5b:4c:f6:64:
c9:73:66:0c:a9:62:31:c0:c6:9c:a9:36:a8:7b:72:81:e2:63:
e8:b6:e5:4c:a9:fd:cb:92:f5:d8:e9:05:fb:a7:4e:c4:e1:5b:
ff:dd:f7:61:c0:ff:6f:24:3d:32:eb:54:e8:d8:ae:e1:d2:31:
b5:44:e0:94:00:d6:bd:eb:a9:dd:fc:c0:83:77:63:2c:70:7b:
0c:62:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:56 2026 by rpki-client