Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: SDkDbrAJZXv/fjaJA7LEA+hajO2UeF0ZKpw6MaFAjHM=
Subject key identifier: 5B:87:7F:41:93:9D:1F:1B:90:29:89:6C:35:53:89:FA:FA:AA:42:97
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01A13CA576E99C0992C9905C964597B25FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 23:00:39 +0000
Manifest this update: Wed 14 Oct 2026 23:00:39 +0000
Manifest next update: Thu 15 Oct 2026 23:00:39 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: NVg/+FjBSsviLNeVyslFfBJUYM3mneNekuwM/Zkd9Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:76:e9:9c:09:92:c9:90:5c:96:45:97:b2:5f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Oct 14 23:00:39 2026 GMT
Not After : Oct 15 23:00:39 2026 GMT
Subject: CN=5b877f41939d1f1b9029896c355389fafaaa4297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:d7:51:87:3f:60:f5:2f:f3:3f:37:a2:80:
62:25:30:73:ee:23:ff:ab:b0:18:68:3b:07:fe:94:
12:91:68:be:81:b4:4f:7f:be:0a:ad:61:f9:2c:43:
34:fb:3a:90:b7:78:9b:a1:01:de:0b:50:70:5d:3e:
27:2e:72:52:a9:9f:1d:58:ec:20:4f:09:92:df:ef:
14:da:8a:e1:67:e1:69:4c:6d:c8:b7:93:4c:21:93:
2b:45:7f:d1:ce:c6:cb:42:5a:21:33:b6:f9:79:40:
c3:e0:de:50:d3:67:21:98:e2:6c:77:03:7c:61:d4:
9d:82:43:58:59:01:00:87:59:d4:3c:52:f1:14:9f:
ae:03:f9:53:80:86:1c:ba:49:10:c2:da:58:4a:03:
90:7e:ac:f5:40:4e:c2:5c:9a:43:4c:ec:3e:b8:a6:
35:b2:5f:a5:21:b8:06:9a:a7:0b:12:de:8c:e6:d4:
93:ae:a0:1d:20:13:1e:11:18:28:28:7e:0b:e1:96:
bd:1f:01:9b:93:6e:fb:a1:2c:60:84:7c:89:c4:81:
5d:a0:a1:6b:23:1b:ec:66:c5:2f:ed:c6:d0:94:bd:
37:fd:39:f8:f7:1b:5e:68:16:59:d5:7a:08:cc:02:
0b:31:8e:32:56:94:00:c3:4c:1d:1f:d5:f0:6a:cf:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:7F:41:93:9D:1F:1B:90:29:89:6C:35:53:89:FA:FA:AA:42:97
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:63:74:62:8e:61:f0:57:d6:bf:68:33:7e:9d:93:44:03:
0c:d0:79:72:9e:d6:5f:70:9f:c8:fd:18:9b:50:0a:77:36:c9:
29:9c:33:05:3a:2b:1e:85:33:99:e0:60:46:f3:6b:af:01:0e:
8e:8d:ba:02:3c:14:29:b4:ff:f0:67:4c:95:e9:39:16:7d:92:
c1:bc:69:f7:10:9e:a1:f6:c7:2f:8a:f5:70:d2:6f:cf:e7:63:
7e:cc:7d:04:d0:19:d6:af:e5:f5:1f:77:08:f5:e8:75:f7:10:
ee:e8:73:4c:1d:84:bb:b6:f8:cb:af:22:35:f8:60:10:4e:39:
7a:e4:0a:71:44:55:e2:4d:dc:59:1b:2c:53:1b:c0:f1:b4:52:
19:0d:c2:a8:d7:b8:87:24:33:ff:4e:4a:4b:7d:6b:67:2e:ec:
b3:bd:03:eb:d3:33:3f:1a:6d:7e:60:72:eb:e3:60:17:e3:04:
b8:2f:12:66:d8:4c:f1:a8:0a:6f:1a:81:59:25:4d:b9:59:0b:
32:8d:a0:42:b3:2b:60:96:f9:4f:0d:91:91:f8:5a:b8:49:f3:
cc:e3:9a:9f:ca:c8:6c:8c:a0:9a:d7:d7:cd:2a:8a:11:ca:2e:
8f:dc:a1:7f:84:9d:82:ae:39:6a:9c:af:52:05:0a:6f:c2:03:
c5:13:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:06:10 2026 by rpki-client