Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: oKOwcjaPjUbVCn47ylXHw9tXuPvBi+bsmo1wPJVdDQU=
Subject key identifier: FC:C1:32:3A:A5:60:39:E2:4D:38:62:0C:6B:3E:82:96:DF:B7:8A:89
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019F93C8BC21037FD94AFD036712EACDB38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 11:00:33 +0000
Manifest this update: Fri 24 Jul 2026 11:00:33 +0000
Manifest next update: Sat 25 Jul 2026 11:00:33 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: o5Bk5ngmWnoE7v52dyZ2WBHt9Sti85PvkZCyeH8Y71c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:bc:21:03:7f:d9:4a:fd:03:67:12:ea:cd:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jul 24 11:00:33 2026 GMT
Not After : Jul 25 11:00:33 2026 GMT
Subject: CN=fcc1323aa56039e24d38620c6b3e8296dfb78a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:37:11:56:fd:76:4f:01:31:a8:9d:b2:7b:
3e:ee:33:42:67:27:8a:48:ba:37:f8:2c:6d:e4:2f:
7f:f5:10:60:ce:c2:a6:7f:34:25:da:7d:97:19:be:
f4:69:90:c7:ad:cd:86:9c:9b:b2:cf:10:41:e0:9c:
28:74:97:52:3f:54:83:4b:1a:30:ce:be:8c:59:b7:
0a:0e:05:65:f2:51:c7:26:78:59:76:c6:76:9b:3e:
49:dc:2c:96:d2:29:4b:d5:74:fb:1d:0b:8f:e5:0b:
fd:ad:52:59:b7:41:7c:a6:91:97:88:b8:73:90:65:
a2:f5:12:21:8b:7a:80:74:d0:3c:94:90:b0:27:66:
f0:cb:fd:bd:63:61:b5:a0:52:79:b6:9e:ec:8f:46:
b8:4d:56:55:8f:3e:01:7f:57:79:44:3f:cc:40:c2:
72:22:bf:5d:bf:36:14:ea:c6:40:f4:c7:ca:f1:68:
92:94:85:ae:cc:68:b7:9d:23:95:a6:57:06:b5:eb:
80:41:7f:6e:dc:28:f7:6c:9e:24:1a:ef:3c:35:d6:
29:06:36:9d:03:9d:a6:7c:68:8e:6b:42:21:8c:96:
2f:4f:ea:aa:3e:d0:a7:aa:84:c6:ad:a3:4e:fd:5f:
bc:84:65:ef:42:0d:00:71:c6:7e:22:0c:19:c9:1e:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:32:3A:A5:60:39:E2:4D:38:62:0C:6B:3E:82:96:DF:B7:8A:89
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:86:d2:08:22:bd:41:24:f4:d0:14:3f:a3:e2:f9:de:93:f6:
46:2a:33:d8:a8:50:18:ae:ac:e6:10:40:89:02:9a:d4:d3:88:
77:2e:f6:af:5e:27:aa:a9:fa:33:32:70:16:6a:22:c6:1f:d1:
b3:ad:50:e4:c1:2f:57:f3:1f:28:c1:0d:1a:55:df:1a:e2:7e:
ce:75:1b:b3:9d:fa:b3:69:85:72:9e:0e:d0:f2:84:90:09:d8:
68:4e:ea:14:6f:aa:ab:56:10:be:65:89:e2:34:d3:96:f3:86:
31:5e:7e:d6:67:99:d8:78:33:1b:74:9b:7e:3b:6b:28:da:ea:
a2:8b:4d:1e:c8:11:63:13:97:5b:44:ae:cc:d2:9e:00:37:c4:
86:3d:b0:fe:28:d3:cf:ff:f6:fb:2d:f5:af:b9:30:8f:37:f8:
9b:c9:37:88:9e:f6:2a:32:64:7b:7a:eb:79:cf:f1:d4:ce:f2:
ef:a1:f1:90:27:e1:50:ca:74:f5:da:f0:26:7a:b8:d3:24:79:
c5:d9:a1:62:a9:74:a8:f8:c1:a9:e8:9f:95:0d:0e:3f:f8:9c:
69:ce:40:a8:7b:78:7b:39:d4:d8:51:ea:7d:89:f7:61:d7:61:
46:20:2e:1b:d3:1a:ee:05:46:cf:ed:96:bc:61:6a:d9:9d:b0:
d5:de:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:53 2026 by rpki-client