Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: M2Ty3eJ+5VkvjeoBZzmWc8Oyg/OruRLT3/YwT4/DUn4=
Subject key identifier: 69:3E:54:C1:5F:72:32:86:AE:08:5B:18:5E:25:07:F8:24:9E:86:86
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019CAB346C9E67E129F637803B1620E8DA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 13A1
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: 9/fNTU2JOBa58ruZ2YDNu9JETqzQgXx9gR6+UDrA7Bs=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6c:9e:67:e1:29:f6:37:80:3b:16:20:e8:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=693e54c15f723286ae085b185e2507f8249e8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:59:f1:3f:d0:b3:03:84:57:33:31:cd:62:
76:3c:2c:28:41:7b:a0:d6:40:7a:35:81:61:96:86:
a8:cf:50:14:2e:89:47:9c:24:9b:b2:8f:59:5a:9b:
6e:31:24:2c:2c:54:9f:fb:25:67:c5:a9:7b:fc:d3:
ae:74:69:5d:c1:e7:ae:8d:4b:e8:59:fe:2c:30:45:
8c:c4:c1:3a:35:26:ff:03:ff:0c:4d:67:3e:fd:a2:
aa:04:8f:70:84:57:5b:bc:c4:8d:eb:04:e3:06:e2:
cf:81:54:11:bd:d0:ff:36:9b:c1:91:3d:cb:e9:78:
34:0d:3d:13:ce:20:57:50:75:5b:3f:42:8d:50:c5:
6f:27:35:4c:8d:d6:e6:7a:20:62:9f:0a:6b:75:f6:
f5:ee:ad:c5:fd:f9:4f:13:12:79:53:7e:16:c5:e4:
d6:4b:af:b8:c3:0b:21:d1:f4:6a:d5:b0:25:97:7d:
25:ed:82:d8:ab:8c:92:2b:30:d7:77:a8:9d:0b:09:
45:28:e4:2f:a8:c5:52:a4:05:a2:f5:72:6f:d1:ec:
ac:47:05:cd:bd:33:96:5f:76:89:91:aa:ec:ba:4d:
83:73:f1:c7:6b:0a:27:30:8b:99:e6:0b:e9:aa:cb:
f6:26:1d:57:d4:58:cd:d4:e2:10:d8:58:0f:61:9a:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:54:C1:5F:72:32:86:AE:08:5B:18:5E:25:07:F8:24:9E:86:86
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:48:3b:7a:89:50:de:73:aa:aa:0a:26:96:a1:f5:c1:78:a4:
86:a7:a4:80:5e:1a:18:58:43:54:eb:76:ba:bc:b8:43:49:38:
ec:eb:92:2f:51:8c:b6:e1:45:81:fe:f7:20:d2:5e:86:8b:31:
07:f7:f6:b6:cd:f4:82:79:fe:a5:5a:1d:0b:2b:50:5b:b9:52:
93:8f:c1:8a:07:a9:05:a8:40:e3:ef:16:6a:b1:74:f3:e3:cc:
48:d4:a3:da:70:a6:59:66:00:4f:90:13:28:38:5a:20:c8:1f:
14:e3:9e:85:b6:cc:28:27:82:33:5f:a4:e6:5d:d6:ea:e1:cb:
b0:9d:b9:53:c9:7f:1f:4b:53:97:9b:b9:bc:f3:ac:5c:d1:62:
76:de:95:d1:6a:87:04:32:15:5c:46:d7:89:4d:dc:52:be:a2:
b5:64:77:a3:7e:d9:ed:1b:a6:c9:d3:2a:0e:ed:4a:57:ae:20:
a5:a2:97:3a:17:af:94:69:6f:f2:ee:48:65:35:ef:42:90:35:
41:75:2b:46:1f:a1:3a:e4:80:ed:6f:b9:3f:48:f8:71:af:08:
97:2c:ed:ce:0f:77:11:3b:a6:e5:0b:0f:df:8b:85:f2:3f:48:
7b:b2:6b:c0:40:02:be:86:11:a9:fa:56:92:45:3a:fd:f8:4b:
92:23:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:54 2026 by rpki-client