Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: jQcpfvtC4UrvLf6AnLJhCLdD3gJke7e3FP5cE6kpCEo=
Subject key identifier: AF:92:C9:15:97:C9:09:F5:66:17:91:9D:D6:42:8C:18:9F:06:8F:CB
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01A0C1E8CF6E1DFA3BC2CE12E9EA1DA65AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 15BF
Signing time: Mon 21 Sep 2026 03:00:55 +0000
Manifest this update: Mon 21 Sep 2026 03:00:55 +0000
Manifest next update: Tue 22 Sep 2026 03:00:55 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: T2oSgwtg8GsQsWsbM81g0mOApRQ9cHLG1PVy8skiGtQ=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:cf:6e:1d:fa:3b:c2:ce:12:e9:ea:1d:a6:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Sep 21 03:00:55 2026 GMT
Not After : Sep 22 03:00:55 2026 GMT
Subject: CN=af92c91597c909f56617919dd6428c189f068fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:b0:3b:0f:d4:18:ea:79:3f:db:2a:85:c5:
0b:cf:38:15:26:21:4d:a7:4c:d6:59:65:a3:e2:c1:
1d:e0:a9:6b:59:d6:12:30:35:dd:0f:18:0d:06:0c:
d8:e7:01:b0:24:f4:c2:fa:e9:61:7d:04:f5:e4:d7:
c3:52:79:d3:a4:f6:f4:da:8b:b8:88:69:9a:cb:c0:
d0:28:9f:7e:1f:29:7f:eb:69:66:a4:64:7a:72:5e:
4c:c5:3b:32:72:2b:11:58:b2:4c:d2:08:c9:0c:3f:
79:2f:65:e9:0a:33:0b:15:2e:d5:50:53:0e:95:b3:
dd:ac:d4:a3:85:dd:eb:48:18:c4:e6:7b:62:85:1a:
64:3e:fe:5e:ab:79:30:7f:11:59:9d:41:51:54:8d:
8b:6b:f5:fd:6d:06:a6:14:9d:84:04:94:3c:6b:5e:
7a:04:ca:1b:2d:77:39:db:b6:3b:2f:ea:00:87:55:
d9:a8:1c:f3:a6:ee:d6:84:0f:a6:b6:fb:82:19:5f:
ca:c5:b3:e0:3b:de:e8:ae:d7:5f:31:db:9b:23:ad:
af:e1:1f:4e:9f:00:18:0e:72:63:2a:20:be:99:1b:
e9:16:7c:cc:bc:83:9e:5e:91:8e:dc:aa:a9:cc:b7:
14:d3:8c:2b:b9:4d:a8:6f:d1:b5:e0:24:8d:13:96:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:C9:15:97:C9:09:F5:66:17:91:9D:D6:42:8C:18:9F:06:8F:CB
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:85:ab:82:91:5a:49:29:f0:5c:55:60:8e:8e:5a:1e:85:
48:84:83:cc:6f:a4:d5:77:2d:7a:08:73:c5:1e:c1:ed:b8:a5:
9a:47:49:53:5e:d6:89:82:cd:0b:d2:bc:a1:9a:82:ca:35:6f:
6c:0f:f5:5e:98:f7:21:60:50:7a:4a:9a:cb:ad:c5:0a:73:74:
39:f3:2f:e8:36:8c:42:21:85:cb:b3:6c:49:a6:b2:18:13:cd:
63:78:c9:04:4e:33:67:0a:c8:26:78:d5:7c:d6:90:b3:ee:14:
65:4f:73:2e:51:a8:a8:4f:53:03:db:d9:df:17:50:4a:b2:af:
f9:59:98:2e:91:af:e0:40:52:f6:0e:65:34:f4:e0:09:2a:c1:
1d:1c:e4:a8:64:76:68:04:6f:32:7a:ba:7d:c0:ed:1f:10:3b:
0e:c8:f3:7a:dc:2a:c7:67:4f:2b:2b:04:fc:2d:17:fd:a4:d9:
74:3b:a4:67:f8:24:14:d9:2e:e1:45:27:98:20:a6:74:11:b4:
eb:c2:a4:2c:18:19:60:d8:e4:46:bf:2c:ef:b0:dc:c0:de:07:
bf:fe:5b:75:2c:df:1f:90:3a:47:4e:b9:b0:d6:27:45:41:33:
ed:42:13:2c:bf:ee:5f:4b:dd:25:d4:02:24:03:fe:2d:6f:42:
09:3e:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:38:07 2026 by rpki-client