Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: PdSt59BufRe/NSrp3VhIvKnf9Ft5U+TtR7ooJUg+xX8=
Subject key identifier: 70:10:C6:65:29:00:47:65:1E:AB:E3:59:A2:9B:D0:6A:98:EB:A6:4B
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 019D9EBF7974C01BFC99D3DBBF366684467C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0B14
Signing time: Sat 18 Apr 2026 04:00:41 +0000
Manifest this update: Sat 18 Apr 2026 04:00:41 +0000
Manifest next update: Sun 19 Apr 2026 04:00:41 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: 7y1Axrcqu/7ra4y1/L4zK3/vf3YRMRPoqw2w1K5VTW0=)
2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:79:74:c0:1b:fc:99:d3:db:bf:36:66:84:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Apr 18 04:00:41 2026 GMT
Not After : Apr 19 04:00:41 2026 GMT
Subject: CN=7010c665290047651eabe359a29bd06a98eba64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:b3:33:ea:b8:a8:67:cb:44:7a:f9:0c:12:
3a:c0:33:e6:1c:80:de:b4:e0:37:e5:52:cd:12:04:
cc:57:99:8d:bd:c3:42:a0:b4:4a:39:fa:ab:0b:27:
ba:dd:b3:cb:e3:76:fc:9b:29:a9:f4:e5:84:c4:0c:
47:e6:b5:1b:61:43:5e:6c:db:a6:8c:10:61:eb:12:
6e:b8:34:0d:6f:1b:3b:f4:53:8e:cf:48:56:ef:49:
5d:86:50:d4:04:06:93:cb:f6:6d:93:f5:d2:4b:73:
0f:eb:55:d4:ff:52:ff:ca:79:7a:a3:26:88:46:8a:
34:1d:98:d2:71:15:d0:0d:6d:5a:76:8c:04:15:e9:
57:3b:1c:80:28:aa:fa:b2:39:06:7a:6b:67:ae:7c:
cc:66:68:d2:3e:a8:f5:5d:df:23:f6:ed:23:76:06:
e8:37:82:5f:49:64:69:b5:97:cd:7f:40:99:09:35:
b7:67:fc:2a:26:80:c5:a2:44:f8:53:9b:c9:d0:ce:
04:2c:15:1b:86:e6:b5:46:73:a1:b7:54:8c:c3:30:
af:12:3e:3c:7b:52:04:a0:0d:78:6f:e9:63:5e:2d:
d9:53:fe:df:65:0d:9c:1b:40:53:8b:a7:5b:3f:0d:
a6:19:9a:82:a6:3f:39:b6:f4:cf:db:f5:9d:6b:0c:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:C6:65:29:00:47:65:1E:AB:E3:59:A2:9B:D0:6A:98:EB:A6:4B
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:80:e6:3c:db:0b:86:90:a4:77:7e:73:57:39:69:28:d2:
3f:22:c6:0b:41:19:02:53:61:f7:7d:ae:c2:11:91:39:0d:91:
07:51:ea:a2:14:94:b5:0b:db:e9:eb:55:40:73:d4:e9:b4:d0:
36:a1:30:2a:10:fd:25:d3:a5:7a:7b:9b:81:24:23:a0:35:10:
91:9f:ff:1f:3e:93:a8:48:19:f9:89:47:7f:02:0c:d2:b9:a1:
b2:77:90:56:7c:02:92:30:8a:8b:4f:e1:4f:87:66:68:d2:e3:
e8:ac:2e:a9:4d:b3:05:e7:ac:10:2c:68:a9:d5:b9:5d:72:80:
71:4a:d9:ad:9c:de:9b:21:e8:27:e7:c0:35:e6:de:27:65:9b:
2f:4e:f8:13:86:00:2b:5d:23:b0:4e:09:a6:50:99:6d:bd:88:
ee:a4:7f:fc:4e:44:77:50:d1:fd:62:09:bd:35:c0:26:5e:d6:
0d:bd:6f:51:25:b7:1b:26:5b:c7:02:54:4c:fd:39:24:b0:b4:
5c:93:24:05:52:92:23:b1:75:bc:90:bb:a9:51:cd:40:fe:b3:
14:5d:35:e9:d3:9c:81:6f:01:f0:a8:2a:dc:ff:4c:1a:fd:09:
43:93:dc:bb:e9:e9:10:f6:21:e0:28:b4:7e:f8:19:8e:f5:1f:
65:db:8a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ev3l0wBv8mdPbvzZmhEZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy
M2FkYzAwHhcNMjYwNDE4MDQwMDQxWhcNMjYwNDE5MDQwMDQxWjAzMTEwLwYDVQQD
Eyg3MDEwYzY2NTI5MDA0NzY1MWVhYmUzNTlhMjliZDA2YTk4ZWJhNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTWzM+q4qGfLRHr5DBI6wDPmHIDe
tOA35VLNEgTMV5mNvcNCoLRKOfqrCye63bPL43b8mymp9OWExAxH5rUbYUNebNum
jBBh6xJuuDQNbxs79FOOz0hW70ldhlDUBAaTy/Ztk/XSS3MP61XU/1L/ynl6oyaI
Roo0HZjScRXQDW1adowEFelXOxyAKKr6sjkGemtnrnzMZmjSPqj1Xd8j9u0jdgbo
N4JfSWRptZfNf0CZCTW3Z/wqJoDFokT4U5vJ0M4ELBUbhua1RnOht1SMwzCvEj48
e1IEoA14b+ljXi3ZU/7fZQ2cG0BTi6dbPw2mGZqCpj85tvTP2/Wdawxm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAQxmUpAEdlHqvjWaKb0GqY66ZLMB8GA1UdIwQY
MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt
ODAyYjYzNzZmNzQzLzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz
LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglqA5jzb
C4aQpHd+c1c5aSjSPyLGC0EZAlNh932uwhGROQ2RB1HqohSUtQvb6etVQHPU6bTQ
NqEwKhD9JdOlenubgSQjoDUQkZ//Hz6TqEgZ+YlHfwIM0rmhsneQVnwCkjCKi0/h
T4dmaNLj6KwuqU2zBeesECxoqdW5XXKAcUrZrZzemyHoJ+fANebeJ2WbL074E4YA
K10jsE4JplCZbb2I7qR//E5Ed1DR/WIJvTXAJl7WDb1vUSW3GyZbxwJUTP05JLC0
XJMkBVKSI7F1vJC7qVHNQP6zFF016dOcgW8B8Kgq3P9MGv0JQ5Pcu+npEPYh4Ci0
fvgZjvUfZduKnA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:55 2026 by rpki-client