Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: 6nmbwqlnYyAL0DDz6J0J5jBVzVy474bJGB9lAIl2nrg=
Subject key identifier: A9:B3:89:0D:38:DD:BA:67:4A:4F:AF:2E:31:C3:F2:B8:08:6A:20:5E
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 01A11CE3CD44FD661375A884672C6FB94167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0CE3
Signing time: Thu 08 Oct 2026 19:00:53 +0000
Manifest this update: Thu 08 Oct 2026 19:00:53 +0000
Manifest next update: Fri 09 Oct 2026 19:00:53 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: kHj85WDWRg2XrTBvlX3SMqHkyDkvXLjVO4hdx97oPEE=)
2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:cd:44:fd:66:13:75:a8:84:67:2c:6f:b9:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Oct 8 19:00:53 2026 GMT
Not After : Oct 9 19:00:53 2026 GMT
Subject: CN=a9b3890d38ddba674a4faf2e31c3f2b8086a205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:75:a6:16:85:fd:c8:8a:a4:dd:1c:fa:13:
3a:8d:23:65:e2:e9:2e:55:95:8d:14:44:f6:79:b8:
a3:f5:eb:dd:fd:da:7c:85:b4:a0:19:70:c4:4f:51:
33:fb:ea:d2:c0:b8:50:ac:26:2b:81:e5:49:bf:b8:
84:54:b3:dc:2f:72:03:02:5b:10:75:bf:cf:f0:ce:
70:55:d0:3f:c4:06:d1:38:b2:69:fb:7a:a4:e1:80:
3f:83:cb:b4:e3:11:cb:36:8b:24:a2:61:c7:eb:04:
49:e4:0d:88:73:45:59:33:38:d1:61:e1:d8:b3:fa:
e2:c0:a6:cd:5a:72:20:67:e4:da:f2:17:46:d7:70:
1e:04:93:95:2d:72:5b:55:21:8a:63:5a:13:95:6f:
b8:0c:3f:29:25:c7:68:b9:78:55:da:c2:ec:5c:a7:
08:f8:38:7a:4c:22:ca:c2:d0:31:a0:2d:f5:2f:65:
af:e1:d4:67:14:2d:9a:6e:8e:5a:7a:2f:98:56:2d:
f1:d1:30:7b:5b:8d:c6:03:bb:78:61:0b:9c:a5:67:
56:f2:71:fd:65:81:0b:e1:a5:fb:1f:6e:ab:20:d0:
14:c0:c5:8d:83:3a:27:58:8a:a8:22:c0:aa:46:cd:
5d:26:7e:6e:89:af:d8:0d:49:c1:21:7e:f6:d4:65:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:89:0D:38:DD:BA:67:4A:4F:AF:2E:31:C3:F2:B8:08:6A:20:5E
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:04:5f:d7:f8:b9:6f:73:ba:fd:b8:31:07:ed:40:ea:15:a7:
2e:73:60:33:15:a2:ad:b9:e1:8d:99:3c:a9:f1:12:f6:97:7d:
b5:14:cf:ba:b3:9e:67:d0:a2:eb:2e:76:c7:49:a5:ae:d1:b5:
e3:85:24:5b:af:d9:58:23:6f:75:bd:58:74:51:1d:c6:03:d3:
9f:89:35:29:1c:57:12:5e:17:aa:97:2e:83:f8:f0:d6:b8:55:
0e:0b:47:83:66:c9:18:79:56:52:14:db:f9:0b:59:9b:c0:85:
8b:1b:28:bd:d4:7f:c6:83:cf:51:75:37:2c:7d:22:d5:dd:16:
ca:11:f4:6b:b6:f0:53:0f:eb:31:78:64:ea:dc:6d:ac:60:8b:
af:ba:4c:8b:61:0b:12:db:45:eb:f8:be:7c:c3:7c:89:0f:c7:
c1:ac:17:ff:0a:f1:a7:09:89:50:43:68:07:41:eb:f0:56:de:
99:0c:37:f6:55:2c:29:98:fc:2d:ab:06:06:a1:98:4a:21:91:
4a:a9:29:f4:04:06:3e:a1:ee:72:49:5e:14:c2:f5:9a:14:fd:
aa:90:60:27:76:82:f1:1c:a1:16:0e:d7:56:33:b3:63:60:56:
4f:1b:10:17:72:83:54:5d:bc:69:cc:e3:62:24:72:c2:e5:17:
7c:67:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:58:07 2026 by rpki-client