Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: y7+7PM0d/33M29knu29U5Odks/NWFsHzIYqLihirhaY=
Subject key identifier: 80:50:44:2A:44:A4:16:C7:95:89:E9:08:D5:67:C1:5C:35:1E:50:4D
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 019CAD59523415CD29ED712E8357E695970F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0A97
Signing time: Mon 02 Mar 2026 07:00:37 +0000
Manifest this update: Mon 02 Mar 2026 07:00:37 +0000
Manifest next update: Tue 03 Mar 2026 07:00:37 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: 8Xp2Zn76s4RKAjP3soDHAI8iWyZmQ5MlO5ygiZMge3s=)
2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:52:34:15:cd:29:ed:71:2e:83:57:e6:95:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Mar 2 07:00:37 2026 GMT
Not After : Mar 3 07:00:37 2026 GMT
Subject: CN=8050442a44a416c79589e908d567c15c351e504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:06:dc:71:06:fc:38:14:34:7b:30:95:eb:85:
a5:a2:b0:0e:4a:12:73:8a:42:7d:11:77:9f:3d:68:
ea:eb:da:ee:5c:c4:16:e1:93:2b:de:64:0c:97:0a:
4c:bd:5f:3a:52:48:a6:2d:44:21:e6:75:c7:e1:1f:
3c:0a:1d:32:8c:59:62:ef:c4:32:75:a5:89:e4:52:
52:e7:13:57:eb:32:8e:1e:43:0e:bc:6d:53:bf:f5:
a0:72:b0:21:ee:61:6d:db:76:83:8d:a5:1a:95:47:
bc:67:7d:a9:e2:48:e0:fb:8c:da:77:77:04:36:d0:
9f:4e:8b:e1:a0:92:31:5b:ea:7e:41:7f:e1:d4:8a:
1a:0f:2a:98:cd:31:15:f5:09:23:80:05:51:a6:3a:
f3:da:62:9b:20:07:f2:ad:60:9c:02:41:b3:a8:14:
96:27:da:d6:5e:08:e4:6c:a9:06:e9:ba:01:b1:e7:
b9:0d:ff:17:ef:c6:2f:61:ba:5c:80:ab:9f:00:a5:
d8:42:b2:36:07:b8:32:2d:df:da:e3:04:5c:52:9d:
46:16:e1:65:c1:3f:35:82:de:ec:9a:f1:44:25:2c:
7b:bb:8a:84:ee:c0:81:f9:7c:a9:8b:20:a4:fd:b8:
0d:96:1e:3c:6f:1b:05:b3:cb:07:63:68:30:8c:49:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:44:2A:44:A4:16:C7:95:89:E9:08:D5:67:C1:5C:35:1E:50:4D
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:82:cb:6b:49:cb:87:7a:35:4e:35:64:74:67:40:6d:e8:
0e:45:5f:56:ca:b2:29:c9:df:85:bc:91:8b:a0:4b:04:77:5d:
ee:08:b3:8a:0f:2c:fe:ba:a5:10:4b:b6:66:c8:1e:de:87:6a:
6b:59:3f:4e:8c:f7:51:1d:21:53:6f:86:dc:6f:5e:f1:20:3c:
75:05:ef:e4:39:5d:03:50:7b:39:f4:04:96:a9:92:a2:a5:8c:
77:19:aa:9f:16:02:62:f4:d6:9b:53:92:8a:40:b0:f0:cf:b4:
19:74:44:eb:16:b1:d5:01:44:7b:98:0f:bd:8a:13:24:9e:ea:
0b:44:f9:27:11:4c:ac:4c:32:bb:b8:b7:3d:41:cd:ad:2e:ce:
f6:a8:ab:5a:7f:c9:ec:1e:4c:ee:a2:c0:e2:c3:9e:26:3d:5e:
2f:40:6a:0b:01:42:f6:6d:cb:75:de:0b:af:2a:36:51:5a:7d:
59:74:1a:a3:6e:54:f0:bb:ab:51:74:08:24:a1:8e:e3:d8:71:
21:e3:80:d2:16:a7:e8:46:b7:bb:92:0a:9b:63:37:04:db:7b:
46:28:99:24:53:48:19:71:a9:4d:6f:34:0e:31:3a:d6:32:bf:
3d:30:43:f0:18:fb:2c:35:5f:85:00:08:4a:16:ac:e0:69:ae:
81:ed:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:09 2026 by rpki-client