Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: unW+MxUT/oz8cTX6OkvXt9kbnC6MbNG9Nd3ZOWbF2wE=
Subject key identifier: E1:F8:47:E8:30:AB:D0:5F:5E:80:E2:51:FC:CE:A3:FB:0E:14:01:54
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01A0D34ACF12E443A7A4D8F28029887A3E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 15C8
Signing time: Thu 24 Sep 2026 12:01:30 +0000
Manifest this update: Thu 24 Sep 2026 12:01:30 +0000
Manifest next update: Fri 25 Sep 2026 12:01:30 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: 16GDXUM4nTLF1fEHPkktWrcCzG+auhweKMMEFyP/I18=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:cf:12:e4:43:a7:a4:d8:f2:80:29:88:7a:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Sep 24 12:01:30 2026 GMT
Not After : Sep 25 12:01:30 2026 GMT
Subject: CN=e1f847e830abd05f5e80e251fccea3fb0e140154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:da:9c:1b:7c:92:c3:2c:f8:34:27:22:d1:
c9:54:41:f2:41:7c:32:eb:14:af:1a:6c:52:a7:3b:
a0:97:97:84:bd:c6:b3:0c:18:98:2b:a0:d0:85:05:
7a:0b:46:69:16:30:23:04:60:60:a9:5a:62:12:d9:
93:74:04:53:88:44:69:aa:cd:15:9b:20:01:2f:10:
c4:21:ba:f6:05:cc:5b:20:60:59:c0:52:3b:bc:af:
25:5a:e1:0c:33:23:08:7d:41:e3:fd:ed:a2:08:30:
b8:e4:de:89:3e:f7:66:7e:ab:7a:aa:1e:f1:76:3d:
1a:a1:4d:fd:fc:31:c4:5f:08:2d:99:61:97:55:25:
70:68:0d:86:e6:e4:f8:53:b6:2c:8c:7a:9a:18:19:
8b:81:c3:66:30:bd:d5:07:46:cc:0c:71:a6:ef:c1:
45:bd:dc:64:08:bd:08:cd:06:05:84:36:78:48:59:
8e:02:bf:b1:fa:dd:b2:20:95:72:53:61:25:0c:87:
e4:43:b9:0c:f4:29:7e:7e:aa:29:d8:91:9a:cb:e1:
a0:25:fe:57:2d:f9:2f:09:1a:1e:f8:aa:9f:22:21:
76:49:fa:37:24:21:80:49:d3:2f:d4:21:f9:85:81:
bd:ab:7e:c4:54:68:3b:d7:76:5f:22:5b:5b:45:0c:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:47:E8:30:AB:D0:5F:5E:80:E2:51:FC:CE:A3:FB:0E:14:01:54
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b4:d0:ff:b0:13:c3:72:82:18:93:c6:29:cd:95:bf:71:ca:
76:8f:2f:c7:a8:d5:bd:e9:5b:11:a9:c0:0f:94:c6:48:21:8a:
e8:99:f3:96:4a:14:de:3f:b0:71:70:74:d2:4e:50:44:5f:9f:
d1:69:9c:3d:7e:f0:c0:ec:84:8f:9a:04:e1:5f:62:0b:21:32:
12:c1:a7:3f:c9:bb:1a:a8:5c:26:2e:23:75:05:38:4a:fc:95:
7d:74:6e:ea:d0:ca:8a:56:01:32:40:15:07:f7:65:a4:27:fe:
2f:09:a7:9b:54:b8:33:48:03:db:4f:b6:fe:0f:39:23:d4:3e:
ed:54:c2:9f:28:4a:e0:d0:61:3c:56:56:22:3a:06:e6:4e:fa:
b1:8f:58:05:40:0d:f8:84:3a:52:05:81:cb:05:4d:61:ef:a2:
d1:46:54:f8:ed:2b:68:16:7b:ad:16:47:68:45:be:95:0a:cd:
35:c4:fb:cf:61:0a:d6:75:1d:c9:d3:b6:00:b5:95:2b:fa:d5:
a1:75:60:17:20:91:11:4c:d6:35:cb:df:4f:8a:e3:4f:c4:d6:
d9:ba:1b:5f:ea:e8:8a:52:15:9a:28:eb:9f:7b:df:0c:e0:b2:
0c:71:0d:a4:6a:0c:d0:f7:eb:4a:55:39:39:27:de:48:0c:78:
56:d0:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:29 2026 by rpki-client