Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: K77cTMrpIoMh6+0ZuDBvtfkURpWPGggrVzrHAXP19+s=
Subject key identifier: 30:40:A1:52:C8:A8:BD:2E:64:CF:1A:F0:B5:95:42:73:A5:AA:36:85
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019D28BBAAAA798CFB6F3734D3AC532F9586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 13E2
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: Q4xNaZH5/XxRUai+mS2FWWBqbpRLV12Tgji2jtXiITI=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:aa:79:8c:fb:6f:37:34:d3:ac:53:2f:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=3040a152c8a8bd2e64cf1af0b5954273a5aa3685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:d2:7d:94:99:2e:68:ce:74:91:cf:85:97:
62:00:25:46:3d:ce:00:f6:87:d0:11:f2:d5:14:0d:
79:2e:66:8e:df:bb:ae:c6:2d:6b:9d:40:6f:56:95:
d5:27:b7:25:77:a7:6a:25:5e:96:59:79:91:72:45:
67:52:6f:3e:90:93:ee:09:24:07:c7:63:a1:33:da:
06:7b:f5:39:14:8a:a3:89:fa:94:8b:8b:ec:ee:a5:
cd:41:75:eb:98:0c:de:8e:74:15:fc:3a:36:1f:5b:
4a:c0:c6:cc:6c:9a:db:0c:51:9b:47:bd:a4:6d:28:
98:de:42:37:e8:cd:07:5c:77:25:08:fa:d3:4f:85:
c7:72:77:93:5c:f8:f6:00:64:a1:bb:9d:cc:31:cb:
84:0e:b4:4f:1e:d0:12:54:88:50:48:05:03:da:bf:
a2:9c:a5:07:43:f2:1d:33:4e:01:10:ca:f5:0d:7b:
af:68:56:29:82:8b:df:17:be:04:77:35:0e:f0:d9:
86:ad:d5:1f:8a:86:09:45:8a:3c:e1:8c:07:2a:42:
42:50:fb:9f:f3:e8:81:a4:40:f1:2f:05:6b:23:61:
44:e0:14:ce:04:7b:7b:ea:f7:9b:1c:db:a8:31:aa:
64:47:1f:06:09:10:33:d8:90:14:86:3b:44:8f:43:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:A1:52:C8:A8:BD:2E:64:CF:1A:F0:B5:95:42:73:A5:AA:36:85
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:0f:27:a9:8d:d2:6e:5d:cd:08:4e:08:c4:7e:62:d9:f6:
16:02:9a:57:ff:8c:85:c3:b8:d2:77:c4:2a:a2:27:0d:a9:8b:
81:a7:eb:c1:8b:71:51:c6:a3:d9:bd:96:85:af:67:79:dd:c1:
6f:7a:44:0b:40:4b:a6:74:16:dd:00:c0:7e:c9:1a:71:89:67:
44:91:36:59:ed:e2:62:db:65:ae:18:ac:f6:92:b5:ca:89:b6:
f1:a3:a9:87:63:40:51:85:0e:5b:91:aa:da:47:e5:f8:4d:e6:
37:e7:16:de:0e:eb:76:8f:3c:c5:79:18:7f:4d:f1:ec:d8:61:
cd:f8:4b:b3:a4:44:b0:b4:d7:cd:de:fa:a4:e8:4d:7e:e5:7a:
00:29:6e:2d:ac:e8:8b:e7:a2:f1:69:89:e8:e6:ce:2f:da:46:
58:c5:f3:76:6a:22:8d:8d:f0:41:f5:05:61:c6:5f:2f:d1:a8:
02:97:27:bf:d4:00:b9:a1:59:1b:3a:98:fc:bd:ff:9b:31:77:
60:e9:54:aa:a1:dd:68:bb:8c:d5:db:f0:51:8a:d9:4d:e8:13:
01:e8:4c:6f:dd:ef:0a:30:4b:b9:3a:65:d4:dd:ec:6c:0f:d3:
61:5b:ae:93:0f:7f:a7:58:b0:0f:a7:71:7e:dd:05:ff:d2:bc:
23:fc:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:47 2026 by rpki-client