Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: 9FO9sPogfwqOugt3BrT1a+GvJ3i2pcCKEVxhZisT5w4=
Subject key identifier: F9:E3:5A:E9:47:C2:EF:D9:2C:BD:CE:36:C2:11:9B:0C:18:1B:06:5C
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019E1DFEA46D578941BDE90A5F477B121450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 1461
Signing time: Tue 12 May 2026 21:01:27 +0000
Manifest this update: Tue 12 May 2026 21:01:27 +0000
Manifest next update: Wed 13 May 2026 21:01:27 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: RDxdjot+I5RtG9jMLwxwWKinKvKIKai5HegF0WnhsQ0=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a4:6d:57:89:41:bd:e9:0a:5f:47:7b:12:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: May 12 21:01:27 2026 GMT
Not After : May 13 21:01:27 2026 GMT
Subject: CN=f9e35ae947c2efd92cbdce36c2119b0c181b065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:21:ba:9e:f0:2c:7f:1b:f1:7e:84:25:f4:
dc:1b:40:30:40:49:ca:bf:c6:56:12:32:ed:dd:98:
54:7c:7f:fd:56:f2:7f:87:18:bc:6b:4d:a1:8f:9b:
0e:76:d0:b3:f4:16:1a:ef:a1:dd:7a:07:a1:dd:17:
3e:fb:85:ca:cd:9e:e7:16:49:25:1e:0b:fe:f4:7e:
2a:11:0c:7e:3c:dd:46:0b:56:a1:df:fc:cd:67:d0:
9d:a0:7c:15:8e:8e:f9:da:2a:3f:8d:b9:02:8a:5a:
21:f0:38:98:25:ae:bb:13:4e:27:21:d9:8b:81:9d:
b5:6a:69:36:a5:3f:e0:5d:35:96:80:dd:03:82:1b:
e1:03:dd:fc:fe:1f:9d:7e:99:19:ee:6f:8b:be:89:
63:8e:69:bb:ad:30:a4:72:8a:86:82:0e:02:8c:3f:
4a:ec:95:b9:3b:f4:09:03:f3:89:82:2b:9c:a0:91:
0d:04:a4:02:50:f0:01:0b:1b:17:35:f1:6e:f5:9f:
ff:21:f2:4e:87:ac:a1:35:15:9e:c1:72:73:fe:1d:
d4:e8:51:6d:ac:21:fb:9c:4f:88:d9:e4:42:90:58:
4d:be:4d:e0:8d:ab:83:a2:bd:dd:c6:e6:22:2a:1d:
3d:21:62:aa:f4:92:7b:b5:c5:3a:5d:95:ca:8b:15:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:5A:E9:47:C2:EF:D9:2C:BD:CE:36:C2:11:9B:0C:18:1B:06:5C
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c2:a7:fa:c6:0a:05:4c:f1:b8:fd:00:3f:16:21:9e:e8:fc:
3f:2d:fc:be:23:41:97:56:ed:79:7f:b1:b7:80:13:c1:7a:5c:
e6:ca:13:b4:09:0c:b1:95:94:fe:35:20:b7:32:4e:15:1c:ba:
12:4f:0c:df:18:8c:b1:ed:96:f2:77:cb:d5:c6:58:84:1e:66:
03:51:79:6f:ce:9d:e3:d7:eb:a5:b7:71:4a:54:bf:f1:99:04:
20:d6:4a:37:e8:9c:a4:38:91:74:5f:90:2c:0b:38:94:ed:81:
56:71:11:e4:ee:52:e0:b0:e3:a8:75:84:a2:7a:2d:c5:a2:59:
96:da:ea:cc:e9:02:35:d0:db:d9:2c:31:17:9f:db:a1:59:0d:
cb:67:fc:1f:85:a6:e9:0c:a7:6a:ac:4d:8f:38:be:62:b3:c6:
19:a2:26:e1:b8:3f:3d:29:89:96:ff:6d:a3:67:e4:8a:24:f8:
b6:81:13:86:5b:de:ea:14:a0:2c:e5:57:18:c9:cf:ad:5c:25:
1e:3f:d4:d6:22:73:00:2b:26:11:65:1b:45:bd:b2:bc:48:b6:
f2:53:bb:f2:d4:fa:8f:13:bc:aa:6e:bd:55:9a:b5:95:1b:2d:
1a:60:b6:63:51:d7:d0:31:8b:64:eb:e4:51:0a:73:4a:7c:ae:
33:00:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:29 2026 by rpki-client