Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: sSRPXUYRGqhQDgu4OQsdVE5tV+DFAdSWqQ/eqTVOWRk=
Subject key identifier: 9F:BA:33:E8:F4:D6:58:12:78:5F:6A:CD:05:C6:18:1B:FB:C6:F6:B0
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01A1DFBA1819DABFF95EAC1899E947C97912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 1653
Signing time: Sun 15 Nov 2026 15:01:17 +0000
Manifest this update: Sun 15 Nov 2026 15:01:17 +0000
Manifest next update: Mon 16 Nov 2026 15:01:17 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: jv7JE0UVIwpJZ7GNNSxzUAQ7U2CkLkg5ZvM9qx/Wr/o=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:18:19:da:bf:f9:5e:ac:18:99:e9:47:c9:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Nov 15 15:01:17 2026 GMT
Not After : Nov 16 15:01:17 2026 GMT
Subject: CN=9fba33e8f4d65812785f6acd05c6181bfbc6f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:f7:56:e8:0b:fe:37:3a:57:cf:8e:ea:60:
9b:27:6f:8e:4c:09:cf:5b:28:68:b6:90:64:77:74:
30:8d:03:89:de:ef:5d:49:1c:7f:ec:b6:ed:e3:04:
0f:4b:3b:b5:f4:e0:78:db:b7:14:a8:7c:a6:0d:48:
d1:a7:8d:5a:ac:d9:8a:5b:f4:59:c7:39:84:96:5a:
eb:90:ba:90:cb:8b:f1:b9:68:3e:d8:28:ad:24:40:
98:ec:0f:51:87:12:ac:2f:3d:95:da:6a:06:d1:f3:
d5:82:e4:bb:35:68:d2:30:81:1a:14:55:61:6e:83:
42:c5:ff:87:38:5a:98:e8:7f:8c:b0:72:26:21:20:
92:2d:77:ca:16:87:d3:36:f2:e3:30:09:97:69:02:
27:93:20:a6:6f:31:d6:45:8e:6c:3a:c0:dd:1a:36:
55:3f:34:cf:96:3a:f3:a5:4d:56:43:91:26:c7:3b:
b5:67:7a:20:76:38:fe:a9:81:fd:fb:08:61:56:55:
c6:62:d1:b7:bb:d6:fb:0a:15:33:75:b5:28:d4:9b:
87:39:81:b6:db:59:e5:9f:cf:a4:b3:b2:9f:28:97:
16:9e:82:dd:a3:b8:97:60:a0:1d:52:74:eb:f9:18:
d4:29:05:4d:64:c4:7b:8c:c2:16:cb:c1:79:e4:bc:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:33:E8:F4:D6:58:12:78:5F:6A:CD:05:C6:18:1B:FB:C6:F6:B0
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:2d:71:c5:85:67:d1:98:3f:62:87:25:65:37:e5:ec:9c:
20:d0:28:dd:6c:33:c2:a2:a0:f9:0e:d5:73:f2:f5:d6:44:86:
8b:54:53:77:ff:8e:9a:9d:ec:81:09:2e:5d:d8:2e:62:6f:c4:
41:32:7e:f2:a9:28:00:74:c9:36:de:c6:f8:72:4f:54:fa:62:
12:3a:8c:35:5c:ab:93:ec:7d:0e:56:3c:f1:0a:77:88:97:2f:
5f:57:93:8a:d7:da:c0:6b:22:0c:b8:1c:04:0e:e7:81:46:fc:
b1:a3:a2:cb:4b:3a:f8:99:30:f3:00:3e:83:43:b2:3c:d5:b6:
6f:36:7f:af:4f:c8:02:47:2d:4a:a0:04:a1:02:1b:17:15:0f:
0c:66:49:a6:d7:83:0a:6f:a9:a9:96:16:8a:78:a7:d3:48:8f:
74:cb:8e:cb:d7:e3:00:27:ac:cd:4e:2c:61:c8:c5:7d:06:4e:
26:97:82:c9:f6:f0:19:26:98:a3:10:ae:fc:ac:84:3e:88:f3:
be:9f:dc:13:41:2c:1e:c7:38:9a:b0:ec:c7:28:4d:b0:dc:6e:
bb:57:0f:8a:23:4a:f9:2c:33:a9:e3:7c:5a:1f:4a:e3:b4:78:
2d:15:31:7f:15:e2:9b:d8:be:28:9b:99:2f:27:d6:cb:cd:a2:
67:6e:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:20:54 2026 by rpki-client