Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: RX2i6acEf/Wfh6VKUVps/4SA6Lny0+4QoWo4GY7CBps=
Subject key identifier: 18:F0:93:BF:DE:24:6D:55:7B:5C:1A:AA:2A:D1:EB:63:E9:A0:E3:05
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019F90C828BF8B2264CCF24A3F4F49575EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 1521
Signing time: Thu 23 Jul 2026 21:01:04 +0000
Manifest this update: Thu 23 Jul 2026 21:01:04 +0000
Manifest next update: Fri 24 Jul 2026 21:01:04 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: m4RfEESb3P95ZAcqWUDkboL/4AzNPR1XsU5DHymjra0=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:28:bf:8b:22:64:cc:f2:4a:3f:4f:49:57:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jul 23 21:01:04 2026 GMT
Not After : Jul 24 21:01:04 2026 GMT
Subject: CN=18f093bfde246d557b5c1aaa2ad1eb63e9a0e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:6e:0f:08:ca:91:b1:9d:2c:38:05:22:5e:
4c:aa:de:87:3a:73:db:3a:88:3e:d8:6f:1e:52:e5:
df:a4:fb:05:aa:0c:3c:30:f5:d8:2e:f2:60:f0:ea:
e3:ca:ab:64:4b:3c:56:c3:86:98:21:cd:2f:4e:74:
bd:c5:8e:59:f8:ba:0c:7e:f7:18:f1:83:e2:79:a5:
5e:ac:6a:1b:46:19:fa:5e:9f:ab:26:9b:f5:b0:44:
be:3d:eb:99:7b:25:a0:5d:5d:d7:ea:06:54:b3:50:
35:73:2b:29:ef:63:cf:ed:07:f9:bc:f1:3c:27:51:
8a:93:52:4b:9e:29:5c:0b:e8:22:22:23:d0:44:5e:
ef:de:3d:7c:78:95:6d:1e:60:52:dc:bf:1f:fa:e6:
f4:2a:6e:9e:b1:0e:d8:2d:ce:52:45:82:d0:28:87:
c1:8d:ed:5c:f4:18:eb:84:e8:ab:72:3c:dc:30:fa:
4b:ae:64:7d:cc:6a:06:71:4b:b8:0d:f4:fa:7f:75:
61:01:35:dd:48:d5:9a:20:ec:c7:36:0e:75:0d:13:
7c:36:e0:3b:59:96:cb:8b:6f:05:d4:f5:1c:be:8a:
c8:c8:60:3d:9b:14:9f:43:5a:7a:7a:56:d7:6f:81:
c2:02:58:9c:a7:3a:e9:31:96:bd:8c:c7:a9:0e:14:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F0:93:BF:DE:24:6D:55:7B:5C:1A:AA:2A:D1:EB:63:E9:A0:E3:05
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fa:4f:f6:70:3d:46:7b:66:c1:bc:1b:0c:22:5a:23:91:07:
f1:97:ad:66:6e:77:de:40:13:a2:75:40:b6:06:df:9a:9b:41:
ed:52:d4:8a:00:8e:5b:0b:87:be:38:04:15:78:0f:1c:db:33:
6e:62:3a:82:38:da:8b:ad:c3:53:3c:0e:27:de:cc:4c:12:2c:
fa:1f:53:a4:a2:44:cc:ef:74:56:74:34:b6:d2:fd:0e:7f:9b:
55:4a:15:28:a2:1c:45:65:1f:4e:33:dd:08:e1:75:99:de:7c:
c8:27:c3:e4:c3:9c:3a:90:a3:49:38:f8:56:3a:d8:5c:17:fb:
b4:8b:d7:31:5a:90:66:02:8e:3c:9e:b6:8e:c1:4d:08:1a:63:
26:55:f7:90:15:fa:94:44:01:ba:36:23:8c:6c:58:dd:d1:cf:
83:42:90:8a:d6:66:04:8b:a3:ae:fa:91:db:f7:b9:56:79:96:
49:7b:a4:6e:7e:3e:f8:b9:45:fa:36:08:74:6b:97:44:e6:ca:
b4:b2:1c:db:34:59:2f:11:19:c1:a0:12:e6:48:61:fc:da:99:
40:b1:2a:2d:72:83:87:1f:b5:d2:06:80:d1:4e:88:74:8a:01:
23:12:cc:f0:48:fd:5e:1b:87:5e:71:bc:d4:0d:96:51:f8:0b:
54:33:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:41 2026 by rpki-client