Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: kxirjkvoUD6NQAPqUYuLaSnLPxIJQT4/QJxPo3M7ijk=
Subject key identifier: 56:C5:3F:5C:14:B0:C8:48:76:12:A4:7F:32:BF:33:BE:EB:0B:EA:EF
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 019D28F22CFCF9B5E07A0D2671372DA7CBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0AD7
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: 1LnK3My6pcEmajfa6ttleeC3hNWDI0JIl4SM2XE0sCs=)
2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2c:fc:f9:b5:e0:7a:0d:26:71:37:2d:a7:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=56c53f5c14b0c8487612a47f32bf33beeb0beaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:f0:66:c1:38:e4:23:76:e2:d6:cd:2b:66:
c4:e4:13:53:60:4f:8d:87:33:a6:d2:8e:94:ec:2c:
08:63:c2:ca:71:32:d6:18:9d:47:11:ad:0e:bb:c4:
23:59:6a:09:59:02:23:0b:d9:87:81:9d:11:4c:44:
a6:be:4a:22:53:c5:2a:d0:56:a1:fe:92:af:aa:48:
8d:22:a0:87:55:57:b8:71:ee:b7:03:46:78:3e:20:
52:f1:db:e6:f9:98:72:64:86:f8:84:0c:98:e0:93:
57:0e:fc:07:62:78:1b:9b:ac:65:06:26:e2:71:3e:
90:54:a2:9b:15:9d:9f:d5:f7:64:40:6a:51:4f:9b:
4e:39:ed:13:30:d0:80:cf:94:bf:6b:71:e9:88:fb:
dc:fb:77:19:fe:fc:cf:01:f2:3f:1d:d5:6b:b9:8d:
00:40:70:36:87:30:9c:03:72:8d:31:d9:fc:3c:43:
4b:e0:d0:f1:ad:18:ea:86:eb:1f:11:2f:d2:a8:03:
4c:5f:1f:8a:73:b5:d2:71:e3:d6:ea:cf:34:39:6c:
03:d9:4a:b2:88:72:4d:7c:0d:5e:54:2a:62:9b:20:
81:04:23:cc:e4:4d:17:93:4a:c7:4c:12:d5:f7:48:
28:61:5d:3a:c6:f3:c9:3f:27:65:25:f5:96:ad:80:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:3F:5C:14:B0:C8:48:76:12:A4:7F:32:BF:33:BE:EB:0B:EA:EF
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:4e:01:af:6d:20:34:e8:f5:e8:0f:ef:da:1b:03:9b:2a:
2d:a5:d7:1c:af:46:cd:65:23:8b:4d:7e:dd:a2:f5:18:d9:08:
dc:01:d1:4a:9b:e9:f6:13:ee:c5:e1:5d:8c:18:51:79:4b:77:
0e:43:f4:17:b2:62:52:89:52:f8:6c:7e:ba:89:14:9b:08:f3:
7e:65:e2:38:16:59:37:1f:93:f3:2c:c6:f3:4a:2b:cf:5b:7e:
00:53:2a:11:dc:a9:4d:0b:06:cd:c0:2d:a5:ae:7d:87:3e:90:
3a:4b:4c:15:90:77:7e:b1:18:e8:56:ef:63:4e:9f:d2:85:f3:
59:99:20:e7:e7:a0:72:18:44:83:b4:74:e0:e2:66:ff:09:88:
96:47:45:95:6c:b2:7d:1a:8d:1f:ee:4f:28:ef:8c:ee:00:9f:
83:93:e9:45:c5:46:a2:41:c9:32:08:b7:9a:bc:a5:9d:18:0a:
23:67:e6:c8:32:9b:d2:bd:54:48:9d:59:52:c2:01:9d:c8:fe:
da:ed:ba:a0:ed:dc:5e:49:f6:3f:51:db:58:4c:97:75:c5:40:
9d:24:e8:00:14:ee:14:bf:26:99:ce:63:22:9e:fa:e1:fc:e0:
ae:5f:66:0a:dd:12:59:e1:74:27:86:a8:71:33:ac:43:d8:eb:
73:ac:d3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iz8+bXgeg0mcTctp8v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy
M2FkYzAwHhcNMjYwMzI2MDcwMDUyWhcNMjYwMzI3MDcwMDUyWjAzMTEwLwYDVQQD
Eyg1NmM1M2Y1YzE0YjBjODQ4NzYxMmE0N2YzMmJmMzNiZWViMGJlYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vwZsE45CN24tbNK2bE5BNTYE+N
hzOm0o6U7CwIY8LKcTLWGJ1HEa0Ou8QjWWoJWQIjC9mHgZ0RTESmvkoiU8Uq0Fah
/pKvqkiNIqCHVVe4ce63A0Z4PiBS8dvm+ZhyZIb4hAyY4JNXDvwHYngbm6xlBibi
cT6QVKKbFZ2f1fdkQGpRT5tOOe0TMNCAz5S/a3HpiPvc+3cZ/vzPAfI/HdVruY0A
QHA2hzCcA3KNMdn8PENL4NDxrRjqhusfES/SqANMXx+Kc7XScePW6s80OWwD2Uqy
iHJNfA1eVCpimyCBBCPM5E0Xk0rHTBLV90goYV06xvPJPydlJfWWrYA8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbFP1wUsMhIdhKkfzK/M77rC+rvMB8GA1UdIwQY
MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt
ODAyYjYzNzZmNzQzLzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz
LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBtOAa9t
IDTo9egP79obA5sqLaXXHK9GzWUji01+3aL1GNkI3AHRSpvp9hPuxeFdjBhReUt3
DkP0F7JiUolS+Gx+uokUmwjzfmXiOBZZNx+T8yzG80orz1t+AFMqEdypTQsGzcAt
pa59hz6QOktMFZB3frEY6FbvY06f0oXzWZkg5+egchhEg7R04OJm/wmIlkdFlWyy
fRqNH+5PKO+M7gCfg5PpRcVGokHJMgi3mrylnRgKI2fmyDKb0r1USJ1ZUsIBncj+
2u26oO3cXkn2P1HbWEyXdcVAnSToABTuFL8mmc5jIp764fzgrl9mCt0SWeF0J4ao
cTOsQ9jrc6zTGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:22 2026 by rpki-client