Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
File: hVan-anfCAeBbIQtoWeJ1d28g1U.mft (raw, json)
Hash identifier: Fq9jaIT4RhARtPMgvRz/eUDkGwIAHw9+W683aECiV+4=
Subject key identifier: 19:54:F5:47:86:38:1E:C9:27:DC:95:95:D7:19:52:3A:EB:33:18:2C
Authority key identifier: 85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55
Certificate issuer: /CN=8556a7f9a9df0807816c842da16789d5ddbc8355
Certificate serial: 01A17815A1943F28F1AFE260B02EC8A230D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:00:45 +0000
Manifest this update: Mon 26 Oct 2026 12:00:45 +0000
Manifest next update: Tue 27 Oct 2026 12:00:45 +0000
Files and hashes: 1: hVan-anfCAeBbIQtoWeJ1d28g1U.crl (hash: z6nlugppMML3ukuphOJ2EiPSEAqA4LCw/J4amEDiYGU=)
2: ryjc2rw6_c8wKxTaH4dTfMsIflg.roa (hash: hlu7n01esDPMySYwsP8341m6f4R4t9WEUfR5CWyefQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:a1:94:3f:28:f1:af:e2:60:b0:2e:c8:a2:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8556a7f9a9df0807816c842da16789d5ddbc8355
Validity
Not Before: Oct 26 12:00:45 2026 GMT
Not After : Oct 27 12:00:45 2026 GMT
Subject: CN=1954f54786381ec927dc9595d719523aeb33182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:32:4e:53:cc:b7:98:53:d7:09:03:6b:f6:
00:6d:87:a8:1b:32:76:fc:a2:1e:e4:40:4a:c0:c1:
91:66:d5:7f:b2:e4:9d:a3:3c:18:ea:4d:d0:de:27:
67:39:80:e8:9d:60:53:80:41:32:70:e2:57:0a:de:
3a:3c:36:df:c0:de:29:f9:27:16:7a:32:73:56:bf:
2d:87:3e:18:11:02:b0:cd:e9:f3:e7:da:0f:dc:3f:
85:fe:50:90:50:8a:1f:d5:78:9b:e9:40:05:93:71:
ff:b8:67:b7:78:94:68:72:8a:df:a2:35:39:48:7d:
e0:50:30:29:1c:fa:3a:5d:63:e0:4a:b4:73:07:5a:
ff:17:f6:51:cd:be:a0:d2:39:5e:03:9e:67:f1:75:
92:13:af:07:b9:02:d9:c3:f7:1a:28:a3:29:98:67:
28:79:8f:47:4e:cb:f8:04:15:fd:60:66:f0:47:26:
ee:16:4d:a5:71:85:ff:05:7a:29:0a:24:cf:74:d6:
39:82:c6:08:35:04:7a:cd:4d:4c:14:62:d9:67:fd:
af:e1:10:03:3e:4b:0f:68:6e:06:45:56:12:1f:f1:
c5:09:ed:ca:a5:8a:ef:02:c8:03:1c:05:3d:12:a6:
e9:26:1d:e2:9b:37:01:e3:45:6c:ff:b3:70:a0:f5:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:F5:47:86:38:1E:C9:27:DC:95:95:D7:19:52:3A:EB:33:18:2C
X509v3 Authority Key Identifier:
keyid:85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:fb:e3:11:bd:57:e8:73:02:47:5c:78:c8:a1:cb:ea:e6:
21:a6:00:51:1e:88:0b:2a:32:20:60:9d:2f:62:69:78:ef:11:
79:1d:9c:24:f9:cd:ad:7a:ff:78:99:f2:8e:61:39:63:bc:47:
87:ad:6e:17:84:36:24:51:a4:be:19:bf:65:77:47:97:85:8b:
c3:66:ec:f4:09:5d:f2:4a:b7:5b:cd:9d:d5:2d:f5:a0:51:d6:
7f:7d:57:96:04:d7:5f:37:c7:46:2a:7f:1e:e4:ef:27:c5:59:
c6:a1:f6:c0:d0:4f:50:f9:57:20:a8:a6:2c:62:07:67:02:a4:
93:31:82:a3:bf:48:a8:eb:a0:d6:8d:6f:48:3a:5f:be:4a:0d:
d6:2b:9d:b2:a9:fb:e6:1a:50:c9:26:21:c7:70:1c:b0:1b:88:
ef:65:ef:fb:f9:73:77:33:0e:04:ad:1d:c9:30:92:a8:95:1b:
c2:94:d1:33:dd:57:d9:05:75:6f:6e:cf:b4:15:bb:af:59:93:
01:22:96:02:d3:c3:90:51:86:a4:01:5b:4f:47:37:f0:63:e4:
f4:1f:16:df:0b:88:f5:41:84:e0:ff:66:76:ed:40:d0:9b:d2:
fc:cb:2e:3f:35:77:d6:1f:65:71:e9:fb:48:89:8a:f3:dc:03:
c4:23:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:47:32 2026 by rpki-client