Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: uwoDUGx7al22+M0CjMran9DEM3/W5hDHq+YLs7xVp7o=
Subject key identifier: 8B:EA:36:0A:DD:4E:D5:9B:55:C6:02:4B:C1:F0:66:91:02:4A:48:81
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01A1777048FB7FC1944A3220D3FDD3875915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 161D
Signing time: Mon 26 Oct 2026 09:00:09 +0000
Manifest this update: Mon 26 Oct 2026 09:00:09 +0000
Manifest next update: Tue 27 Oct 2026 09:00:09 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: MZJrXx+AELYUaztU5gvxDaxHNDQeBn57NUbI0GW/Yc4=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:48:fb:7f:c1:94:4a:32:20:d3:fd:d3:87:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Oct 26 09:00:09 2026 GMT
Not After : Oct 27 09:00:09 2026 GMT
Subject: CN=8bea360add4ed59b55c6024bc1f06691024a4881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:b0:6e:87:62:e6:a9:f3:ad:4f:55:1a:db:
9a:c3:8d:cd:6f:30:c3:ba:52:9b:bb:e5:6a:2b:5e:
a2:50:d5:97:71:b7:ad:4a:32:6d:b4:fd:fb:eb:c7:
85:72:96:89:83:51:8a:1f:6d:b1:b7:b1:94:e2:d4:
ec:70:a7:ca:d5:85:0b:d7:49:c6:3c:d8:74:f6:e6:
4d:ae:8c:b9:64:e4:af:03:fb:ed:51:54:97:f6:3c:
40:c7:23:11:31:03:f1:3a:89:04:79:f9:40:fd:56:
00:19:74:1a:bc:fd:57:24:d1:67:6b:a8:2a:b1:60:
e9:86:e6:97:9b:a7:68:70:9c:56:2a:8c:49:0e:b3:
cb:aa:a1:cd:3b:ae:52:96:47:49:97:e8:e8:ad:57:
d3:79:82:40:c3:3f:40:a3:a0:a7:4f:39:eb:79:43:
72:67:cc:f4:7a:1f:18:eb:cc:7c:70:26:e3:41:81:
1c:06:42:4a:86:8a:c5:30:24:5b:a1:41:da:de:04:
0d:a8:87:8c:7a:14:c2:dc:02:1c:75:c4:81:94:b0:
dc:f6:91:50:78:6a:ed:d6:ca:56:8b:5a:8f:6f:06:
81:fa:91:61:8e:56:68:f6:06:24:8c:53:df:50:c9:
2a:b9:4f:8b:c8:42:fd:f5:5a:0b:69:08:8b:6c:f1:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:36:0A:DD:4E:D5:9B:55:C6:02:4B:C1:F0:66:91:02:4A:48:81
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:8f:fb:e4:bd:b2:68:a3:c5:b7:69:57:91:c3:07:a4:db:
3b:33:78:b6:4d:95:47:b7:9e:c3:a6:72:37:65:54:60:93:85:
c9:04:5e:51:4f:b7:3b:c3:16:5d:90:7a:1b:53:6d:2b:ca:c2:
62:a6:23:12:c8:b1:09:c9:66:61:65:70:13:78:01:0b:7e:ed:
87:7b:86:e6:dc:38:46:c2:55:f3:2d:15:c5:05:d7:b2:8e:28:
39:cf:ca:c0:8b:4c:b0:70:fc:23:b7:51:03:2b:69:87:e3:d4:
0d:78:22:a7:20:d4:24:e3:19:21:f1:44:f4:17:4e:20:a7:ce:
da:03:f5:92:26:b3:b2:e2:de:01:78:80:65:4a:cb:2f:23:fd:
46:f2:a6:65:0e:88:69:f1:97:fd:34:d2:12:a2:b5:47:69:cf:
15:bf:3a:e0:a6:ce:cf:b9:91:50:4c:20:ef:f8:d8:7b:b8:a2:
34:46:f7:f9:9e:e2:0a:62:37:a2:39:0e:05:7c:6a:26:a4:3b:
c5:f0:9e:14:d3:b7:1b:82:2a:61:09:ff:5b:c1:55:07:f1:58:
c6:a0:87:07:82:ae:74:00:6a:62:61:07:b9:1a:63:bb:80:9d:
4e:3d:b9:4e:91:66:c6:bc:56:22:43:a4:a6:2e:5d:ae:e1:41:
6d:91:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:11 2026 by rpki-client