Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: YF4pxwYlIBqxkifoPrpzecywXPNt9TN6rrx4AyR7CmA=
Subject key identifier: 78:27:08:BE:5A:EC:20:39:BF:9C:5E:84:72:B8:11:AD:53:2E:31:1B
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019EB87CAEB5CD88CB1C5141C1D08D6FE622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 14B1
Signing time: Thu 11 Jun 2026 21:00:39 +0000
Manifest this update: Thu 11 Jun 2026 21:00:39 +0000
Manifest next update: Fri 12 Jun 2026 21:00:39 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: qZKLscWZp5D6pJD1qgTPo4/a1waMoeCJyRVWm08R8Go=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ae:b5:cd:88:cb:1c:51:41:c1:d0:8d:6f:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jun 11 21:00:39 2026 GMT
Not After : Jun 12 21:00:39 2026 GMT
Subject: CN=782708be5aec2039bf9c5e8472b811ad532e311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:b5:39:c7:10:db:b2:56:b0:cb:4d:34:01:
0e:cd:28:64:a9:69:50:b4:e1:90:bb:76:8f:cc:b6:
62:8a:5c:83:5a:29:7e:51:ab:c8:7e:9b:54:ff:42:
fb:ba:41:3a:9f:12:7f:90:61:20:5f:ad:b7:15:f4:
ca:d8:f3:d5:b3:c5:8b:bd:39:35:4f:d7:b1:e0:5c:
45:b4:06:1e:df:ff:8d:ad:9e:f9:b2:e1:a8:d6:ef:
bd:95:31:14:7e:fb:c5:f3:af:5d:ee:af:a6:35:84:
f7:76:04:3a:b7:fc:21:bf:17:f9:a8:8e:34:4f:4d:
18:07:42:b3:f5:8b:56:9f:45:7d:53:2d:e5:d5:2a:
78:a5:18:d8:a2:c4:32:dd:ae:35:b6:ba:c8:54:5f:
17:d6:a4:d6:c8:ff:e2:24:89:0d:72:a2:92:49:82:
e1:15:b0:14:88:22:09:83:06:a1:0c:67:67:88:87:
53:5e:d7:e1:cf:b1:41:43:24:2c:a1:5a:27:d8:bd:
d9:e5:e4:92:c1:83:45:b4:6f:1c:3e:86:20:52:f2:
b4:30:86:ac:07:19:9e:da:59:77:6f:1c:00:11:52:
4d:8f:53:d0:b2:2f:15:18:15:80:98:5f:0e:ce:e5:
0f:38:ec:07:9d:e4:45:c4:b4:a6:bb:d5:a9:df:8d:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:08:BE:5A:EC:20:39:BF:9C:5E:84:72:B8:11:AD:53:2E:31:1B
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:7c:15:a8:e6:4d:54:0d:15:27:21:fa:58:b2:da:0a:9b:
70:b3:2e:03:1a:86:4d:5a:11:7c:b3:11:d4:a1:85:28:79:13:
d8:4b:f9:30:0e:2d:1a:bb:f4:38:c7:6d:ab:d8:bf:a4:03:1c:
64:71:e9:9d:2f:fe:92:d0:d1:02:2e:12:93:9c:06:4e:b6:68:
13:5a:c7:78:d6:f9:5f:7a:a5:dd:79:69:d2:a6:63:44:6f:42:
2c:41:64:a8:99:16:19:b6:81:f5:4d:f4:8b:55:b0:d7:6b:87:
23:cb:ce:92:6e:d6:19:b7:a9:0a:e2:49:23:26:d1:18:c2:16:
02:71:b1:11:18:7e:0c:6f:63:66:66:b9:49:bf:ec:43:e4:16:
97:3d:32:7e:54:30:1f:55:14:8e:40:6d:7e:8b:75:93:46:bc:
21:90:fd:cb:b1:59:67:2c:72:8c:e7:9f:9b:11:50:f6:b1:07:
81:c6:af:c4:ce:a5:d1:45:21:6a:e6:8e:06:1a:ec:19:d1:e3:
df:b5:32:dd:ed:45:e6:00:2d:64:02:06:3f:87:a3:18:fa:b6:
b2:34:4c:7c:24:f9:4a:fa:9b:b3:02:ae:f6:6f:43:45:93:68:
bb:64:ff:0b:5f:e7:b0:a1:2c:e5:cd:66:e0:d5:b8:bd:f0:37:
cc:c6:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:45:13 2026 by rpki-client