Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: Thw1ED4DwigVHHLGX4p6s9C/z8AGjiiMm0gzsPmHny0=
Subject key identifier: 5E:87:9E:8A:2F:AD:A1:E4:CD:FC:6F:92:E9:CA:07:78:53:AA:2A:24
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019FA2298E91F8038DCA3104DA7871BE9DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 152A
Signing time: Mon 27 Jul 2026 06:01:00 +0000
Manifest this update: Mon 27 Jul 2026 06:01:00 +0000
Manifest next update: Tue 28 Jul 2026 06:01:00 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: dgK8DQDXVLqFoITkiMcPbif5WVvhgxHjC05+AEYpjJw=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:8e:91:f8:03:8d:ca:31:04:da:78:71:be:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jul 27 06:01:00 2026 GMT
Not After : Jul 28 06:01:00 2026 GMT
Subject: CN=5e879e8a2fada1e4cdfc6f92e9ca077853aa2a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:47:f2:fa:5a:07:00:a3:63:fe:55:67:58:
9c:60:04:7d:c9:bb:0b:aa:09:24:58:0b:f3:be:2b:
d8:8c:9d:ab:b6:bb:a4:82:1c:08:17:86:6b:70:9c:
9c:98:c5:40:6e:c9:7f:ef:e2:05:0f:33:08:b0:e5:
32:dd:d9:85:a7:ab:27:d5:69:37:c5:a6:bb:8b:05:
47:b7:c3:3b:32:6e:14:9f:e4:7a:ee:d3:2c:2f:9b:
3f:21:4e:8d:d2:07:c4:42:d1:ff:d6:1d:19:af:1b:
e6:03:51:da:2e:39:e3:77:16:bc:50:10:91:2a:c7:
13:3d:a5:6b:6d:ec:c9:6d:17:e6:5f:2f:90:06:e5:
cd:26:51:50:4a:4e:c8:3e:a2:ec:fc:5a:02:cd:67:
81:19:77:0c:b1:97:1e:29:35:12:e8:25:d3:9e:c1:
22:b0:e9:0e:47:1a:1f:77:6a:6a:3f:6c:b2:3d:90:
27:9a:45:78:21:72:04:4e:01:0c:11:0b:de:d7:0d:
5e:2e:f1:bc:64:ee:3d:1a:d4:15:dd:e6:f3:65:89:
cf:5f:c3:dc:7a:a8:d6:8f:ba:5a:f1:50:b2:22:34:
9a:95:6e:bc:59:d7:48:36:41:0e:a5:b0:15:26:07:
e1:40:90:80:85:4c:29:0b:04:11:bf:47:14:7f:94:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:9E:8A:2F:AD:A1:E4:CD:FC:6F:92:E9:CA:07:78:53:AA:2A:24
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:24:16:4f:11:87:2f:12:d0:f9:b5:25:82:5a:8d:a9:9f:
d4:fd:bb:a1:1b:88:69:2d:27:7a:a6:1a:f3:7f:54:35:48:36:
c3:00:b3:a4:37:ff:c5:0c:8d:b6:32:10:14:e4:d9:7d:c6:cf:
e0:4f:e7:85:d3:b2:d4:91:13:d6:a5:47:5d:27:fe:de:4e:f4:
fd:b9:dd:ce:a7:d8:3c:7b:f4:66:9a:96:03:04:0f:f2:6b:80:
cc:e1:62:42:b6:3e:d7:02:9b:37:86:fb:cc:3f:f8:06:9f:ec:
02:dc:5e:91:b7:64:f6:ed:e4:17:c6:0a:cd:a2:f8:66:53:36:
47:0b:51:fe:c8:9e:98:50:b0:ed:ed:d7:86:cc:51:e7:3f:9c:
f2:71:a3:63:43:80:5e:2a:de:df:f1:68:81:4a:3f:44:b8:a2:
88:7a:cf:a0:95:d5:98:3a:be:2e:83:06:4b:fe:72:51:53:f8:
32:c5:9f:6c:fb:9f:21:5b:b1:4b:52:ff:13:40:26:11:04:4f:
99:0d:23:b2:b1:61:e3:b2:aa:ba:78:51:3b:04:5a:50:c6:10:
93:d8:3d:27:de:fe:23:f5:94:95:0d:9b:ca:42:fd:df:fe:65:
f7:16:9d:e9:c9:78:fb:ce:85:d9:4a:4b:d6:19:f3:0d:40:d3:
cf:6d:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:12:41 2026 by rpki-client