Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: mZBw9aIO2tsxRt4/1kAzqHBgDJFYFNK6bhQQ/Rv4TmA=
Subject key identifier: 14:B9:37:27:1B:90:49:97:44:24:D7:38:20:1B:AD:01:D8:75:94:97
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01A08BD61490A2E76812F8416678FB2327B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 15A3
Signing time: Thu 10 Sep 2026 15:00:57 +0000
Manifest this update: Thu 10 Sep 2026 15:00:57 +0000
Manifest next update: Fri 11 Sep 2026 15:00:57 +0000
Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: BDVTPU3EvcDX+QOwdqeppUgSL/QH4kJbvUMHApsJzlc=)
3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:14:90:a2:e7:68:12:f8:41:66:78:fb:23:27:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Sep 10 15:00:57 2026 GMT
Not After : Sep 11 15:00:57 2026 GMT
Subject: CN=14b937271b9049974424d738201bad01d8759497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:49:b7:e6:97:11:91:35:34:bf:2d:34:a0:
61:ec:9c:1c:5b:be:e2:98:88:bc:ae:ab:6a:79:73:
c7:c5:3d:54:ec:00:aa:3b:19:a6:09:25:8d:d6:bc:
2d:37:60:c9:52:57:47:31:fc:79:d7:7e:84:26:98:
06:c0:e6:9a:2f:ab:58:1f:28:4d:2b:2c:7a:88:5c:
c1:15:ca:24:4f:5b:e4:c6:58:9c:18:03:91:65:91:
fb:c0:60:54:cf:04:53:be:d3:cc:6e:5c:a9:fd:07:
c2:18:5d:86:1f:62:0c:14:6f:dc:cc:3e:84:d8:69:
cc:4a:7d:c7:cc:63:2b:12:57:24:3a:1d:9d:aa:51:
da:41:f8:23:f9:cf:76:b0:4b:43:dc:2d:6e:7b:4a:
5f:4f:06:a6:91:4c:93:97:9c:02:3e:73:63:e9:e5:
cd:05:7a:2f:93:f5:7d:d7:c7:1c:3d:de:2f:65:29:
cb:a7:42:7e:66:9f:94:f7:ff:a4:ef:5a:56:04:21:
c9:91:b4:8a:f5:83:e5:18:6b:83:dd:9d:80:5b:42:
f3:5b:ea:9c:ab:41:89:50:50:08:4c:37:57:a7:47:
0f:54:ab:46:33:74:a4:a5:9d:7d:5b:6f:f7:43:5d:
bd:e1:fe:03:47:e9:aa:53:29:ef:c8:ef:96:aa:5a:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B9:37:27:1B:90:49:97:44:24:D7:38:20:1B:AD:01:D8:75:94:97
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8b:7f:0d:05:3e:07:79:3f:72:71:cb:99:ff:98:7b:31:42:
f8:76:9e:39:74:7b:bd:58:01:ef:1b:36:cf:a7:c0:e7:c7:7d:
84:a7:1b:0c:53:a9:47:a4:29:5b:f6:68:2e:09:70:e3:a3:d0:
02:8a:47:27:73:09:f3:3c:73:a5:98:9f:68:88:9a:91:4d:e7:
f5:99:6c:b1:de:b3:ec:3a:5a:a3:0f:6a:c2:f6:c8:cc:ff:ea:
d2:17:f6:5a:e9:49:35:6d:04:09:02:1b:03:bd:65:73:ac:39:
01:af:97:1d:25:91:5d:08:30:f3:67:8c:b2:d9:58:b0:86:c7:
98:6e:a3:bb:5b:c1:56:1f:37:f9:6a:e3:ff:e5:c0:d7:ea:da:
52:f4:f3:53:84:1f:01:87:b1:15:57:17:f1:44:94:22:3f:ce:
99:bc:2f:6a:bb:8e:83:ac:6f:ca:86:a3:22:cb:b7:aa:49:21:
1c:05:9f:00:14:12:11:ed:f3:89:fc:fc:fc:34:1b:ad:6f:8b:
62:92:fe:ac:21:df:f0:02:43:6f:1f:e3:b1:08:25:c3:d5:ad:
4b:73:5b:9c:10:df:f8:96:a3:45:fa:ff:dd:65:a1:9f:2a:08:
88:11:df:23:01:b1:3d:8e:d6:53:dd:08:46:36:08:be:07:89:
cd:cd:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:47:48 2026 by rpki-client