Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: sOWVMaV6FPK83kHBW9D2MBuecGZbNd+qYC+8imLtdAg=
Subject key identifier: D6:49:09:57:36:E5:A1:95:78:AD:AF:B0:75:7E:5A:92:30:F7:55:DE
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 019DCF07D631E6BCB60BA70B289A49F275DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0B2D
Signing time: Mon 27 Apr 2026 13:01:30 +0000
Manifest this update: Mon 27 Apr 2026 13:01:30 +0000
Manifest next update: Tue 28 Apr 2026 13:01:30 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: LCkhi/zlKATC6/TVv26c7ltn8eXFsyn5O1WWywds+YU=)
2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:d6:31:e6:bc:b6:0b:a7:0b:28:9a:49:f2:75:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Apr 27 13:01:30 2026 GMT
Not After : Apr 28 13:01:30 2026 GMT
Subject: CN=d649095736e5a19578adafb0757e5a9230f755de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:4f:20:b2:4d:8b:d3:03:a7:50:5f:31:8c:
e5:e8:bc:9c:25:45:2b:85:ef:8f:d6:19:92:01:17:
2c:52:1d:e2:57:21:74:36:4b:0f:31:4b:9c:34:80:
6a:21:b8:49:5d:a2:50:53:05:bb:cb:73:c1:c6:26:
37:27:5d:50:32:3e:0a:8f:be:53:2c:51:6e:0f:ed:
e2:6a:ac:25:5c:4e:09:e8:c9:25:88:7e:dc:a7:e8:
0b:6d:58:05:72:8d:db:1d:c2:d3:ad:a6:5b:1b:de:
70:c5:95:ef:9c:c4:c3:50:17:59:72:42:9c:51:fb:
5c:6a:3b:74:d0:c5:c0:82:9a:aa:e0:47:f4:58:3d:
59:c3:5a:5a:07:e1:cd:5d:1f:60:a3:ba:da:31:49:
24:9d:6a:dc:c1:e7:fa:22:fa:c3:53:8e:14:28:b3:
42:55:fe:f6:4c:33:d2:42:43:cd:2b:db:3e:93:4b:
9c:e2:16:35:01:1e:5e:30:6c:bd:39:98:5c:44:c5:
4c:4d:fa:b9:9d:de:85:aa:fd:f9:34:b9:e9:fc:31:
e9:20:82:e1:ba:c3:7b:f5:77:ea:d0:b2:c6:eb:ce:
40:2a:c6:0d:71:75:a3:3e:71:6d:d6:9c:af:00:80:
07:9b:72:f4:34:29:ac:87:ec:a7:ad:f9:01:e7:17:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:09:57:36:E5:A1:95:78:AD:AF:B0:75:7E:5A:92:30:F7:55:DE
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f3:c0:ca:f4:eb:9e:cd:74:15:52:eb:94:9f:65:9e:ce:06:
ca:27:32:92:d0:bb:ee:9f:2d:0e:43:1f:4c:4a:87:ca:e5:af:
c6:18:95:ca:d3:6b:8f:c7:c8:70:2f:6e:25:b0:b6:42:d2:06:
28:9c:d5:b8:1b:24:be:b7:e4:4d:2b:61:4d:da:89:97:27:60:
8c:0b:da:63:1e:e6:14:6e:f7:8f:db:b7:7c:ac:85:59:2c:ee:
09:5a:29:ef:c1:0c:a4:cf:6b:1a:c3:46:07:03:ae:ee:90:e6:
c1:32:d1:b9:f5:01:4f:b2:34:d6:db:25:7d:ba:8f:9f:f5:06:
8f:3e:f7:e7:ff:37:1d:fb:12:4e:5e:70:81:e0:ec:82:ba:be:
f4:e0:b2:27:73:b1:18:7b:54:23:51:3c:55:b6:90:e5:c8:20:
2c:75:3a:0e:f3:7a:b9:4c:d9:8f:c3:65:82:20:15:4e:ce:78:
18:be:d6:4a:86:1c:16:13:93:70:86:5a:3e:3c:16:0f:b1:7c:
1b:de:3e:c2:d1:ad:95:9a:54:6e:eb:9d:34:8a:f6:5f:71:7c:
a9:96:52:da:f8:8e:47:90:92:47:be:30:2b:ab:fd:ee:c3:89:
ba:f0:65:33:b2:14:87:57:d0:3b:45:21:69:a6:50:5a:5c:47:
4d:29:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:58 2026 by rpki-client