Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
File: hVan-anfCAeBbIQtoWeJ1d28g1U.mft (raw, json)
Hash identifier: Ln2Nlot7C/MqeR9eiT01+FTheVEGTB2jm4NV5P6sfew=
Subject key identifier: 9E:16:5D:0B:EA:00:4A:7F:3E:E0:2C:24:70:04:DB:E8:82:E0:AE:ED
Authority key identifier: 85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55
Certificate issuer: /CN=8556a7f9a9df0807816c842da16789d5ddbc8355
Certificate serial: 019F85D772F0186ACD94B6F4CDD1BEC3C49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:57 +0000
Manifest this update: Tue 21 Jul 2026 18:01:57 +0000
Manifest next update: Wed 22 Jul 2026 18:01:57 +0000
Files and hashes: 1: hVan-anfCAeBbIQtoWeJ1d28g1U.crl (hash: QA7U/OKWSLKtVrxLneysTtiuCasZua60zYSTC7nKUCo=)
2: ryjc2rw6_c8wKxTaH4dTfMsIflg.roa (hash: hlu7n01esDPMySYwsP8341m6f4R4t9WEUfR5CWyefQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:72:f0:18:6a:cd:94:b6:f4:cd:d1:be:c3:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8556a7f9a9df0807816c842da16789d5ddbc8355
Validity
Not Before: Jul 21 18:01:57 2026 GMT
Not After : Jul 22 18:01:57 2026 GMT
Subject: CN=9e165d0bea004a7f3ee02c247004dbe882e0aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:ef:5d:60:bf:16:47:ac:47:86:57:a9:46:
90:fc:f1:d0:ff:58:dc:75:d2:6c:59:56:fc:f1:66:
ab:9c:70:a1:4d:a2:42:61:9a:38:f5:8d:b4:99:bd:
ea:fd:1d:72:92:a9:22:47:fb:87:08:23:44:91:2f:
5a:8c:16:92:d6:0d:8e:d7:c5:c7:f5:24:15:01:25:
61:19:de:c4:7a:7f:00:a3:65:d4:e6:d3:40:23:e5:
d2:b9:a9:94:c5:b6:76:f4:e5:d4:a6:69:a0:35:82:
df:52:ee:18:02:55:99:6f:77:c3:96:8a:80:35:e6:
51:a5:7f:ed:11:05:e7:1d:76:97:6d:1b:92:6b:27:
75:f5:b5:6a:30:36:b0:db:cf:1a:1d:1b:06:0e:7a:
29:ce:99:2a:13:64:67:a6:46:bc:36:23:77:02:62:
ca:40:67:42:39:98:db:d3:88:37:13:44:25:e5:fb:
ec:d4:fe:f1:6a:ef:38:4b:1d:56:a3:5a:60:f9:60:
a6:b5:45:b2:56:34:91:04:f0:c2:24:b0:4e:9b:66:
79:03:30:1f:71:20:d6:6a:97:d7:d5:bc:a9:41:2d:
e7:5f:05:d2:6c:7b:2c:5c:32:49:1d:c1:45:b2:d8:
2e:a3:e4:85:ea:6f:3f:55:18:7a:11:ed:36:48:4c:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:16:5D:0B:EA:00:4A:7F:3E:E0:2C:24:70:04:DB:E8:82:E0:AE:ED
X509v3 Authority Key Identifier:
keyid:85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:14:78:85:51:91:fc:3d:a8:3e:73:98:99:7c:e1:6d:24:aa:
01:85:98:b5:7f:4b:a9:cb:7c:c4:e2:27:fe:fd:80:19:3f:71:
ff:c6:1c:cc:70:12:a1:5d:1d:32:e7:42:1f:42:7c:44:7d:e7:
4b:0b:89:e3:82:d7:dd:7a:48:ab:55:59:22:35:8b:76:c0:43:
2b:e4:60:e7:bb:dd:9b:cf:ed:a3:db:97:27:32:5a:e3:16:87:
81:ac:17:d9:8a:16:fd:5f:c6:1a:d9:a1:fc:80:71:31:79:77:
da:9e:0f:03:19:ad:b6:59:c5:0e:2d:99:91:f3:d4:ab:4e:bd:
54:95:48:ee:4b:d9:c6:96:b0:04:45:a5:62:a9:26:14:21:08:
d2:c0:20:d5:0f:8f:4f:e0:95:75:94:84:f5:40:a4:5b:a5:4a:
49:ca:90:37:99:de:f3:5a:de:ae:2c:0f:5f:ba:fd:17:e1:3c:
44:29:40:b0:04:24:90:2b:17:cb:54:cf:67:7e:18:a6:80:d3:
7b:60:a6:1d:54:eb:f8:08:cf:12:e9:e9:d1:9a:b5:61:cf:04:
fc:bd:88:c7:51:b5:23:de:b7:45:bc:1f:fd:21:33:dc:1a:c9:
ff:04:97:d2:e4:9b:ac:16:92:85:22:0c:8b:b3:11:b0:48:43:
08:41:9f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F13LwGGrNlLb0zdG+w8SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTZhN2Y5YTlkZjA4MDc4MTZjODQyZGExNjc4OWQ1ZGRi
YzgzNTUwHhcNMjYwNzIxMTgwMTU3WhcNMjYwNzIyMTgwMTU3WjAzMTEwLwYDVQQD
Eyg5ZTE2NWQwYmVhMDA0YTdmM2VlMDJjMjQ3MDA0ZGJlODgyZTBhZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3jvXWC/FkesR4ZXqUaQ/PHQ/1jc
ddJsWVb88WarnHChTaJCYZo49Y20mb3q/R1ykqkiR/uHCCNEkS9ajBaS1g2O18XH
9SQVASVhGd7Een8Ao2XU5tNAI+XSuamUxbZ29OXUpmmgNYLfUu4YAlWZb3fDloqA
NeZRpX/tEQXnHXaXbRuSayd19bVqMDaw288aHRsGDnopzpkqE2Rnpka8NiN3AmLK
QGdCOZjb04g3E0Ql5fvs1P7xau84Sx1Wo1pg+WCmtUWyVjSRBPDCJLBOm2Z5AzAf
cSDWapfX1bypQS3nXwXSbHssXDJJHcFFstguo+SF6m8/VRh6Ee02SEwvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4WXQvqAEp/PuAsJHAE2+iC4K7tMB8GA1UdIwQY
MBaAFIVWp/mp3wgHgWyELaFnidXdvINVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZhbi1hbmZDQWVCYklRdG9XZUoxZDI4ZzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt
YzQ2ZDdiYWMwMmZjLzEvaFZhbi1hbmZDQWVCYklRdG9XZUoxZDI4ZzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj
LzEvaFZhbi1hbmZDQWVCYklRdG9XZUoxZDI4ZzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBR4hVGR
/D2oPnOYmXzhbSSqAYWYtX9Lqct8xOIn/v2AGT9x/8YczHASoV0dMudCH0J8RH3n
SwuJ44LX3XpIq1VZIjWLdsBDK+Rg57vdm8/to9uXJzJa4xaHgawX2YoW/V/GGtmh
/IBxMXl32p4PAxmttlnFDi2ZkfPUq069VJVI7kvZxpawBEWlYqkmFCEI0sAg1Q+P
T+CVdZSE9UCkW6VKScqQN5ne81reriwPX7r9F+E8RClAsAQkkCsXy1TPZ34YpoDT
e2CmHVTr+AjPEunp0Zq1Yc8E/L2Ix1G1I963Rbwf/SEz3BrJ/wSX0uSbrBaShSIM
i7MRsEhDCEGfOg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:53 2026 by rpki-client