Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: nUkUNSyPkxvQe5Xl+CRgIxNBfk0GAuLiuSiI2lWKeJE=
Subject key identifier: 0F:42:2E:46:67:11:4D:60:C6:2E:F9:62:F9:24:C2:28:41:89:74:AF
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019F95EDF059F854AF1ADCFA4414B3F758C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 19D5
Signing time: Fri 24 Jul 2026 21:00:26 +0000
Manifest this update: Fri 24 Jul 2026 21:00:26 +0000
Manifest next update: Sat 25 Jul 2026 21:00:26 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: z+hywjAHMEq7ZoobbtBXUD9EuLswngWaRobf9GLVIVU=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:f0:59:f8:54:af:1a:dc:fa:44:14:b3:f7:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Jul 24 21:00:26 2026 GMT
Not After : Jul 25 21:00:26 2026 GMT
Subject: CN=0f422e4667114d60c62ef962f924c228418974af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:5b:16:53:71:23:18:7e:12:a9:36:53:58:
31:2c:1d:4b:a4:c7:a5:4b:9a:54:6a:9f:18:e8:73:
03:6a:d0:39:de:23:c1:bf:64:12:9e:65:1e:c2:d3:
39:3e:57:a3:c5:72:37:b5:a1:fc:1c:c0:0f:85:a7:
37:38:0b:f6:a7:b9:a0:e6:04:9d:10:d4:dd:42:5d:
02:1d:d1:46:e6:50:06:67:9d:74:f9:2e:07:cd:9a:
16:4c:88:6c:ea:c7:3f:65:fc:f7:e9:5a:4f:ad:ae:
a5:0e:62:d8:06:9b:cf:36:3c:c1:2b:5c:d3:22:7a:
2b:0f:47:4e:7c:dc:a2:c9:87:5e:b2:28:95:fc:96:
6b:bd:80:c3:61:02:d7:70:b5:be:02:7a:83:20:70:
4c:10:4c:a2:0b:b3:33:5e:cf:58:7a:e1:23:a6:ed:
62:5f:97:90:1d:7f:22:ff:83:ca:a6:4b:cc:7f:50:
d5:81:d1:36:00:42:ee:43:40:3d:93:32:c6:96:68:
b5:63:b6:3e:a8:6a:93:c9:bb:32:3b:e0:79:e7:bb:
df:84:c5:60:8b:51:9b:56:c6:33:09:40:6a:c2:c5:
1b:59:0c:c8:ea:a7:99:7b:fb:f2:a9:da:59:74:37:
7f:57:ee:5b:e4:9d:18:08:53:86:c3:75:33:46:91:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:2E:46:67:11:4D:60:C6:2E:F9:62:F9:24:C2:28:41:89:74:AF
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c7:0f:16:82:03:6d:d2:35:81:04:ba:54:db:15:77:a2:7a:
3c:b1:38:13:7b:1c:ad:be:e8:c8:22:3a:a1:4a:94:a7:13:21:
7d:44:9b:ec:bb:40:e2:7c:b8:53:c5:f9:c5:7f:a6:4b:9b:2c:
5e:f0:bb:85:43:d9:8d:f1:27:1a:66:21:3a:9d:80:d7:f4:88:
1d:5c:00:26:86:3b:5a:25:dd:cc:4d:44:38:10:30:70:07:65:
1b:47:c5:cb:e5:f0:6b:01:bf:43:3b:f1:9d:cb:5e:ed:c5:e6:
34:87:56:2e:d4:0b:7e:57:6f:51:a4:db:8a:1a:be:8c:18:ca:
68:c2:a5:c6:03:df:8a:6e:52:5a:3c:aa:27:b9:d5:43:3e:cd:
53:38:62:94:9f:03:5a:22:66:42:21:2a:6d:79:13:28:28:62:
05:6d:3a:19:7b:c2:62:ff:16:89:ea:17:bb:c3:ca:08:bb:d7:
21:54:08:f9:68:10:ef:b9:74:a3:c1:65:e5:fd:5d:16:e3:5f:
9b:ab:d9:a2:35:5c:24:b4:a6:30:79:b2:e9:cf:f9:24:92:8b:
f9:f1:7e:c8:5b:04:16:5c:dc:a2:68:2b:0f:fe:2a:0c:1c:ee:
fb:4d:94:1f:c4:25:c3:ca:02:8d:b9:ee:da:96:f6:c0:58:cc:
71:bf:cc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:31 2026 by rpki-client