Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: k+RXcbe7lWj3c19Eps0n8Eq2MI1lvIOKZeUspF9DY2k=
Subject key identifier: 0A:15:D0:4C:A6:12:97:D6:BE:6C:7B:C5:E0:82:95:F5:FE:C8:C3:7A
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 01A0E32BE7BB80663063E85CEF5595BBF1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 14:01:40 +0000
Manifest this update: Sun 27 Sep 2026 14:01:40 +0000
Manifest next update: Mon 28 Sep 2026 14:01:40 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: v2BankSZiUzMKM30eAzJC6/spWZy7y307HbYHjQhm9M=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:e7:bb:80:66:30:63:e8:5c:ef:55:95:bb:f1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Sep 27 14:01:40 2026 GMT
Not After : Sep 28 14:01:40 2026 GMT
Subject: CN=0a15d04ca61297d6be6c7bc5e08295f5fec8c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:24:30:e0:88:09:9d:df:df:a7:70:3b:84:
25:ec:21:b0:9a:b8:a5:01:85:08:8c:a4:85:af:5e:
4b:a0:dd:57:46:19:b5:c6:7c:29:25:e6:32:9d:8f:
be:b6:23:2f:58:b1:06:a1:c3:c7:16:18:1f:c7:ca:
a4:e3:54:5d:3a:46:ad:eb:94:5b:b2:50:53:a2:10:
29:b9:f9:3c:fc:8c:db:a3:56:2e:b9:bd:56:47:1a:
a7:6f:ae:66:99:a5:4d:e8:39:0f:57:2e:3f:63:65:
1c:12:e2:0a:2c:c4:38:36:2d:db:c9:63:14:6b:08:
5a:c4:53:e7:30:ea:b9:85:7e:7a:a4:08:c0:e8:bc:
2c:46:b9:e5:b3:a8:bf:29:8f:33:9b:2d:89:a8:bc:
aa:7f:c2:42:07:fb:98:6c:99:25:40:03:19:5d:d7:
49:84:d4:7b:52:c7:34:32:f4:39:66:e7:46:b7:0a:
38:a2:a1:4e:52:20:ea:d1:0a:e1:b9:4a:d3:16:2a:
43:3f:e7:bb:32:1d:88:30:48:48:39:a0:58:7b:78:
a0:69:1c:07:94:c8:45:eb:a1:90:fe:db:aa:fa:f3:
bc:09:08:3c:6c:8e:a3:89:98:07:0b:42:7a:49:2c:
e8:da:c4:8b:11:c1:e6:9c:a6:6b:b5:57:89:0a:9d:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:D0:4C:A6:12:97:D6:BE:6C:7B:C5:E0:82:95:F5:FE:C8:C3:7A
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:08:ff:97:76:1e:d4:8e:14:0f:14:5b:ae:88:8b:b7:82:85:
b3:f0:8d:9f:ce:77:6a:cb:31:8a:b7:07:f8:af:43:c5:b6:1b:
77:47:9d:07:30:8e:c8:9d:eb:85:df:47:f8:28:0b:60:83:95:
96:cb:6a:8e:5e:54:86:f0:e6:2d:c2:e4:7e:93:4f:5f:c9:0f:
f7:57:63:8e:2e:aa:17:0e:98:b1:f6:e4:43:dd:2d:28:30:ff:
bf:98:5c:74:d2:ab:34:b5:bf:3d:d4:0d:5c:7a:8c:5d:2f:c2:
33:54:66:2c:c5:d8:9c:f1:c7:28:13:f4:f6:64:81:18:11:b0:
ca:ee:ce:3a:ea:5d:f9:47:af:83:99:78:54:ca:fa:dd:39:3a:
b5:9c:be:fd:3d:4f:a1:ff:43:81:92:5a:16:b8:94:60:44:c7:
65:4e:de:69:e7:eb:01:cc:b4:1c:51:ed:62:0b:e5:b9:bf:b5:
c5:10:54:96:b8:11:3d:44:23:89:94:da:73:66:69:1d:2c:cf:
13:5b:cc:a2:f7:8c:cb:69:a0:12:b4:61:a5:01:d6:52:9b:3c:
0c:34:b3:7f:66:9a:e2:a0:9e:eb:01:85:ae:4d:2f:64:e6:6f:
ef:86:29:d9:ce:3b:e8:d3:08:d0:d4:ed:cb:66:32:34:29:eb:
bd:52:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:19:54 2026 by rpki-client