Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: KWlvP+JwLxBJlBNeBdr+tWolIfEJ8f+ovFjKJo1GM34=
Subject key identifier: 1C:D4:3E:3E:5B:47:5F:CB:C8:1D:9F:F3:B7:07:F5:5A:A9:0B:EF:30
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019D29294B2261474C8EAD8D7F37288E92BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: JhmRPXQOUMxS+T9WcjyNFDo4KwG35iYSBuVJYUOjkEU=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4b:22:61:47:4c:8e:ad:8d:7f:37:28:8e:92:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=1cd43e3e5b475fcbc81d9ff3b707f55aa90bef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:05:6b:94:7f:34:c4:fe:59:74:73:5d:0d:
3b:0d:5a:c8:76:87:9a:24:15:67:c0:8b:d8:91:93:
3b:b9:a4:32:21:12:8f:85:46:30:9b:8a:60:bb:91:
5e:1d:57:a1:aa:7c:7d:ae:56:b8:5a:2f:6e:5f:13:
d2:df:74:b2:00:62:bc:6e:44:54:a5:d2:6f:eb:0e:
75:63:e8:a4:8f:35:d8:17:74:b5:75:cf:62:28:d0:
48:ab:fc:35:c0:14:ce:99:9e:1d:18:c9:38:00:e9:
56:e6:cd:37:27:77:cf:63:df:21:a7:b6:d4:1f:26:
24:e1:ac:dd:85:3d:ee:11:7a:f9:2f:19:77:57:08:
46:7a:f8:b0:b9:03:e2:6c:7c:b8:0d:16:63:4c:08:
67:ec:32:dd:73:09:7e:2f:81:3a:72:bd:d0:f6:a0:
07:1d:ee:21:47:79:68:e4:5d:c4:0b:7e:85:83:a3:
aa:38:4f:8d:f8:b2:cc:47:75:dd:d5:28:6b:7f:2a:
40:5b:09:01:b3:87:f9:60:50:59:c7:5f:25:a6:84:
3e:0a:9b:5a:e1:f4:20:3a:7b:1c:5d:17:7a:64:a7:
f2:cd:c9:98:cd:5b:84:a2:8f:1f:2f:af:0a:68:bb:
e9:d1:b8:b2:38:71:a2:1a:7c:42:bd:0f:06:7e:61:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D4:3E:3E:5B:47:5F:CB:C8:1D:9F:F3:B7:07:F5:5A:A9:0B:EF:30
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dd:ea:c4:d2:c9:90:6c:cc:f4:fc:df:a4:e3:6e:73:88:cd:
2d:0f:e4:15:d9:bc:9e:4c:e1:6b:32:08:fc:3c:cb:c4:30:43:
42:bf:62:98:83:d7:6e:17:10:ee:25:63:6d:54:9a:ee:d1:b2:
62:7c:9d:a2:06:1b:32:80:97:4a:62:c5:6c:26:f9:a1:7a:81:
d9:93:5d:9c:60:e6:53:12:55:24:15:89:21:55:4d:e8:bd:2a:
c6:c4:c3:9a:1b:b9:ae:08:df:97:7a:7f:18:c8:33:d6:d7:3e:
ff:69:ce:62:7d:83:c9:a4:9b:4a:d9:0b:db:e9:57:71:0c:95:
ca:5b:88:f2:8d:f6:d2:c7:89:fc:8a:5f:fa:7d:09:67:41:f4:
d3:f3:5d:da:89:ba:a4:5e:dc:57:23:e8:a4:32:a8:31:d2:57:
38:f3:4e:75:42:8b:2a:28:2f:65:41:3a:b1:88:dd:44:46:3a:
67:ee:40:ae:b7:99:01:67:04:73:e6:a1:84:55:c4:5c:43:69:
b3:3d:e5:99:9a:8e:c4:c7:19:d4:82:bb:85:aa:c5:b5:e9:7e:
e2:68:78:8c:96:45:73:de:47:6f:33:2b:f0:4a:76:05:cf:45:
8e:cb:bf:50:ef:51:fe:1c:a1:5a:87:3b:19:47:0f:c3:19:33:
88:e3:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:40 2026 by rpki-client