Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
File: HlcDhG16g2S-wwMDTbkay_9C2gw.mft (raw, json)
Hash identifier: ull+ivNER+42QoV02gzF5OhU9+SVuczlZXnHTmJm5Vs=
Subject key identifier: 87:97:8D:4A:90:DF:BF:2C:C3:62:6B:C2:BE:89:37:FB:1B:F0:40:6A
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Certificate issuer: /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial: 019F94A4F932F72A220188F970E5440172F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
Manifest number: 0D89
Signing time: Fri 24 Jul 2026 15:01:07 +0000
Manifest this update: Fri 24 Jul 2026 15:01:07 +0000
Manifest next update: Sat 25 Jul 2026 15:01:07 +0000
Files and hashes: 1: HlcDhG16g2S-wwMDTbkay_9C2gw.crl (hash: 3idWD4DKbv3DuKicim+d3EDdR/9EDEytGBXb5rR3YyU=)
2: brOPRHZE8w8OlykjjLgAfmNZ_2E.roa (hash: KdHvIOBRCGI/cneTU0VrbKbHmdpXYBJ4OfKXRKTAahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:f9:32:f7:2a:22:01:88:f9:70:e5:44:01:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
Validity
Not Before: Jul 24 15:01:07 2026 GMT
Not After : Jul 25 15:01:07 2026 GMT
Subject: CN=87978d4a90dfbf2cc3626bc2be8937fb1bf0406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:30:92:b5:83:53:31:a4:0b:a8:c7:4e:aa:
35:c0:24:d6:8b:60:1f:be:f1:ac:97:0a:4a:c5:38:
1b:28:49:2e:20:44:f4:68:89:34:b1:20:f1:11:42:
96:e7:9d:07:0d:d2:e5:6a:e6:ad:90:e6:6b:00:37:
91:33:5a:04:f1:a7:d7:b3:90:73:a8:1f:a7:25:f3:
af:d5:a9:2f:a0:5a:2d:79:78:ef:fc:91:30:82:f1:
cf:32:f6:b0:42:53:41:4a:bd:7f:08:8e:c3:9b:06:
0e:ac:b2:5b:fd:bc:e1:eb:26:be:c6:4d:f8:27:e6:
10:f9:50:d8:0f:30:f0:c8:e5:98:8b:cb:5c:ee:1b:
5d:e9:5e:f5:4d:45:af:56:87:dd:6c:4e:b6:7a:50:
c7:60:de:74:74:8b:6a:51:40:5b:d4:61:77:47:72:
8a:2a:7b:72:8c:ae:e7:72:37:82:d7:6f:4f:5a:d6:
1a:b8:47:75:7b:5e:b5:62:5d:69:58:51:06:73:76:
a7:19:7e:d3:76:ba:c9:61:26:9b:b9:f0:47:ef:b6:
96:3b:a7:bf:32:bf:a2:99:25:db:b1:37:fc:8b:88:
0b:b0:b5:ad:97:2c:13:a1:bd:88:0d:a1:de:1e:2e:
3f:38:d9:b8:46:c7:da:06:e7:9a:5d:cd:5a:14:8d:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:8D:4A:90:DF:BF:2C:C3:62:6B:C2:BE:89:37:FB:1B:F0:40:6A
X509v3 Authority Key Identifier:
keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4a:ed:9f:1b:e3:e7:ec:85:22:14:c7:61:cd:61:9a:fb:3e:
c0:3c:53:a2:4a:de:52:57:80:7f:09:0f:9f:63:35:47:f6:da:
27:37:09:5d:2d:12:69:83:36:2e:33:a7:35:05:77:9d:6a:58:
05:9b:d8:cd:1b:34:ee:d5:c1:9f:02:f2:c4:aa:10:96:ca:72:
77:43:23:bb:a0:47:c5:5c:36:92:62:5f:e2:22:5f:95:1a:c7:
c0:88:0a:aa:af:ef:9a:58:6f:84:62:11:9f:6a:08:0e:0e:93:
0c:1d:70:3f:ce:bd:81:6e:b6:74:42:de:42:4a:b7:cb:e7:73:
b1:e7:0a:2d:df:dc:1e:67:14:28:35:64:b6:82:fd:56:72:ec:
57:99:de:27:3c:dd:b4:fe:9c:cc:7e:c6:c7:da:3a:82:ec:c7:
82:d0:68:24:18:12:84:80:8c:7c:56:d0:da:07:ba:7a:15:92:
4d:02:89:54:40:b3:46:37:f4:00:06:b3:cc:bc:8f:4a:29:7d:
59:31:76:de:22:c2:2a:e2:e3:ba:0e:42:6c:58:67:d8:fd:9e:
cc:4c:b2:e8:32:f3:60:9f:20:5c:a1:2f:1a:00:3e:c1:8d:91:
5c:fc:be:00:dc:86:6d:87:b3:08:14:e8:e8:74:13:ec:b8:f3:
54:8f:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:44 2026 by rpki-client