Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: 4bX6otz/vqg5u9YtsHWRnyIfUzCPw1BEj0K/wA2TNzM=
Subject key identifier: 03:85:F2:2B:F1:3F:6B:7E:85:2F:57:33:F1:7E:7B:4F:D7:62:35:26
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019F91DB3605BEB01DBD366289B7AE7C1F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 1518
Signing time: Fri 24 Jul 2026 02:01:30 +0000
Manifest this update: Fri 24 Jul 2026 02:01:30 +0000
Manifest next update: Sat 25 Jul 2026 02:01:30 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: lKu4CNraeoBUJbsK93+tpYhWpbOdRR726d3Fl9h92y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:36:05:be:b0:1d:bd:36:62:89:b7:ae:7c:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jul 24 02:01:30 2026 GMT
Not After : Jul 25 02:01:30 2026 GMT
Subject: CN=0385f22bf13f6b7e852f5733f17e7b4fd7623526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:4a:12:df:32:d2:39:98:e6:5f:96:79:bb:
65:b0:da:47:c6:55:2e:6c:23:48:02:ff:18:dc:62:
95:9e:85:f6:08:b4:2c:9d:3d:62:e9:10:73:70:0f:
9f:c2:28:0a:b8:d8:6f:67:d8:f2:81:88:9d:cf:8d:
41:ae:83:38:4e:2f:be:f5:d8:1a:38:6b:49:93:9e:
d6:a9:8e:37:48:81:79:86:c2:ab:39:96:4b:36:a2:
41:18:9e:6b:ea:1c:20:30:cf:dc:a8:c7:6f:50:a7:
1c:d0:ef:8a:e4:d3:59:01:7e:90:72:25:c0:ab:aa:
f2:40:32:41:ef:30:52:6a:e2:22:cc:d1:cc:2d:1a:
13:2a:32:b7:59:1b:0c:fe:fa:af:41:bb:48:dc:b0:
b7:c0:b6:17:1a:aa:1f:69:54:4d:c9:c9:b8:e4:03:
f8:41:e3:a5:53:61:6e:74:43:d9:6b:6c:21:54:bc:
29:e5:eb:aa:68:cd:d6:3b:73:f9:70:73:20:62:6e:
62:63:86:70:35:24:26:10:2b:cd:e6:2c:9f:d5:18:
86:05:29:15:09:52:a2:c8:4a:89:25:a0:b2:bf:af:
b5:17:8a:f0:3a:9f:54:5e:c5:50:db:8b:b3:bf:e3:
04:68:16:fd:ab:f1:df:de:2d:89:60:31:9d:f0:73:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:F2:2B:F1:3F:6B:7E:85:2F:57:33:F1:7E:7B:4F:D7:62:35:26
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0a:3b:f5:fc:17:95:2d:c9:90:f2:b7:2a:3d:35:7e:34:02:
51:56:ba:e1:11:5e:7f:14:52:6b:da:aa:8c:a0:bf:c4:90:67:
02:27:83:27:e6:90:da:f8:29:83:26:e6:d1:cb:2a:ba:eb:a6:
0c:a3:28:45:cd:9b:bb:f0:b4:88:7c:0a:70:5a:92:28:17:79:
6f:6c:25:98:af:20:5d:52:a5:ec:c6:0b:17:97:0c:bb:39:e2:
40:b3:55:01:2e:01:03:89:de:9a:bc:57:71:3b:62:51:83:c6:
62:3e:da:ab:de:71:85:91:af:0a:a0:3d:3e:f5:89:94:88:e1:
6c:0e:1b:c6:d2:c8:13:db:45:29:9b:41:45:9b:5e:32:c5:86:
af:a4:9c:33:d2:c1:ad:6d:cd:04:83:3a:4e:ab:52:be:5b:d0:
6c:87:15:17:d8:3a:0c:dd:1b:ba:43:0c:34:1e:9d:2d:05:9b:
75:ad:db:35:0d:19:15:a1:1c:9a:d1:3e:55:0d:1c:0b:33:95:
22:de:a1:f4:6e:c9:7c:29:54:3d:24:41:ab:16:a9:a2:1e:52:
d2:f7:5f:bd:a8:9b:b8:8b:31:1e:cf:38:13:50:04:bb:36:b4:
b4:1e:b6:e1:40:f4:bb:9d:83:37:71:7b:f4:95:15:c0:04:1d:
b2:d3:98:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2zYFvrAdvTZiibeufB9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz
ODM5YjEwHhcNMjYwNzI0MDIwMTMwWhcNMjYwNzI1MDIwMTMwWjAzMTEwLwYDVQQD
EygwMzg1ZjIyYmYxM2Y2YjdlODUyZjU3MzNmMTdlN2I0ZmQ3NjIzNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zxKEt8y0jmY5l+WebtlsNpHxlUu
bCNIAv8Y3GKVnoX2CLQsnT1i6RBzcA+fwigKuNhvZ9jygYidz41BroM4Ti++9dga
OGtJk57WqY43SIF5hsKrOZZLNqJBGJ5r6hwgMM/cqMdvUKcc0O+K5NNZAX6QciXA
q6ryQDJB7zBSauIizNHMLRoTKjK3WRsM/vqvQbtI3LC3wLYXGqofaVRNycm45AP4
QeOlU2FudEPZa2whVLwp5euqaM3WO3P5cHMgYm5iY4ZwNSQmECvN5iyf1RiGBSkV
CVKiyEqJJaCyv6+1F4rwOp9UXsVQ24uzv+MEaBb9q/Hf3i2JYDGd8HNDVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOF8ivxP2t+hS9XM/F+e0/XYjUmMB8GA1UdIwQY
MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt
YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky
LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwo79fwX
lS3JkPK3Kj01fjQCUVa64RFefxRSa9qqjKC/xJBnAieDJ+aQ2vgpgybm0csquuum
DKMoRc2bu/C0iHwKcFqSKBd5b2wlmK8gXVKl7MYLF5cMuzniQLNVAS4BA4nemrxX
cTtiUYPGYj7aq95xhZGvCqA9PvWJlIjhbA4bxtLIE9tFKZtBRZteMsWGr6ScM9LB
rW3NBIM6TqtSvlvQbIcVF9g6DN0bukMMNB6dLQWbda3bNQ0ZFaEcmtE+VQ0cCzOV
It6h9G7JfClUPSRBqxapoh5S0vdfvaibuIsxHs84E1AEuza0tB624UD0u52DN3F7
9JUVwAQdstOYCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:13 2026 by rpki-client