Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: 7EuQPp9tJ3X30WfrxxommVDYeFWBiH0pFO7znl2HjEg=
Subject key identifier: 0B:07:C2:F3:3B:C9:04:44:E8:76:6E:4C:6D:F8:5E:EF:30:52:08:41
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019D25840D6A803EB10D589C93DF28E8181B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 064B
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: diY1dg5+SqNz1KyHAHt2qyBBUn90YNG1FXfaU3P+FJo=)
2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0d:6a:80:3e:b1:0d:58:9c:93:df:28:e8:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=0b07c2f33bc90444e8766e4c6df85eef30520841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:ad:c5:70:1f:90:14:41:1e:9a:39:70:f2:
4c:93:0c:08:f7:b1:aa:ff:c2:27:72:5d:71:e8:1c:
c7:66:a3:86:9a:62:fa:78:35:fd:80:26:77:55:ea:
ef:8e:0d:73:2f:b0:cc:4b:fc:0e:5f:f8:14:7d:e1:
83:49:78:1b:f9:b5:aa:e3:f6:7a:f5:69:7f:54:47:
68:da:78:ae:48:f2:3f:6c:10:90:f2:0b:bc:18:2e:
8a:85:5c:04:5b:e6:1e:02:b1:33:c4:15:7d:c4:2f:
95:3d:da:95:50:27:2d:3c:68:f8:7a:d3:a0:91:85:
d4:ff:db:bb:a9:52:72:6f:8f:a8:60:86:83:83:1f:
b0:23:3d:70:b5:11:f9:6d:7d:7e:f4:c4:9e:1b:d0:
48:2e:b5:6a:36:5a:f6:1a:bd:7d:08:a3:35:64:95:
d7:f1:fb:e1:52:5b:26:dd:d4:58:38:0d:d1:01:05:
ae:0e:92:b2:60:28:92:6c:70:b2:aa:cd:d7:c9:d1:
b1:2b:01:7a:a7:a7:db:18:38:80:eb:97:91:15:20:
55:88:33:55:bc:99:01:52:75:f4:71:a6:47:66:86:
8f:84:b5:f9:5d:af:59:bf:e5:d9:d5:e3:2a:38:10:
fe:2a:02:27:55:2d:83:e7:ee:78:7b:96:8c:b3:10:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:C2:F3:3B:C9:04:44:E8:76:6E:4C:6D:F8:5E:EF:30:52:08:41
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:52:a0:aa:3e:cc:20:e1:ed:24:2a:9d:9d:a9:4a:ec:78:
b9:6d:7e:af:e7:39:2b:26:29:5e:25:c2:a9:d6:37:bb:a9:1e:
22:75:97:6a:36:3e:61:68:a7:c7:14:fe:52:b7:18:a1:e4:4f:
8d:09:94:4d:d7:65:f1:0c:1b:02:bb:08:47:b4:ae:53:8e:40:
3e:67:d5:2d:89:61:ee:fa:68:4f:09:b1:d6:3e:51:c7:77:9c:
8e:5a:6b:99:87:56:fb:f3:de:f2:21:e4:8c:ca:c6:1e:19:62:
ea:37:84:41:56:be:e0:9a:f2:b1:89:f4:c8:b1:dc:6a:6c:b4:
d1:6b:20:f1:45:c2:46:1e:d9:9f:cc:07:e4:67:ae:63:d9:16:
1e:72:85:92:e6:72:24:b3:ac:c9:fd:7f:3d:c7:58:8c:4a:40:
c2:5a:8a:19:f2:b9:30:24:ee:87:29:36:81:77:94:c5:15:a8:
d2:1e:e1:ca:64:e9:ee:fa:a3:a6:57:af:ee:2a:58:1b:75:7b:
ba:6a:7f:66:1f:df:e4:99:b0:2b:7c:bb:06:5f:d5:ff:31:fb:
10:57:78:3b:e3:76:7b:a9:03:bd:f6:70:d7:ae:d5:fb:37:ce:
4a:6d:50:8e:17:b6:e9:0e:e5:78:5e:6a:fd:f7:ea:cb:ac:6a:
67:90:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:49 2026 by rpki-client