Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: ZckHJ9F+LMM+4bck7BOZu03VkXo0ehpcds7sLRlpSgw=
Subject key identifier: 11:0B:35:85:1A:B8:66:A9:B9:F4:C1:6A:5D:C2:89:ED:BD:02:65:89
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019D27E035140D7255F4902C9E5CD30A2223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 14A2
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: tPC/87HsFT+w4jf+QS7AtaTChtTc+HbKFNxNQVXKMk4=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:35:14:0d:72:55:f4:90:2c:9e:5c:d3:0a:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=110b35851ab866a9b9f4c16a5dc289edbd026589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:dd:dc:32:86:99:0c:57:e3:a8:3a:9e:5d:
af:d2:35:36:43:7c:67:ea:a6:90:42:fb:64:85:84:
d8:68:68:bc:92:48:5e:62:5f:63:a9:5e:13:59:2d:
a6:2c:10:f3:d9:b2:4f:18:50:5b:f0:77:f6:ea:79:
55:b5:d3:07:26:a0:73:11:49:5c:56:4a:b7:37:34:
6d:80:61:da:f0:85:8e:02:37:ff:88:bb:8b:5f:2b:
48:c0:3c:32:07:63:53:a0:07:64:6d:64:21:c6:2f:
4d:f1:43:da:54:6b:6e:b6:38:4a:1b:77:f9:f6:6b:
d6:0a:dd:65:39:29:c6:5a:82:58:7e:c5:7e:f5:62:
86:79:d4:7d:bc:77:9f:ed:f1:d8:17:b9:16:a2:99:
39:67:4d:0e:3a:48:d9:e8:81:46:69:b3:d4:44:c4:
24:e5:f4:db:7c:1f:a4:2b:e9:6e:2c:46:3a:58:d0:
2e:b0:08:75:2d:f7:d5:c5:92:ec:af:24:67:f7:65:
d2:12:8b:3f:9c:67:c1:d1:29:4d:4d:d8:cc:a7:67:
cf:cc:13:55:f3:48:04:21:ea:78:11:0d:1f:07:85:
f8:94:9e:ff:62:f4:4e:22:12:bb:33:fe:75:f8:a0:
c1:e5:cb:be:91:7d:dc:cb:aa:85:45:de:35:36:4a:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:35:85:1A:B8:66:A9:B9:F4:C1:6A:5D:C2:89:ED:BD:02:65:89
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c3:1d:cd:c1:14:81:78:c3:17:83:49:bc:46:d9:9c:2e:1f:
e8:0a:56:3f:d9:3c:eb:e7:09:ef:8a:fb:25:02:ed:11:39:2a:
c2:ab:55:68:05:83:5a:29:2b:d4:2d:83:90:7a:5a:19:ee:ea:
6e:47:f7:87:62:2b:b4:1d:8c:eb:7d:f9:b3:e3:30:8c:23:0e:
21:81:db:30:cc:41:0e:25:25:57:4d:d6:ea:b3:7d:2e:61:25:
87:fa:39:a2:7b:10:d7:2c:49:fd:ee:92:4c:65:93:6b:0e:e9:
80:96:00:0d:fe:37:b2:0a:44:ae:5c:52:0b:81:b8:e0:48:e9:
c7:3b:dc:26:ee:a0:9e:6f:bf:df:5c:bf:6b:65:8b:81:38:64:
23:7e:ca:e1:bd:4c:4c:c0:63:c1:d0:c3:8f:ff:0d:1e:e0:9e:
0a:e7:06:c1:6b:5f:b7:55:4f:ca:ee:1c:0b:92:3b:86:7e:81:
c8:d4:db:8b:6b:70:13:a1:f1:d1:1a:88:0c:83:92:9a:b5:49:
ed:4b:e8:dd:56:63:da:eb:08:7a:8c:58:06:63:34:93:d9:74:
50:3c:d7:4c:ab:94:e2:5d:a8:ed:f6:87:de:42:62:cf:05:2f:
1b:14:ea:91:2b:94:9d:f7:19:ef:7f:b4:f4:ba:ed:c3:1d:c3:
ce:64:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:58 2026 by rpki-client