Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: MMPhY9QynNAT2QFhfS2g3x6iZlTDLboMoLBTQPFe6Sc=
Subject key identifier: E3:AD:4B:87:24:91:B7:43:DE:94:1D:7E:14:71:97:F7:98:4D:B2:B0
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019F93C8F7049A4003D35F79D8DB9526E909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 15E3
Signing time: Fri 24 Jul 2026 11:00:48 +0000
Manifest this update: Fri 24 Jul 2026 11:00:48 +0000
Manifest next update: Sat 25 Jul 2026 11:00:48 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: 9Di5YSc9dWUXgCYm1RnC332FsB4BtnD+q8BHLRri0p4=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f7:04:9a:40:03:d3:5f:79:d8:db:95:26:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Jul 24 11:00:48 2026 GMT
Not After : Jul 25 11:00:48 2026 GMT
Subject: CN=e3ad4b872491b743de941d7e147197f7984db2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:cf:ce:5e:86:e5:a2:11:b0:83:61:51:59:
57:cb:b4:eb:b4:85:cb:b6:83:a9:13:7d:41:55:ad:
89:32:3b:48:a5:0b:e5:79:78:cf:16:89:ac:09:ef:
3a:e9:af:f4:dd:50:68:1d:00:14:3e:14:13:33:23:
66:c7:23:28:29:5f:b8:ff:3b:26:d7:8f:22:44:2a:
cc:00:0f:b7:af:a1:e4:48:9f:38:db:7e:30:28:35:
0f:c5:5d:73:98:1b:6c:2d:6e:d2:64:0b:4f:50:d5:
d8:53:fa:92:7d:11:07:30:ae:f0:83:48:25:36:89:
1b:c8:d7:de:95:a5:d4:74:0b:42:b7:c7:8f:3f:10:
f7:50:cd:65:4a:14:3e:a7:cb:d7:08:d4:dd:7b:85:
a2:24:92:a7:86:49:3a:45:de:26:89:11:49:bd:60:
d1:9e:d7:89:80:b8:28:e7:1e:1b:f8:8e:85:0b:09:
74:20:4a:8a:a1:3e:7c:65:dd:66:93:f1:df:72:e5:
75:54:e1:29:75:48:a3:4e:43:4d:ca:8f:08:92:1f:
d2:59:ba:ec:d6:94:da:59:16:bc:98:d0:f4:aa:bb:
f4:ea:eb:38:d4:19:a5:c8:37:95:3a:06:63:56:6a:
b0:fd:60:88:14:f4:a9:be:b9:e9:b0:25:51:ce:9d:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:4B:87:24:91:B7:43:DE:94:1D:7E:14:71:97:F7:98:4D:B2:B0
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:63:dc:9c:e0:a3:9b:18:66:6f:6b:49:b2:84:a3:89:e6:
42:e9:24:81:9d:36:7f:4c:a4:14:90:c3:2e:d7:17:b2:18:24:
f2:f1:80:b4:ad:a2:1e:cf:fe:9c:96:4b:ea:17:da:c5:4d:03:
a1:3c:d3:d4:ff:7e:23:d9:de:ed:dd:d7:64:e2:9f:cb:2e:8c:
67:b8:45:33:86:c0:bc:e9:ff:97:64:38:aa:6c:ac:2c:49:01:
62:e0:71:dd:72:d1:ac:89:a4:97:8b:ae:6e:a7:a3:4f:1f:e2:
cb:46:2c:fa:e2:68:a1:24:cf:ed:72:9e:55:63:9f:a9:21:86:
1c:3d:a7:43:d6:f2:68:b6:cc:50:8d:a3:1b:d5:fc:d2:be:d8:
9d:78:64:18:d5:44:9b:46:ab:cd:82:92:c3:67:31:f7:50:8e:
0f:ed:6a:cd:01:92:eb:fd:99:fe:7a:88:5b:a7:d6:88:2a:fd:
ff:27:02:a4:65:12:72:35:0b:19:41:5f:73:77:c8:68:7e:9b:
1b:f5:65:bc:7f:d6:62:ed:57:89:ab:8b:f5:f5:e5:ba:a1:65:
1f:03:f7:93:43:d0:5a:97:10:97:8e:21:22:fe:94:a3:63:c6:
70:dc:c5:49:b3:20:8f:f6:a3:9a:fa:8e:91:4c:ff:7c:ec:34:
bc:b6:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:52 2026 by rpki-client