
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: acxbqgRVYT4gdh/P6FHTbiwwqrqSZxlEINCAa7aMKLY=
Subject key identifier: 3D:41:01:DB:75:AB:14:1C:C3:18:C7:9C:38:8A:74:B9:C7:93:3C:E1
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01A0DACD080372B243E97726DAB443C34E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 12FD
Signing time: Fri 25 Sep 2026 23:01:04 +0000
Manifest this update: Fri 25 Sep 2026 23:01:04 +0000
Manifest next update: Sat 26 Sep 2026 23:01:04 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 1ofhyefCmDmn2yBb0nO6tNM1unhDUWc0Lo5FGwUS+64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:08:03:72:b2:43:e9:77:26:da:b4:43:c3:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Sep 25 23:01:04 2026 GMT
Not After : Sep 26 23:01:04 2026 GMT
Subject: CN=3d4101db75ab141cc318c79c388a74b9c7933ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:fd:80:f7:57:74:b4:ae:0c:94:43:9b:92:
71:67:8a:73:10:f5:8d:69:23:6a:a9:63:e7:0b:68:
5f:05:40:37:65:cc:7b:d8:fd:20:7b:75:25:cf:55:
47:4c:ee:3a:14:8f:f0:a4:36:e4:f2:96:5a:33:5b:
d1:d1:b5:09:71:83:9e:8f:91:2a:ee:37:d8:51:51:
2d:2d:2d:5a:eb:0d:db:b6:0a:1e:0f:1e:ae:b6:26:
9e:5a:67:eb:e4:b5:3d:ed:cd:07:e8:72:3b:97:29:
a4:59:c5:3f:ff:8d:d4:a3:48:ee:43:59:71:99:43:
66:e3:14:3d:cc:57:1e:82:61:30:88:1b:d8:bb:ed:
db:26:23:92:d4:4c:49:8c:b6:38:7d:2e:4f:2e:88:
75:dc:08:d1:b8:13:ad:9a:1c:3e:6b:a4:52:b1:bd:
ca:49:fc:0c:f1:45:f0:8f:07:11:dc:99:8f:24:b9:
bc:88:7f:41:63:a8:8f:e7:2d:b3:d1:1b:52:cf:eb:
df:ce:c4:07:17:2a:40:e5:7b:f5:6e:9d:c4:bf:59:
24:79:3f:b0:a8:40:10:89:44:37:3d:10:bb:f9:fa:
88:73:8b:c7:9c:7e:d4:fa:a2:df:20:a3:c6:11:35:
02:a9:a4:87:49:cc:3c:75:87:45:06:33:34:2c:74:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:01:DB:75:AB:14:1C:C3:18:C7:9C:38:8A:74:B9:C7:93:3C:E1
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:1b:56:8d:d0:e1:36:4e:d4:a6:bd:7e:b4:69:e4:a1:54:
cc:9a:61:2f:d7:86:c1:c2:b3:87:45:b5:75:47:e1:37:6d:f8:
e6:e2:ef:db:80:a2:08:46:e4:e0:3e:86:9a:2e:38:12:53:41:
95:9d:8f:13:8e:74:03:4d:3d:db:91:c0:a4:66:cc:eb:20:97:
43:94:65:31:31:86:16:5e:06:64:51:2e:b4:83:53:af:95:f8:
c6:58:77:75:bf:60:f3:22:cd:c0:19:af:df:8f:24:d7:13:ef:
e3:d6:c8:40:38:8e:63:07:c4:75:02:cb:4a:c4:ce:5d:68:cc:
d0:70:73:e8:e5:af:4b:e8:43:7f:87:d1:c3:5c:b1:ee:e9:e8:
bf:60:6f:48:23:02:43:a5:9e:60:8e:a7:e1:18:09:bc:3a:46:
f2:4d:bc:17:27:9a:63:21:78:ad:b9:3e:b1:21:90:3d:5a:76:
4c:fc:e0:85:8c:22:48:aa:c6:4c:eb:2f:e0:c6:89:60:d2:8e:
db:5c:3c:2a:41:6f:6d:13:46:19:26:12:8f:b7:42:3f:77:97:
85:7c:90:70:60:3c:d9:03:c3:53:63:5a:23:04:d8:2c:ff:e0:
79:86:44:23:1c:a5:61:2a:fc:25:59:33:e7:8d:f4:b5:ef:0b:
06:40:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:38:11 2026 by rpki-client