Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: iMMjA90sBz9N/HH6+5Zg70eAJjQMUv0Mi6XZRXFrVUo=
Subject key identifier: B6:13:57:21:26:A1:CB:C2:62:D6:DA:EB:E7:29:55:57:32:4E:E3:C2
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 019D288458E077F7B4DAA586AAE0D73258E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 1113
Signing time: Thu 26 Mar 2026 05:00:55 +0000
Manifest this update: Thu 26 Mar 2026 05:00:55 +0000
Manifest next update: Fri 27 Mar 2026 05:00:55 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: aYyP+yJBGUMmEPJsM6d9on6/d6touj63vK0tZQYmXwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:58:e0:77:f7:b4:da:a5:86:aa:e0:d7:32:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Mar 26 05:00:55 2026 GMT
Not After : Mar 27 05:00:55 2026 GMT
Subject: CN=b613572126a1cbc262d6daebe7295557324ee3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:af:ec:27:19:d4:74:25:fd:fb:e7:db:5e:
98:85:8b:d4:b9:42:4b:64:5f:b0:15:b5:75:e2:d0:
a9:2e:f7:56:91:82:28:d0:d8:a3:35:3b:18:33:f8:
2b:95:ed:9a:77:f3:eb:be:04:1b:dc:28:91:96:32:
4b:38:5f:fa:29:bd:42:97:bd:3f:f6:88:ee:ca:ff:
0f:a8:d1:b6:84:fd:6b:81:fd:7a:da:6e:00:db:f0:
60:3b:99:39:ac:02:df:1a:e7:cf:d4:02:3c:2d:a7:
96:ae:ab:4e:ac:21:e6:61:8e:d4:70:e6:d5:34:a7:
ed:be:69:80:1d:2c:59:e2:7e:a9:df:ba:fd:b6:31:
8c:7d:65:02:aa:a6:b7:db:33:d0:2e:e5:33:06:09:
3c:fe:27:77:71:08:df:61:92:98:30:fe:99:1f:e8:
f9:d3:e8:b2:b9:77:14:a6:e5:06:28:e9:96:db:d4:
ac:90:76:58:0f:0a:8e:84:cb:38:e5:27:6c:35:15:
3d:9d:6f:58:cf:ef:4e:d3:95:70:4b:d7:1e:4a:f6:
99:03:d6:b4:b9:42:88:27:0f:c2:51:d7:34:9e:51:
7c:88:63:55:cd:88:e3:91:52:8d:47:d4:f6:f0:cf:
b9:b1:2f:8a:35:06:e4:a7:48:97:26:7d:b8:11:91:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:57:21:26:A1:CB:C2:62:D6:DA:EB:E7:29:55:57:32:4E:E3:C2
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bb:1a:f0:52:5b:a3:35:6c:8b:a4:ff:03:db:bd:74:02:f8:
a0:fb:76:e1:ae:d5:fd:f2:c5:ff:42:fe:4f:35:e0:9f:c5:39:
e3:c4:d4:be:22:60:96:c4:03:6d:77:35:1f:dc:99:83:66:9b:
1b:f1:81:2f:68:66:d3:2b:97:fc:a1:ab:eb:41:db:52:af:65:
21:1b:9e:93:3b:c2:c6:cb:ee:69:64:5e:a2:e9:94:3f:8d:cf:
fa:43:6a:7f:61:ee:4a:50:ba:08:aa:29:4b:e5:f1:50:e6:72:
75:52:01:1b:8e:a2:bd:28:54:60:56:69:31:5f:af:6c:51:70:
60:cf:55:70:e2:54:3f:e7:89:74:eb:2e:e3:28:8f:69:65:2d:
81:cc:c1:3b:0f:28:43:fb:7b:85:78:bf:27:6a:f4:c0:1d:ad:
61:ca:39:23:0c:6d:59:e5:17:08:9e:e3:45:2e:94:ba:d4:6a:
bc:ee:67:c8:b9:89:0a:a5:8f:a0:e0:01:f6:8e:e4:d7:7f:6e:
29:f0:b9:d4:b1:83:07:d2:c5:41:d4:e5:71:64:9b:1b:ac:50:
f1:6a:10:d9:64:f6:5d:40:da:4c:e8:0a:42:03:bd:aa:81:8e:
9a:30:0d:48:c1:0b:a7:57:0b:02:9b:a9:bb:de:11:f9:9b:dc:
d9:fa:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:57 2026 by rpki-client