Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: 2M9vFiR0hWs5YJ++V3KC44kOsPCvTZ4gf0ehw/kMXWk=
Subject key identifier: 64:9C:69:3A:77:2F:9E:4A:E0:5C:D3:FD:E0:48:D5:1E:33:C1:4A:1B
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 01A0DB042A6DE1765A9AB117522EC4E2C7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 0467
Signing time: Sat 26 Sep 2026 00:01:18 +0000
Manifest this update: Sat 26 Sep 2026 00:01:18 +0000
Manifest next update: Sun 27 Sep 2026 00:01:18 +0000
Files and hashes: 1: c-6Hu0Q6KVByexb7ai3zy809xac.roa (hash: veDFchcM2SNVuwzCbLkM0CwAD1EuPwvwRgb+dufQVR4=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: BseT9XXp68+3G6BumGv2Xjk9nn5A3iUuFfpi3MHluYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:2a:6d:e1:76:5a:9a:b1:17:52:2e:c4:e2:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Sep 26 00:01:18 2026 GMT
Not After : Sep 27 00:01:18 2026 GMT
Subject: CN=649c693a772f9e4ae05cd3fde048d51e33c14a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:90:b0:4b:6a:79:b1:ad:f6:22:d8:80:69:
26:b2:91:ea:d7:69:1e:96:09:0e:ec:44:41:6e:44:
5d:cd:5d:19:f0:17:ab:d3:3c:1c:13:85:4c:34:7e:
78:fb:c2:7b:29:92:08:5a:82:6c:f5:13:51:66:eb:
52:ee:72:6e:04:56:39:4e:60:f0:98:62:0f:77:3e:
5c:27:c0:cf:46:ab:f2:22:69:50:38:90:a0:bd:9f:
c4:a0:0c:85:07:b4:a2:e9:c5:f3:32:7b:8a:5c:a8:
ae:f0:de:ac:9e:e6:38:03:06:3f:49:32:61:9f:37:
07:47:c4:f9:44:70:8b:a0:c6:e3:f9:1e:97:c3:3f:
59:5e:80:b7:95:06:86:1f:28:a1:a2:de:59:a3:50:
ed:e4:ed:7f:85:a3:a1:4a:a8:cf:a1:20:22:ce:c1:
37:c3:df:9e:1a:e7:ac:1d:59:b2:68:b8:51:8c:b2:
c7:4b:ee:d5:12:76:da:26:bb:87:0a:b0:1a:36:00:
d6:4d:5e:34:b7:b6:49:0b:07:10:1e:a6:8e:7e:2d:
0f:88:e7:8e:78:0e:c1:7c:34:2b:c8:7b:55:d2:86:
ea:d3:da:9b:80:42:29:ba:5f:38:fb:ca:26:c1:a6:
f7:07:d4:42:15:1f:91:8f:c7:15:b1:a6:97:ed:e0:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:69:3A:77:2F:9E:4A:E0:5C:D3:FD:E0:48:D5:1E:33:C1:4A:1B
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:51:84:27:c2:8d:f7:0a:f6:75:a1:01:a9:3d:2e:ac:a8:da:
5e:32:d1:da:6b:52:9d:d5:23:31:8e:72:ee:f1:df:64:d3:57:
04:79:37:86:74:5a:d1:5e:74:24:0b:9e:02:6b:e9:ba:db:d0:
15:9d:46:b6:be:8b:21:23:59:d6:fa:2f:47:73:48:5b:b9:e3:
a9:07:ff:44:fc:77:87:71:ab:f9:de:6a:d4:b9:6c:18:56:04:
08:7d:d3:a4:a7:36:e3:2b:83:9a:4c:8a:4d:8a:4f:c7:b6:76:
4b:11:87:9a:f2:4f:6b:7c:ff:7c:30:17:c3:ed:fe:33:9e:fb:
4a:54:31:20:92:62:e0:f3:9b:91:35:18:f2:98:86:41:49:a0:
0c:75:d7:96:f3:d7:33:ac:18:75:6f:48:c4:e9:87:df:83:ff:
0f:f1:05:35:d5:1e:f8:60:05:1d:e7:48:32:26:3d:c7:5d:fe:
84:89:97:a8:34:9f:36:61:ec:7c:7f:f2:af:d1:a2:ec:6d:4c:
8e:ae:79:d7:dd:6c:42:02:9a:49:55:45:bd:c2:ab:1d:ce:b3:
6c:90:68:21:73:26:24:b9:ff:a9:9b:54:4c:c4:e6:3d:f4:5d:
fd:52:2c:71:01:95:7b:3c:75:32:7c:ff:92:ca:23:cc:3a:d8:
84:0d:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:33 2026 by rpki-client