Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: T/UP0+BxacO2s7hVfSioXZ14M3gWKSfbE9+iaA9S6Js=
Subject key identifier: E1:89:89:8D:E3:0F:AF:F9:03:61:CA:59:C6:B2:CB:AE:62:FC:31:32
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 019F91DAE171CF34903204ACDE3639B43501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 03BB
Signing time: Fri 24 Jul 2026 02:01:08 +0000
Manifest this update: Fri 24 Jul 2026 02:01:08 +0000
Manifest next update: Sat 25 Jul 2026 02:01:08 +0000
Files and hashes: 1: F6Ed_v2GXlo2fPW9wme1LoJTt5Y.roa (hash: PVB5gLKN9XpK2cpVIIGfT9xr8RhREdDb3biV7KQ2JYE=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: rl6ruqvq2pH/iyzbxGKL6ejZQf/c2jYK6mz7paUMOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e1:71:cf:34:90:32:04:ac:de:36:39:b4:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Jul 24 02:01:08 2026 GMT
Not After : Jul 25 02:01:08 2026 GMT
Subject: CN=e189898de30faff90361ca59c6b2cbae62fc3132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:26:fc:ac:c6:f4:aa:a2:d9:11:be:7e:07:
b4:5a:51:97:99:7c:dc:a4:38:66:e6:43:8a:d4:ff:
3a:1f:c3:d0:e9:5a:6f:cb:34:4c:71:e2:44:ff:35:
35:36:75:df:7c:04:51:0c:38:ec:b8:33:d8:46:38:
b3:46:de:6d:9b:c4:e7:21:d9:b0:b3:14:63:fe:3b:
0a:44:4c:be:ab:82:e1:1e:5d:59:c3:9c:84:79:c4:
e8:a1:0a:32:75:bb:4e:b1:55:96:0a:2e:8b:12:ca:
c3:59:3b:87:9d:2c:d3:6b:3c:24:2c:40:84:dd:1e:
2f:11:1a:0c:a4:17:1c:3e:f5:53:65:4b:1d:66:b3:
42:3f:f4:0d:e7:8e:06:d8:6f:c3:b7:c4:28:51:6d:
dd:e9:c2:fc:cd:b6:52:0b:f0:0c:be:17:2f:04:36:
99:9b:56:46:74:3b:df:ef:8c:70:8a:14:6e:12:35:
13:19:b5:3c:d5:17:60:40:2c:77:4e:5e:4b:68:89:
43:aa:7c:81:32:82:cd:bb:08:d2:81:83:7d:31:f4:
e1:88:7f:c8:d6:11:7b:e9:3e:56:50:9b:24:65:2a:
70:56:9d:6b:75:31:70:8a:bc:df:90:f7:b9:3c:b1:
99:35:28:e0:7a:9d:e9:4e:dd:8b:d4:1c:56:a3:9f:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:89:8D:E3:0F:AF:F9:03:61:CA:59:C6:B2:CB:AE:62:FC:31:32
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:d0:09:cf:62:65:4a:44:3e:7b:99:91:42:27:fa:dd:e4:
92:eb:2c:76:47:17:81:6b:1c:84:b2:80:8b:77:34:f5:e7:bb:
96:e2:da:22:71:60:a9:77:0d:b2:6d:0f:2f:00:95:15:34:8a:
d0:28:eb:45:1c:f1:13:a4:fa:ce:7c:b8:0a:bc:12:8d:85:c8:
77:92:c4:49:2b:13:bd:07:d6:a6:f5:9e:74:f0:26:9a:8b:d4:
52:32:3d:c6:4d:38:0c:2b:16:74:a8:e6:48:bf:25:69:b5:1a:
29:01:3b:a1:78:bf:33:03:a5:59:2e:15:f1:e3:13:7d:24:3c:
40:4d:10:8a:a0:c0:c6:be:7a:2a:b7:26:76:6f:13:bf:c2:0f:
f3:97:0b:67:bd:62:8c:a6:aa:9c:49:e8:32:27:64:7a:dc:9e:
f8:78:d0:a0:0d:62:b7:98:fc:f7:be:d3:3f:5d:59:15:36:8a:
10:47:c3:1a:34:41:44:0f:87:19:a9:52:e8:7b:a5:bb:6f:6a:
72:7e:2a:85:0e:00:da:4f:48:9e:02:28:a9:b2:ac:f0:14:a4:
db:4d:4d:99:ac:95:94:af:d1:98:60:28:7b:39:0c:7e:33:e6:
6b:2c:9d:58:37:ad:de:cb:27:91:13:d2:2d:fc:35:ac:c8:8e:
6f:f5:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:06 2026 by rpki-client