Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: 1Ps/JFjoo4/BbVEKQz3N9DNGiQ9PvdsdWJKrsP+MQ+4=
Subject key identifier: 24:54:29:7B:6A:28:38:E4:E5:F0:EE:43:EF:E5:AC:FD:80:CB:AA:4D
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 01A0D8A8CD8C46A4D3C08F309A2F4CA85EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 1A05
Signing time: Fri 25 Sep 2026 13:02:16 +0000
Manifest this update: Fri 25 Sep 2026 13:02:16 +0000
Manifest next update: Sat 26 Sep 2026 13:02:16 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: FQV/pUzmHH+d3raS/qcKyjF6tMBrY8POggmW7/4Ey5Y=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:cd:8c:46:a4:d3:c0:8f:30:9a:2f:4c:a8:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Sep 25 13:02:16 2026 GMT
Not After : Sep 26 13:02:16 2026 GMT
Subject: CN=2454297b6a2838e4e5f0ee43efe5acfd80cbaa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:7c:4f:a9:aa:6b:2a:75:a2:bb:4b:f2:8a:
ff:04:e5:63:fc:55:d0:d1:0c:bf:ab:76:72:32:9f:
d6:8d:25:e6:43:60:cb:3f:d3:bd:ec:af:e5:f8:cd:
d4:65:91:12:80:77:9f:7e:2e:a7:37:cf:45:73:27:
a0:50:5d:21:be:2c:d7:ca:21:16:c2:eb:21:a7:99:
65:de:79:5c:a6:56:3d:ca:9c:76:fd:28:6f:58:9c:
4b:6a:cc:c7:73:06:49:c9:0b:53:f8:4d:9e:af:25:
a1:6e:6e:48:9c:8f:1d:1f:90:b5:3f:7e:e4:fa:fe:
75:c3:02:53:1c:80:08:39:fc:86:12:9e:71:50:0e:
1b:be:69:f3:03:66:62:6e:d6:ba:54:35:aa:a5:1f:
31:da:f2:f5:2c:2d:c8:6d:45:27:5d:07:e1:b2:81:
f3:46:5e:d3:ed:d0:66:86:2c:a7:fd:3b:e9:4e:b7:
05:e4:f1:18:99:26:dd:0b:0c:19:9d:79:af:a0:03:
31:c8:47:85:eb:a9:db:f7:38:87:e1:ec:44:e2:88:
4c:6d:87:60:ae:80:fb:53:8e:db:93:0c:eb:f8:00:
00:5d:13:bf:4c:c6:d9:3e:b1:97:e4:92:c0:e1:2d:
38:dd:93:77:e4:88:5e:bf:a9:2c:00:a4:9f:08:44:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:29:7B:6A:28:38:E4:E5:F0:EE:43:EF:E5:AC:FD:80:CB:AA:4D
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:cc:c4:70:bd:04:0a:66:27:73:ed:4a:ec:96:60:c5:6b:
d4:8b:8a:8d:82:77:35:06:4a:d3:1a:05:75:dd:2c:b8:a9:a3:
7b:0c:e7:93:2e:d8:53:ef:59:ea:9f:1b:47:37:06:83:50:a6:
2a:db:f4:19:d3:b1:7c:ca:63:00:b9:26:f0:b6:a9:07:d8:de:
e0:66:1d:a8:17:d9:22:ff:ac:86:ab:75:42:3f:27:f6:cb:e3:
75:80:c0:16:97:a9:e2:cd:9b:e1:a8:e4:a9:47:e9:41:4a:d0:
92:31:22:ba:37:e7:53:30:88:15:2b:5b:56:59:4e:a2:18:39:
9f:19:c1:a1:46:a7:13:98:ae:05:e7:80:69:a6:36:f5:49:8f:
c2:ee:63:86:ec:6d:12:e3:01:e9:3c:2c:cb:23:15:e1:89:10:
58:4e:10:3e:20:f8:f1:fa:f5:93:50:83:e8:35:14:43:7d:7c:
1b:72:3a:6b:9a:70:96:d3:fd:b7:d7:c0:98:90:4b:f5:5e:bb:
6a:8f:52:46:1b:ef:51:bc:ac:f6:4d:1d:c4:b7:e9:a6:24:41:
6d:79:2a:bb:09:69:cd:c2:81:04:5c:3c:1c:74:75:92:45:95:
87:5a:d3:1b:e5:40:b6:c5:3f:9c:dc:56:e0:11:34:b4:b1:1b:
36:21:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:34:01 2026 by rpki-client