Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: 0PlLWscdKND6LvFACqShMmPdi5qbDkZCz+N7HGD8hC0=
Subject key identifier: BF:20:8A:7A:A1:F1:BC:2C:E9:7C:87:A1:29:6C:67:48:73:DF:E2:B2
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 019E1F7F69FDA32E0E2BEF365FE0C819936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 189C
Signing time: Wed 13 May 2026 04:01:44 +0000
Manifest this update: Wed 13 May 2026 04:01:44 +0000
Manifest next update: Thu 14 May 2026 04:01:44 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: JLUAKBgNPPV1Cg5ajhtmrC+nlMq9TARLG/gO5Wib9V0=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:69:fd:a3:2e:0e:2b:ef:36:5f:e0:c8:19:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: May 13 04:01:44 2026 GMT
Not After : May 14 04:01:44 2026 GMT
Subject: CN=bf208a7aa1f1bc2ce97c87a1296c674873dfe2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:ee:41:bd:eb:0b:9f:ed:74:71:74:63:d5:
fd:be:9f:c8:1b:98:f5:5e:91:08:e8:9c:25:14:65:
0d:f9:51:43:02:62:78:68:a3:8d:7c:a0:22:86:38:
c9:68:f0:db:49:bd:c1:40:4b:b3:43:02:cc:15:3d:
9e:4a:2b:d1:d1:02:94:8b:01:0f:f4:f3:a6:26:1e:
23:eb:93:bc:8b:57:0a:e3:23:0c:c0:85:25:7c:ff:
d4:56:ec:4e:1c:f0:75:21:12:b9:04:cf:89:e5:f2:
96:55:df:0a:3d:79:ef:1d:a3:62:1d:b0:76:5a:c4:
5a:d2:f6:61:09:23:a3:6d:62:79:57:23:04:d2:4a:
95:c9:4c:c4:70:c9:f4:73:b5:a9:11:8a:ed:01:ad:
e4:32:b7:ec:1a:d0:c8:a0:4b:fe:ea:3e:2b:3d:25:
b1:6f:e2:24:70:df:71:b6:df:c5:e3:f4:ec:cb:fc:
2c:a1:2c:ae:b4:f0:99:a8:04:b2:cc:47:3e:7a:42:
af:0e:de:b1:ab:a5:46:60:87:74:69:3d:a6:d8:89:
81:c6:f2:18:71:fb:b2:a0:68:31:6c:15:8f:4b:24:
d9:f7:1b:ed:a2:ef:b7:9c:80:d0:b6:d1:d9:18:b0:
24:19:1e:2f:f9:e8:c1:d4:27:08:00:1c:7a:f4:ae:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:8A:7A:A1:F1:BC:2C:E9:7C:87:A1:29:6C:67:48:73:DF:E2:B2
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:aa:b4:8f:fb:46:f7:fd:01:79:5b:04:2f:d0:4f:b4:4b:
c7:5a:f4:59:68:fc:9b:58:3d:94:a3:1e:ef:c7:a0:53:79:8a:
a6:c3:1f:4e:ad:29:68:6b:28:39:b7:28:54:1c:48:36:e9:29:
c0:95:9e:c9:8d:0a:aa:aa:1c:1d:2a:e1:76:87:4b:38:7d:31:
b7:05:a6:fd:81:26:c5:6a:2b:8d:8c:e0:71:22:5c:eb:74:0c:
fd:1f:df:a4:49:0f:ee:3f:04:53:9e:dc:d1:8c:40:a6:a1:2c:
93:b9:cb:12:59:91:35:e1:f7:68:17:f8:6b:94:93:03:02:46:
24:b1:27:39:6c:8f:62:01:5a:ce:b1:a6:6b:c8:de:15:0c:8a:
35:c5:5f:16:bd:9d:59:d1:88:ca:76:bb:37:74:c9:ce:9b:07:
cb:38:b0:84:62:4d:29:8b:0e:1e:f0:c4:4c:e4:c1:e7:13:c5:
93:a7:90:52:bd:3f:52:3c:82:e7:f8:23:4e:4f:d6:ba:d9:da:
f8:00:94:af:e7:f7:d2:4a:e9:14:6a:d9:e1:63:67:41:bb:2d:
bf:a8:39:de:a6:2d:23:a7:17:ee:4b:dd:ac:85:08:23:5b:56:
c1:2e:6d:53:ed:03:74:85:64:7b:74:08:65:80:1a:6d:22:36:
e5:57:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:18 2026 by rpki-client