Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: Zj8V/PGiyB34Pj3CZaucAyUDzCEtTKrIKWiDl0/TytY=
Subject key identifier: 72:4B:23:93:11:85:D9:26:5A:94:3E:BC:BC:1F:8A:07:D0:3E:52:71
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 019F905AA8FEC7937773A47971C7B054CC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 195B
Signing time: Thu 23 Jul 2026 19:01:28 +0000
Manifest this update: Thu 23 Jul 2026 19:01:28 +0000
Manifest next update: Fri 24 Jul 2026 19:01:28 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: TJCGJq0QAbNfQl0GHcqpllhjyR7RZ3hclqajjUA2tgU=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a8:fe:c7:93:77:73:a4:79:71:c7:b0:54:cc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jul 23 19:01:28 2026 GMT
Not After : Jul 24 19:01:28 2026 GMT
Subject: CN=724b23931185d9265a943ebcbc1f8a07d03e5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:fd:8a:73:23:d9:34:07:ec:f1:4d:15:8f:
9d:3c:ce:59:b4:95:90:8f:aa:35:6f:72:49:7f:66:
d2:89:f4:19:f2:1a:66:e0:5a:71:b3:45:d5:41:4a:
f8:45:8e:82:5a:36:a3:2c:4e:60:9e:40:29:bc:7a:
0d:cb:8b:e2:77:a3:16:d2:06:7d:a4:78:b8:e6:75:
70:20:4a:68:0c:fa:34:94:59:14:2c:06:9f:aa:ee:
15:d4:39:79:2f:fa:0b:73:15:21:23:fb:fa:d3:f3:
27:f4:6a:33:71:5c:a7:38:f4:1b:2d:d0:99:a2:b0:
62:ee:1c:43:78:d7:df:62:96:48:15:75:ef:ba:ee:
7b:6c:20:bb:b7:fa:a1:9b:d1:f1:73:4b:e5:6b:98:
ad:ad:a6:ea:cc:56:0d:13:63:65:55:85:68:25:b1:
80:41:92:d2:36:5c:99:3e:8e:cb:59:49:61:3f:3e:
ed:02:03:cc:09:1d:87:dc:e6:96:2d:b3:c9:5f:1b:
e7:02:5b:0f:04:02:54:3f:01:56:6d:63:91:63:04:
65:94:1c:72:83:c3:f8:6d:14:e9:81:a1:02:f8:f8:
cb:9b:42:16:3a:c9:b0:7b:32:5b:1a:02:f5:7c:34:
60:59:20:82:25:42:f2:b3:25:2c:01:3b:bd:32:ae:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:23:93:11:85:D9:26:5A:94:3E:BC:BC:1F:8A:07:D0:3E:52:71
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:cb:04:a3:0a:83:b2:b2:fa:06:86:33:b6:7f:bd:22:aa:
55:65:a3:d8:05:96:1a:df:43:ca:c2:d1:e9:39:e2:d1:2d:1e:
10:8e:8f:f5:c2:7f:a1:b8:96:83:b3:8d:a8:5e:55:09:b0:c4:
c9:f0:7e:ef:04:72:60:48:30:60:0c:f0:1d:68:07:15:b1:79:
57:6b:20:55:7c:08:c5:17:34:17:36:a6:d0:53:8d:94:4a:a4:
fb:0b:28:fd:a7:43:c0:69:39:64:b7:df:b3:d3:75:6e:bc:99:
a3:be:5f:b6:6f:73:4e:12:88:01:05:03:15:63:47:0c:b9:54:
c3:87:ec:24:33:96:aa:06:d8:47:0b:a3:cf:30:76:7b:bf:1e:
c1:d8:2f:98:04:bd:d8:e0:67:0b:71:6d:99:2f:cf:75:35:2a:
0a:d9:1a:52:ff:e0:01:30:8f:47:1e:8f:dc:6f:33:74:be:58:
9c:4d:4e:21:ed:dc:ae:6a:f4:6f:fb:9f:a8:8c:b3:36:c0:09:
a3:31:f8:96:3e:81:cb:bd:cd:1c:cf:1f:53:f5:bd:39:e2:dd:
22:d1:11:f1:de:bc:01:69:24:a7:65:9a:9b:2b:08:c1:bd:4a:
43:ab:95:99:bf:64:5f:3b:61:48:5e:ad:f1:12:5f:59:30:ac:
94:1c:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:14 2026 by rpki-client