Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
File: hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft (raw, json)
Hash identifier: Wgbx8W5g3O5y0pzEbml92qiyBqMcZTBu02/thgJTcaw=
Subject key identifier: 94:D2:34:7A:60:DC:C7:C3:CF:7F:BF:EE:36:AE:2B:45:3A:15:6B:DF
Authority key identifier: 86:58:AF:B2:BF:A5:1D:B8:E6:55:57:60:5D:92:25:1A:BC:5A:EC:CB
Certificate issuer: /CN=8658afb2bfa51db8e65557605d92251abc5aeccb
Certificate serial: 019D284D5A424D62BBF257AF78478E06C71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
Manifest number: 0A
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl (hash: dKt7723lepKxuWzv97O453NHJOIniuzBmY/9BVtwk7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5a:42:4d:62:bb:f2:57:af:78:47:8e:06:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8658afb2bfa51db8e65557605d92251abc5aeccb
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=94d2347a60dcc7c3cf7fbfee36ae2b453a156bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:b6:42:bf:28:10:85:a4:9a:03:eb:5f:4b:
95:f3:2a:3f:53:a8:c1:32:f3:1d:8c:bb:a4:47:4a:
cd:f9:b1:d1:13:df:da:93:ae:21:75:96:2c:15:7b:
e8:f0:26:f7:75:2e:e1:8b:3e:8f:30:e5:fb:e7:f4:
75:77:b2:d1:67:f9:03:e9:70:b9:dc:6e:32:c0:e6:
5d:37:fe:30:dc:04:24:fe:3e:7e:91:9a:38:69:c8:
fb:fd:e8:b7:aa:ca:8a:0c:7d:c3:7c:58:98:0d:25:
2a:1f:96:3c:78:e6:d9:3e:4c:9b:67:61:e6:97:68:
15:58:f0:92:63:cf:b6:75:8b:18:34:f0:43:84:85:
0f:ad:45:d5:b2:e6:8a:eb:cd:5a:c4:1d:f0:cd:18:
10:87:8b:74:42:ca:bc:c2:94:da:cf:fa:71:42:c2:
6e:7a:7e:fd:e7:d8:af:79:c6:10:da:1e:4b:93:69:
b4:95:f6:74:ad:72:96:a5:ee:aa:16:89:5b:ae:ab:
04:cf:ac:a8:02:47:08:21:99:7a:d9:8a:b1:be:dc:
62:15:11:95:18:f3:e0:7e:1d:d4:2a:2f:38:8b:20:
45:38:2e:45:58:29:ee:83:24:97:5a:56:f1:56:08:
5f:9a:72:ab:7c:99:8a:02:17:0c:ba:33:32:e9:2b:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:34:7A:60:DC:C7:C3:CF:7F:BF:EE:36:AE:2B:45:3A:15:6B:DF
X509v3 Authority Key Identifier:
keyid:86:58:AF:B2:BF:A5:1D:B8:E6:55:57:60:5D:92:25:1A:BC:5A:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:41:40:34:99:28:9e:20:b8:47:ac:ba:cc:89:9d:9a:2b:95:
88:07:9c:52:49:e9:11:88:14:40:50:22:4b:07:5d:a7:39:95:
5f:d6:79:30:2e:3e:f6:cd:cf:8f:42:d3:52:dd:a5:93:a3:05:
63:97:08:bb:6d:e4:09:c7:5b:77:70:3a:30:ad:f1:9c:fa:87:
84:65:8c:9f:4f:75:11:4c:f0:fc:93:23:7b:d6:bc:89:2a:7d:
08:7e:ee:3d:fd:fe:93:a2:10:3c:36:19:50:8f:59:65:47:4b:
6d:e7:37:66:1a:0f:9b:be:34:b0:5d:65:10:f7:00:9c:1a:87:
f1:be:d2:a2:49:a2:9b:01:d9:f9:31:23:85:67:9a:5f:9a:9e:
9b:6a:25:fb:5e:29:e8:14:cd:db:9f:e5:ad:13:c6:c3:e3:bf:
dc:1f:40:d4:53:1e:4b:54:be:a5:30:ed:1d:75:16:53:ea:b7:
99:a0:76:70:ff:e7:83:bf:fa:45:f1:5f:e4:07:1c:bb:84:7c:
cd:9a:bc:01:1a:58:c7:d7:ee:d3:1a:4b:61:ce:b6:3e:25:db:
12:b1:af:1d:84:8f:7d:2b:b5:3f:54:57:02:aa:63:bf:a6:07:
22:0d:ae:b5:f8:d3:d7:0d:32:5d:44:28:98:ef:fb:f1:d7:39:
94:c2:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:24 2026 by rpki-client