Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: 2QnxHPlfgsp1Lw7JyIzmdTHm26MTmUEvoGNAB9JrRgE=
Subject key identifier: CA:04:B3:0F:AA:DC:F3:9B:5B:A8:E5:9F:48:6F:00:E1:7C:E3:33:45
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019D26CD634F3875681A958AF4C856E62076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 0C4E
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: DQldJHo0lNBqmhiYe1nJpdidwMYOpk7dJy0a4yMVIf8=)
2: LTXISUxPHYR9FIoNK22-mMEgcIo.roa (hash: 5U15BoyOR1vbWtgd6weIYrRThFJ7bGLw/lOyq6iWyFA=)
3: yAHDJdh6TZDYQNe65Bbps1iPzTk.roa (hash: 5IpdbJAl2pBKTXogrAl7O2M9edHwJaiAiuSdMux7Juc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:63:4f:38:75:68:1a:95:8a:f4:c8:56:e6:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=ca04b30faadcf39b5ba8e59f486f00e17ce33345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:3c:64:55:5b:8d:da:37:e0:07:92:bd:5f:
bd:df:10:3e:fd:fd:2d:f8:33:5d:28:76:99:ab:3b:
c2:85:9c:ce:ca:94:ef:dd:76:d8:60:0d:6a:3a:20:
77:28:b2:66:d7:88:30:a3:8f:82:4b:70:e8:72:e9:
06:34:5b:9e:43:2e:41:7d:6d:f2:27:b2:e9:77:5f:
6f:d3:f6:1b:ec:4d:23:98:4a:08:c3:22:3c:7b:e6:
4b:af:d6:a8:9b:24:c8:ef:d7:96:14:b9:d5:11:55:
ec:21:a9:b3:77:01:e3:f6:c3:4f:ee:14:7c:3a:9b:
e1:32:b6:36:8b:57:17:61:a5:aa:98:aa:cb:57:37:
3a:16:7b:d2:e3:3c:68:1b:7d:35:8a:4b:f5:b1:4c:
3c:f4:0d:d2:e2:5e:1e:f0:24:fd:dc:5d:02:9c:0a:
77:4b:74:6c:25:c6:b9:0b:de:b9:ee:8a:f1:2b:61:
24:fb:4c:f6:a8:95:72:f3:71:9e:24:d7:71:2b:9c:
9f:cd:e0:1c:81:22:6f:1e:73:a2:22:69:f4:8c:7b:
f7:ca:ef:a1:ef:a5:6e:49:17:16:0d:a1:7f:16:05:
af:c0:49:34:99:17:6e:ee:3b:4f:2a:99:90:fa:7f:
a0:41:96:6f:70:ad:e0:fb:8a:f1:38:27:9c:cb:dc:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:B3:0F:AA:DC:F3:9B:5B:A8:E5:9F:48:6F:00:E1:7C:E3:33:45
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:66:cd:e3:1e:4b:41:43:c8:18:ff:22:42:22:a5:69:39:97:
16:a3:a3:fa:9d:e1:f2:37:9f:bf:f8:26:59:69:0e:54:50:33:
a5:60:94:07:62:8f:04:f6:8e:ce:7d:d6:57:86:57:cf:71:75:
7a:bf:e5:b2:16:1a:f8:0f:79:0b:9e:f3:3e:58:0d:7c:dd:c0:
70:7f:82:96:ab:6c:85:6a:83:1e:a8:f8:5a:38:fd:2f:f6:5a:
87:cd:16:8a:b9:a0:15:ee:69:8a:27:18:59:af:de:40:3c:51:
c1:25:d0:61:35:24:37:cf:a4:44:dc:4c:01:fa:99:56:53:43:
63:0d:c7:b9:36:bc:8d:12:5d:af:93:62:a6:43:46:40:19:27:
cb:10:b9:e9:5d:f4:9c:64:ae:a5:1d:18:cc:a2:19:7b:60:1b:
6d:c6:f1:c7:d6:0d:c0:b0:1c:10:d9:c7:d6:35:fb:82:c7:72:
6f:97:53:8a:a1:ab:80:db:49:73:09:2b:95:b6:16:9d:c9:ff:
d5:50:eb:97:fe:63:c5:e8:51:95:58:7f:84:22:98:f6:3c:2a:
42:b3:3c:24:68:9d:b6:71:5d:f5:cf:b5:ed:e7:61:15:c5:46:
3d:e1:5c:5a:7b:5c:e5:18:7e:7f:ad:8d:61:50:f3:db:1e:0c:
05:90:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:15 2026 by rpki-client