Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: 8lzHzQqG70TW83oHhBsdndK7vL5EGw2JpQsQc6+pfGo=
Subject key identifier: 89:8A:E8:3C:3C:D9:59:EB:81:B6:9B:02:E7:55:82:70:7C:1C:83:03
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019D2884C33B0C35451709DAD0BD62ECED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: Hy0GIpyCXiBXVnj/hpfiRkgqTDZ8DAc/ipaSuX448AI=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: ZcmPuUcJ-uWadMEb7d7DH0U6Sng.roa (hash: VM0I5pmXHbVnNBlqkwc8P5AQG5ppgz3fNLG8j2PWjI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c3:3b:0c:35:45:17:09:da:d0:bd:62:ec:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=898ae83c3cd959eb81b69b02e75582707c1c8303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:0b:96:00:e6:e3:29:a4:60:41:6f:e2:d5:
59:e8:aa:e8:a7:89:8b:2b:d2:e9:3a:92:19:d5:d1:
0a:28:43:c2:e5:b5:88:96:ec:01:19:77:c5:58:31:
5a:a1:2c:5b:b3:f5:95:eb:62:ad:6b:9c:db:a1:19:
a1:ca:07:58:0b:06:8b:c1:fd:ea:4e:1e:78:60:db:
af:73:65:cf:ff:e2:b6:17:ab:d3:22:74:a7:67:86:
14:2d:13:e4:d8:1b:bd:2f:48:55:fd:a4:61:6a:b1:
ff:08:e0:6d:e4:82:c1:73:8b:be:f0:88:3b:61:47:
33:2d:b4:77:84:11:a8:a2:80:80:0a:22:6e:73:d4:
b3:0c:c0:09:23:5e:bb:7c:cc:d8:f0:6d:37:f0:69:
a3:53:63:8e:d9:f9:e7:f2:42:64:5a:7f:22:c3:4e:
43:18:15:58:f0:e3:5e:86:ad:71:0d:df:8f:63:b2:
5d:6d:ad:98:88:56:3a:2a:b5:1d:4c:b6:b9:b2:e0:
d2:03:15:51:44:a5:fb:2a:c0:c8:db:0e:eb:67:95:
8a:6d:ee:15:53:89:e5:42:8e:f3:bd:5f:f6:30:63:
2e:64:3e:47:4e:61:1c:ca:80:29:7d:1b:10:d4:da:
9e:70:f2:eb:f1:1e:89:0e:87:de:83:2d:45:ef:1d:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:E8:3C:3C:D9:59:EB:81:B6:9B:02:E7:55:82:70:7C:1C:83:03
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:85:64:e0:87:3b:87:da:d0:3e:0f:12:1d:0e:f0:e7:01:
00:07:8a:18:fb:7b:8c:83:7c:55:6c:94:56:3f:e3:45:68:61:
be:13:35:0d:84:57:d8:b1:81:2c:5a:9d:8d:c8:e2:70:cb:4b:
30:94:4b:47:fb:f4:58:9a:e3:a3:fd:1f:58:bf:81:aa:4b:23:
3d:19:0c:57:4c:03:ba:e6:1e:78:1a:eb:82:51:56:12:b9:a1:
1f:69:16:85:0c:5d:04:17:83:95:ed:09:38:22:26:f1:1e:f7:
ed:c7:68:5f:4e:c4:e8:31:39:e7:95:70:f6:99:10:52:b8:bb:
72:d0:2c:8b:08:0e:6c:56:cc:73:d3:1a:8b:e4:86:39:e2:06:
90:8c:9a:99:8c:4e:ea:b1:84:1f:13:8e:8b:2e:4b:37:f6:d9:
a8:03:2a:0b:d0:37:8b:ca:5a:b0:53:b3:00:cf:40:2b:48:5f:
40:d2:c1:e1:ff:59:71:1c:58:cb:d3:e4:82:e5:93:8c:bd:0a:
bc:c2:12:ed:88:9f:f7:ce:ba:60:91:cc:2c:9b:31:ff:49:c7:
80:56:9f:68:e9:5d:c0:fb:ab:fe:c8:17:7b:c5:87:a6:a4:22:
de:6a:04:45:e6:88:f5:be:25:5b:e3:a8:38:a4:f7:90:3c:93:
7f:ce:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:34 2026 by rpki-client