Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: PPP5Ays1M2nBPNREME2h9lf9itdo2m7Fz9yvcdZG+go=
Subject key identifier: AE:85:68:A4:49:A3:53:95:0A:D7:B8:1A:94:14:B5:D3:7C:E3:CC:12
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01A1DE39A48FB9268E36274A059068AB8350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 08:01:21 +0000
Manifest this update: Sun 15 Nov 2026 08:01:21 +0000
Manifest next update: Mon 16 Nov 2026 08:01:21 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: maEfnVHDD6w9aUrhSU0D3byozhWEfvrfhFrq5RCw8kE=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (hash: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a4:8f:b9:26:8e:36:27:4a:05:90:68:ab:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Nov 15 08:01:21 2026 GMT
Not After : Nov 16 08:01:21 2026 GMT
Subject: CN=ae8568a449a353950ad7b81a9414b5d37ce3cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:8f:4d:38:82:69:5d:02:d9:98:84:d5:8a:
33:43:69:44:55:86:31:a8:b7:9e:dc:a9:63:91:ca:
ca:d6:0c:84:f7:78:b8:c2:51:40:c8:ea:24:82:6a:
54:67:8f:ce:9b:92:0b:64:64:91:8b:67:5b:2b:1d:
ab:95:57:b9:a0:16:e6:71:a8:d3:c8:52:18:14:c2:
e7:cc:ea:47:b5:ac:37:f0:17:e3:75:81:1a:af:59:
5d:f9:22:8a:39:71:8f:9a:82:d8:e2:0b:61:75:b0:
86:e7:40:b8:c9:e9:82:9d:af:8f:f4:3a:00:dd:d3:
7b:26:71:ab:c9:5a:f6:c8:d8:59:0d:24:9c:f0:50:
30:22:48:aa:fc:60:a8:cb:e1:bd:ca:fc:1d:8b:35:
0e:d2:94:3e:a8:34:6e:ff:b8:21:6c:35:62:fc:41:
9e:10:66:d1:b8:16:40:6a:f5:7e:5f:73:f9:7a:55:
11:e1:18:61:c2:51:33:07:cc:80:52:05:cd:a0:08:
89:18:8a:55:a1:7d:c8:51:36:b9:36:47:d7:ed:52:
d9:1b:fd:dd:6d:b1:79:5b:4b:14:bc:8f:09:84:18:
61:19:98:a5:02:26:87:92:65:29:f5:02:2e:d5:9e:
c5:8e:72:17:f1:2d:6d:fc:9b:af:a9:54:8d:ae:de:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:85:68:A4:49:A3:53:95:0A:D7:B8:1A:94:14:B5:D3:7C:E3:CC:12
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d2:32:bd:dc:6f:1e:ef:2e:f3:9b:39:7a:64:41:66:85:8a:
4c:1c:65:2c:8f:4d:3f:f1:ff:a5:a8:4c:34:ff:cf:15:b7:b6:
19:d2:08:8f:b8:20:ab:dc:c0:2c:48:14:d1:86:d3:48:ca:52:
8a:85:29:3c:ea:91:89:6d:85:fc:eb:04:8c:61:44:b5:3f:3e:
f0:93:4f:e3:2e:e4:6d:7d:f6:77:c8:9f:27:b2:3c:77:ec:d6:
2e:93:4d:03:7a:8f:68:59:95:b3:49:f3:68:18:f5:14:09:0a:
ec:be:79:20:3d:b2:27:c5:f8:49:a5:2a:ad:12:cd:83:5f:b7:
35:66:83:51:a2:2f:cf:2a:de:29:0b:5b:05:12:53:84:4b:ee:
c0:5d:79:c2:5f:3c:c5:e2:60:b9:97:cd:cc:9c:8a:57:0f:b5:
71:21:de:96:b4:6f:02:e4:84:f7:0f:05:39:35:2c:d7:5e:ed:
2f:5d:f5:b6:27:52:c8:08:e8:5d:8d:28:b9:cb:ed:61:40:8d:
43:7f:57:6a:21:8c:99:5f:d7:20:d3:9a:05:3a:d0:69:5b:9c:
de:d7:05:68:8c:4f:e5:c9:ae:a2:ea:9b:95:7a:5d:24:64:5d:
af:03:c6:f3:e9:2a:06:ca:c6:1c:df:b6:c3:97:65:67:17:78:
2e:88:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:04 2026 by rpki-client