Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: Zyxo731Knrqms/maKzH1xsWrZLCcjKrBI50Vqh34GXk=
Subject key identifier: 73:1C:4C:1A:77:FF:77:89:7A:70:D3:78:AC:FC:48:6E:10:2C:F1:55
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019E1DC728EFABAFE713CEBD8F8E5B2B7E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 20:00:51 +0000
Manifest this update: Tue 12 May 2026 20:00:51 +0000
Manifest next update: Wed 13 May 2026 20:00:51 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: PlkwNQl+QGgMz0Ux7FRBJn2Ax7SWy0FuyMdOScKjO3M=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: ZcmPuUcJ-uWadMEb7d7DH0U6Sng.roa (hash: VM0I5pmXHbVnNBlqkwc8P5AQG5ppgz3fNLG8j2PWjI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:28:ef:ab:af:e7:13:ce:bd:8f:8e:5b:2b:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: May 12 20:00:51 2026 GMT
Not After : May 13 20:00:51 2026 GMT
Subject: CN=731c4c1a77ff77897a70d378acfc486e102cf155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:c5:d4:aa:63:65:46:64:25:5f:d5:aa:fe:
ac:aa:92:0f:2b:f7:f8:cf:06:93:02:17:4f:92:7f:
a1:90:8d:3b:68:3f:37:98:c8:c1:68:96:f2:1c:31:
66:27:37:f4:e4:66:0f:9e:63:de:71:4f:40:1f:12:
04:10:00:02:62:8b:8a:d2:ee:b1:f7:85:73:b8:47:
9a:69:f0:e9:d8:7e:53:e5:dd:05:10:23:8a:a5:de:
7b:8d:ba:60:9f:fa:4a:22:fa:13:5e:f2:0f:61:4d:
bb:eb:18:13:46:6d:bf:0a:06:f9:6c:eb:26:7e:53:
6d:c3:ee:fa:53:81:fa:a1:5d:54:f7:ac:8d:27:0a:
43:45:95:29:ab:1c:09:70:54:8f:e5:fe:b0:0a:08:
08:4a:e1:08:c6:58:27:de:54:86:2c:5b:da:07:92:
f5:8f:61:e4:c0:0f:31:ee:5f:df:af:e6:ff:5b:c0:
5b:03:47:b7:aa:a7:aa:13:26:c2:fc:f0:69:95:df:
b1:b9:e2:c4:a6:49:21:1b:8c:c8:ee:d7:5d:a3:48:
a9:0f:21:13:16:fe:9c:e2:54:71:f7:a5:94:7e:98:
98:c1:56:e4:a3:d7:2f:ad:a3:0e:e6:85:0f:cd:6f:
c2:36:d9:6c:61:b1:b1:2d:83:60:5f:63:11:75:cb:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:4C:1A:77:FF:77:89:7A:70:D3:78:AC:FC:48:6E:10:2C:F1:55
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:0f:74:cf:8e:bc:53:f5:7f:e7:08:c0:bb:bb:35:d5:7a:
42:1e:e1:63:aa:32:dc:79:bd:53:8c:de:ae:99:51:eb:9d:3d:
85:3f:df:e7:3f:a2:bf:3e:0f:2f:2f:c3:20:2c:a8:b3:96:35:
24:e3:61:4c:14:dc:e8:60:71:e8:44:2a:3e:b4:34:15:e2:02:
45:06:90:94:65:34:3c:7b:bd:0f:be:8d:43:e3:d9:72:b3:34:
df:35:62:8f:33:13:27:6d:b7:04:d2:41:b4:4f:08:32:57:46:
97:63:59:d2:9f:28:4c:9a:d2:40:07:27:1b:20:bc:f4:88:08:
36:fd:43:9f:bf:ba:f6:ac:3a:8f:77:95:1c:34:3a:c5:9f:32:
96:71:a8:91:90:95:9d:a4:fe:dc:0c:a4:cc:bc:d8:9f:ab:b2:
e6:7e:fc:6d:c5:d3:ca:58:9e:c0:37:fd:b0:e7:ef:94:3b:e4:
8d:b2:75:d0:2a:3f:bf:cc:34:b4:d2:26:b9:a5:c2:d4:53:5c:
d1:d0:ee:ed:64:b3:c8:59:81:63:71:e7:d0:11:9a:03:47:fb:
85:d8:a8:f0:80:2a:ad:3e:7d:1f:55:13:3b:34:71:41:ff:36:
b4:6b:fb:03:f3:1c:6d:af:2c:a2:57:23:6e:62:70:9e:f1:13:
45:b3:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:29 2026 by rpki-client