Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: ZHeO8MmAvzTdxfAtRs+cG/EUJpZNxfO31HGx+CmkVQw=
Subject key identifier: 9E:DB:92:19:EE:80:90:5C:52:AF:2D:4C:26:1C:69:E8:23:FE:E8:CC
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019F9135E3AA02544CAB1224B6BF0CC8359C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 23:00:55 +0000
Manifest this update: Thu 23 Jul 2026 23:00:55 +0000
Manifest next update: Fri 24 Jul 2026 23:00:55 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: qdFhSIBWrXrDW7so3AeGisRiIj3s8hA6FkJMM9H1gic=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (hash: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e3:aa:02:54:4c:ab:12:24:b6:bf:0c:c8:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jul 23 23:00:55 2026 GMT
Not After : Jul 24 23:00:55 2026 GMT
Subject: CN=9edb9219ee80905c52af2d4c261c69e823fee8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:ff:e3:e5:f2:8c:28:20:5a:84:86:ab:3c:
95:65:f6:d3:c3:fd:26:07:f5:90:cd:33:c6:89:7f:
b3:aa:0a:03:4f:b5:90:1b:db:75:e2:06:f9:cb:38:
89:16:5e:c4:dc:10:8b:3e:13:91:4d:05:c8:53:58:
7c:bc:50:93:fa:0c:61:8e:79:ef:a2:96:68:12:fe:
97:39:02:62:b6:c1:54:59:51:ef:06:b4:9c:7d:29:
e6:19:41:75:fa:a4:85:85:4f:a2:8c:8d:29:42:15:
4d:67:cf:53:93:92:5a:70:2d:8e:e8:01:02:f7:ce:
89:6b:af:e0:9a:06:9f:93:56:3c:cd:30:02:71:9f:
a1:b7:fc:eb:ad:ff:22:8b:71:00:e8:9f:4d:e3:04:
d7:38:73:3a:31:af:0b:9e:2f:78:b7:e8:13:fd:5d:
02:a4:1e:77:dc:ce:ed:af:68:8e:2f:95:e1:47:e0:
46:cd:34:34:5e:83:eb:56:03:70:6c:d5:3a:77:5b:
04:c7:1b:e4:e5:c5:bd:c6:8f:28:bf:37:2f:42:fe:
1c:fb:60:d0:96:17:df:e3:17:75:c1:5a:db:8d:59:
37:de:a1:3a:8c:b2:7b:05:0a:46:ee:80:4c:6a:aa:
13:1d:c0:d5:03:f5:e8:06:92:78:e6:62:4a:4f:c8:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:92:19:EE:80:90:5C:52:AF:2D:4C:26:1C:69:E8:23:FE:E8:CC
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:93:e6:84:56:0d:3b:2d:e6:08:ca:81:74:52:37:d4:cc:
7d:41:60:08:35:f2:a9:80:72:6f:de:a7:e1:9b:d7:c3:a2:42:
77:e2:8a:be:d7:23:1f:ca:7a:94:65:65:0f:52:25:16:b3:31:
85:71:04:1b:58:91:49:b1:d9:99:e9:7a:0f:fe:27:6d:40:70:
01:5e:d9:62:a9:1a:cb:46:01:f6:6f:a2:cd:f3:a5:c6:cb:9d:
75:7a:ef:1d:0a:72:b9:d2:84:00:49:74:a2:5a:c2:6b:0f:a8:
f7:ba:4c:2f:5a:9a:0f:23:c6:ef:3d:c6:ac:45:6c:26:bc:e3:
84:0e:99:33:ab:c4:8e:a3:4c:8e:7d:03:66:1c:a6:f9:a4:a7:
67:a8:5e:64:30:2b:c2:d7:76:93:39:8f:77:ed:fc:b1:01:a1:
46:6e:53:29:c8:d8:67:61:06:ab:54:57:03:53:96:45:d8:73:
36:0a:1a:08:dd:18:a4:1a:63:86:a1:cc:e9:34:78:04:a1:55:
e5:54:c5:2b:c8:e0:69:46:b5:c4:5f:f2:09:89:0b:c1:ee:82:
be:53:8b:bd:d7:49:f0:de:57:f5:cf:4a:94:93:fe:e5:cc:15:
15:04:ac:db:64:08:37:5c:e9:01:a4:8f:d8:10:6f:bb:d6:f9:
8d:5d:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:12 2026 by rpki-client