Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: /bebNRosQmg3s7hg5y7MDU4/O91otJGHF2x1nIqDwAM=
Subject key identifier: 58:8C:F9:3F:29:4C:27:01:DE:8C:2B:D2:48:49:81:44:49:F9:11:80
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019F92490A3D9A1ED1A04F5C5BC0AF41B784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 18B7
Signing time: Fri 24 Jul 2026 04:01:27 +0000
Manifest this update: Fri 24 Jul 2026 04:01:27 +0000
Manifest next update: Sat 25 Jul 2026 04:01:27 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: RgpXPic2fJ0ruPYCYPcUENQiuroQixWtUQplY17/9Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:0a:3d:9a:1e:d1:a0:4f:5c:5b:c0:af:41:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Jul 24 04:01:27 2026 GMT
Not After : Jul 25 04:01:27 2026 GMT
Subject: CN=588cf93f294c2701de8c2bd24849814449f91180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:36:fc:8e:e1:b7:4e:42:7b:c1:7d:a3:96:
a3:6a:96:17:3f:73:e8:53:3a:50:fa:9e:cf:a4:8e:
07:3e:6c:21:b1:5f:a8:9f:2c:ee:5f:fb:26:49:58:
f2:a1:dc:5a:27:ef:86:ac:9f:20:f3:d3:4f:15:8f:
bb:1f:15:bf:81:f2:ac:94:bc:43:36:cd:0a:7e:a3:
4e:a0:33:7d:a9:d9:ec:d0:f0:79:09:89:bb:9e:a4:
c5:dc:ad:2d:91:c8:60:e3:54:8d:31:9a:f1:38:3e:
95:a7:7a:94:2d:a2:3e:35:79:b8:bd:59:c1:9d:fe:
c4:5b:fa:41:fe:f7:cd:21:9f:47:2f:c3:21:97:50:
79:e7:0b:3d:6d:81:e9:fc:c0:dc:a9:7a:51:4e:70:
24:f5:e6:8c:dd:16:46:f5:68:f4:0b:8a:47:c1:04:
8f:7d:ea:4a:a4:19:f9:e3:ec:d6:c7:6c:ea:53:55:
0d:a5:03:a1:d6:82:35:85:a9:0d:05:15:b4:e0:88:
2d:96:13:9b:b2:1b:a3:3e:d5:be:71:18:2b:b3:ad:
d6:92:ac:3e:2a:3c:28:8f:b5:ef:d9:bd:77:e5:77:
b0:f9:b4:3d:3f:23:e8:f4:f9:6e:4c:f2:ac:01:3f:
44:18:50:62:62:9b:bd:af:99:01:b7:71:a1:a1:f0:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8C:F9:3F:29:4C:27:01:DE:8C:2B:D2:48:49:81:44:49:F9:11:80
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:4f:4e:9f:be:c8:17:4f:32:08:f4:c4:77:3c:44:6f:08:
01:ec:54:b2:35:f3:c7:87:58:fa:cd:08:d4:b5:27:c6:4c:29:
81:96:e9:44:04:d7:51:1b:a1:ee:1a:49:c7:ee:76:44:a0:de:
9d:76:5f:d4:ba:78:6a:26:1d:1c:cc:e4:f9:d7:40:6d:22:81:
b3:d9:15:aa:a6:e5:93:14:05:10:ac:81:4f:b9:ea:9e:db:28:
74:73:c3:65:9e:4c:8a:25:c9:7b:36:ca:af:71:a8:8a:ca:65:
d3:6c:86:5f:aa:fe:aa:7f:a0:c5:13:a3:a1:10:63:b1:b0:19:
b0:0a:3e:fd:1d:4c:10:f7:6b:07:0a:2e:66:b6:74:f6:83:0d:
5b:63:08:18:03:99:98:6c:c7:3b:9d:78:c2:93:cf:00:53:91:
7f:bf:f7:8a:cd:8d:fc:24:ff:a2:a4:9a:6e:19:55:6f:c7:21:
16:b4:9c:d2:46:9a:db:a0:8c:e0:9e:1e:33:0d:3c:a6:04:fc:
a7:7f:9d:ac:86:a1:80:40:57:ce:b0:33:34:d9:a5:36:75:80:
8a:1f:81:93:a7:08:09:62:94:9b:b8:a5:f4:43:b1:1e:b7:e5:
f4:24:a4:92:6a:78:0a:8e:d6:10:32:bc:e6:01:b0:78:8d:b4:
62:6b:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:38 2026 by rpki-client