Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: PFnGR+t61vq5LiNzbnxUVBcTBOQukkYHF18Hh/1Z+4o=
Subject key identifier: 63:07:19:FD:FA:67:02:CC:24:38:98:D7:B7:FB:EB:7C:04:D9:0B:9B
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 01A0E0620EA019A25580ACBBC03F6209D754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 1964
Signing time: Sun 27 Sep 2026 01:01:57 +0000
Manifest this update: Sun 27 Sep 2026 01:01:57 +0000
Manifest next update: Mon 28 Sep 2026 01:01:57 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: intCbbxjfa9fcJJE60JTEMXVk0ys2hPGSDyvaoBiE9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:0e:a0:19:a2:55:80:ac:bb:c0:3f:62:09:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Sep 27 01:01:57 2026 GMT
Not After : Sep 28 01:01:57 2026 GMT
Subject: CN=630719fdfa6702cc243898d7b7fbeb7c04d90b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:d4:b4:aa:bb:7d:71:7b:ce:6e:17:44:16:
08:80:27:a2:c3:d4:f6:9d:54:83:39:dc:3f:55:d9:
ed:40:41:b1:d4:81:87:64:28:b9:e1:9b:40:6d:56:
db:03:40:94:a0:80:b3:83:d9:94:4f:0e:e6:7b:15:
5b:9a:ae:e4:69:d1:1b:dc:ac:97:d7:f2:d7:a1:c8:
25:0f:31:a1:ca:8c:56:3e:34:95:c3:9b:c0:7d:44:
88:38:09:79:4a:97:6c:f7:12:dd:0d:d5:5a:49:7e:
99:8b:01:40:55:92:5a:44:e3:66:57:8b:fb:b0:17:
f9:5b:d9:a7:e2:f5:55:16:06:3b:a9:7a:0d:e7:3a:
06:9c:b2:d0:f9:ea:c9:1b:15:5a:86:7c:ed:ea:09:
b9:15:d5:d2:96:fd:9c:50:b3:d5:2d:fb:70:aa:97:
62:f9:4e:05:5b:f2:09:48:ed:55:4b:66:70:8a:49:
1f:0d:9b:4d:2a:cf:91:8e:00:59:34:78:50:00:77:
cf:39:1c:c9:8c:33:6e:fa:e1:97:65:fb:99:b0:92:
5f:6a:53:1c:79:85:ff:94:85:ff:02:64:bd:ee:0a:
f5:bb:d3:d9:be:a9:46:f3:fc:52:7f:f5:91:0e:e0:
a1:86:f4:c4:70:e1:f3:cb:6c:cc:64:4f:2f:8a:ee:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:19:FD:FA:67:02:CC:24:38:98:D7:B7:FB:EB:7C:04:D9:0B:9B
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f0:b3:ce:96:5e:23:6f:f6:32:d8:82:89:d3:aa:4a:ee:aa:
3a:76:c5:91:20:98:50:e2:3e:9f:43:36:60:32:72:85:86:e1:
2a:61:b9:81:d3:7d:47:c3:16:50:7d:9b:ce:ea:43:67:f5:79:
a4:02:8e:63:06:bc:7b:6e:81:5c:1f:27:7e:e2:8d:cb:44:e9:
57:8b:9f:ee:e3:d4:0a:b2:a5:ef:bf:6c:f6:d7:22:a3:49:48:
0d:e2:02:5b:78:40:98:84:7f:b2:76:a5:98:27:1a:0c:65:63:
ce:8a:cc:74:f8:0d:d4:94:9f:dc:43:fe:d9:ce:71:91:20:92:
b0:34:0e:14:76:3d:7b:ea:08:b4:7a:6a:cd:95:cb:a9:ee:43:
0e:34:6b:73:67:61:02:10:07:c9:5f:7a:74:ea:f6:73:e1:c1:
6a:85:a9:92:b2:db:d1:cd:39:e7:23:70:33:10:43:17:62:8b:
ff:e0:02:5e:43:27:dd:ab:20:90:cb:83:0c:a0:e7:d8:a1:0b:
43:43:15:d2:ff:d6:04:f2:8e:fd:ff:f0:3d:ae:82:c0:87:56:
dd:c5:35:87:d4:ae:55:c1:98:4b:7d:a3:a9:53:74:9f:d5:b9:
9a:02:4b:6c:57:83:1b:8b:12:ce:d0:cf:a0:bb:8f:a4:24:50:
be:e9:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:09 2026 by rpki-client