Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: nYTIZiePeHiteTk04hTKPYYMOEik2uml6CQ6rbeash0=
Subject key identifier: 89:39:B6:62:BF:35:29:77:C0:1E:F9:95:12:25:6E:86:47:F8:AA:57
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 01A0F3B173A03ED5DC42E72771D8580335C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1A10
Signing time: Wed 30 Sep 2026 19:01:27 +0000
Manifest this update: Wed 30 Sep 2026 19:01:27 +0000
Manifest next update: Thu 01 Oct 2026 19:01:27 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: uK/Ad3XowwpDAMZU4o0PkeecT0UOG2Idg6DeeuUdEGU=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:73:a0:3e:d5:dc:42:e7:27:71:d8:58:03:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Sep 30 19:01:27 2026 GMT
Not After : Oct 1 19:01:27 2026 GMT
Subject: CN=8939b662bf352977c01ef99512256e8647f8aa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:a4:99:bc:28:71:19:e6:b7:4c:fd:d2:d5:
29:84:a1:95:91:fa:9d:ac:9c:25:63:67:ec:76:81:
64:4e:bf:ff:74:87:66:80:e3:58:f9:a5:45:56:c9:
79:2e:cf:7d:80:a8:f0:a0:8f:0c:6c:23:87:9b:02:
03:64:78:26:a8:70:38:4f:b8:59:d5:98:c3:74:ee:
b0:5f:ac:0f:d6:6a:3a:13:e0:d5:6a:7f:4e:86:bd:
5b:16:b3:2d:7b:ed:af:2b:da:ec:51:e8:19:1e:e5:
68:b2:73:80:14:cd:c8:7a:43:4c:35:3e:dd:e8:9d:
87:bb:bc:9d:aa:87:a4:2b:80:70:bc:fd:fd:6f:3c:
b7:fb:39:75:ac:ac:31:23:49:4a:0f:b8:0b:1d:08:
34:6c:6b:c9:92:8f:5b:c5:33:2e:f9:07:b0:0f:2b:
99:3f:7f:b9:16:a8:d4:c0:2a:f2:79:eb:a3:32:2e:
ba:c0:a5:40:a3:d1:5c:d3:43:c5:5f:28:0c:3e:2c:
63:6a:87:0f:cb:c6:c4:33:d0:0d:d1:55:03:d2:17:
be:e9:e4:ca:72:06:17:52:df:f5:d2:72:98:ee:b2:
b4:3a:fb:a9:6d:f8:0d:92:6b:14:79:10:c1:60:ad:
bd:d7:8a:f5:b1:6d:eb:73:f4:42:ac:8c:5c:6c:d3:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:B6:62:BF:35:29:77:C0:1E:F9:95:12:25:6E:86:47:F8:AA:57
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:9f:a0:4b:86:3f:f2:40:e6:eb:9d:3d:f2:25:de:e0:40:
e1:7f:d4:87:b0:d5:f1:ed:13:d0:bc:65:89:07:ef:9c:48:be:
6b:f2:ac:46:c4:47:e9:1b:3c:18:7f:e0:9e:1f:8c:a8:da:e5:
24:b3:79:8f:d1:be:63:4a:06:07:08:6c:e3:29:c7:fc:32:d6:
2a:02:db:a3:d5:ac:cf:77:b0:9e:85:f8:58:46:a1:e7:66:ac:
df:7e:6a:c4:7b:de:94:6a:b0:19:96:b7:6e:d4:3d:21:21:65:
52:ef:4e:3c:63:7e:b1:37:7f:90:1e:5d:17:2d:ce:b0:58:36:
91:c9:ad:43:5f:55:c7:c3:10:bd:42:16:70:5c:97:70:0b:44:
70:09:8e:5a:e8:ed:46:1d:49:fb:e6:3f:a8:1a:d9:44:b5:dd:
77:83:74:59:cd:88:8b:f1:ec:57:87:74:8e:f2:3f:a6:1e:21:
c7:bf:04:b6:50:30:40:10:0c:69:a1:7e:1a:2b:06:19:cd:99:
05:37:74:cf:30:11:79:fc:fc:27:af:ab:ad:07:06:ed:1e:8b:
12:b9:35:ba:41:a1:a8:f5:26:26:55:51:9c:e0:1a:f8:7f:b8:
57:1e:75:3a:09:51:54:8b:55:75:f3:80:3f:e0:31:98:31:82:
1b:5d:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:09:58 2026 by rpki-client