Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: rwTDE3U2OHKKIPmxHzaFYD8R6E89bekeXjoEWMm+k2w=
Subject key identifier: 33:92:75:CE:67:1C:B4:A5:2B:4D:72:D4:6C:ED:FF:61:C5:24:A9:D3
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019D265F22FA9DF647CCACBBFD679F78C282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: KY+y/Cop0BlpZX0/STEIFDAMpsi9KXcWra9oA0WWEG0=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:22:fa:9d:f6:47:cc:ac:bb:fd:67:9f:78:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=339275ce671cb4a52b4d72d46cedff61c524a9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:a0:c2:8d:ab:4e:93:d9:05:ce:6d:eb:a4:
c3:c9:3a:a6:f4:6e:70:36:00:81:0c:4d:00:5a:f9:
9b:c6:c0:f0:37:63:5c:fb:b3:e8:f8:1c:00:3e:85:
e0:06:53:b2:91:f6:4b:33:64:51:df:de:92:15:dd:
d4:15:21:5d:fa:6c:90:0a:1d:79:8c:cb:33:ce:5f:
6d:f4:25:5d:d7:13:a6:da:28:83:18:58:81:7d:dd:
be:c2:40:11:93:45:5c:b3:62:f5:6d:cb:01:c6:f2:
75:24:0b:c9:2d:f3:85:55:e7:c7:c7:08:d0:29:e4:
fd:14:3e:5d:f2:ad:80:9f:f5:02:03:c4:0f:38:b8:
a2:e4:fc:03:e7:2c:02:73:7e:a8:ce:4b:1f:c9:72:
3c:7d:d8:13:6e:b9:37:65:d1:f7:d3:f5:e9:b0:5d:
e8:17:bd:a6:c6:5a:14:1d:62:3d:96:0f:45:83:13:
ee:0a:21:f1:95:ed:d9:fe:2e:49:e1:49:f7:b1:0f:
34:de:d5:2f:46:9a:37:d7:20:67:2a:71:ae:a8:dd:
44:20:9e:43:9c:a5:9a:5b:67:51:94:0d:bf:ff:cd:
65:1d:66:96:20:bd:65:8f:20:21:21:59:e5:df:26:
6c:ea:e7:7d:e8:2a:cb:49:b7:b2:bc:49:a2:63:2f:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:75:CE:67:1C:B4:A5:2B:4D:72:D4:6C:ED:FF:61:C5:24:A9:D3
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:4b:e4:54:f6:f8:2e:e4:24:36:76:26:57:47:bd:12:85:
e4:ec:45:df:47:c2:d2:01:bc:fb:da:1c:d2:81:b1:37:ac:89:
0b:ce:b2:1b:8a:f6:a5:f6:83:1b:d1:45:b2:96:9d:b4:c8:48:
81:b9:3d:04:d1:c2:1b:52:dd:31:ae:0f:dc:6f:41:bf:f6:d0:
41:e6:16:44:6c:9e:b7:d9:4b:1b:b6:a6:7a:28:c5:d0:a6:94:
a5:c7:1f:19:bc:54:c7:1e:81:17:a0:ec:45:c4:a0:62:1e:4a:
08:99:96:b3:ba:9e:99:1a:1a:9b:08:89:c9:e8:eb:06:6c:23:
60:a2:aa:50:fc:c8:dd:7c:2a:81:e6:39:c4:1f:f2:61:7a:62:
38:68:29:60:58:38:cc:de:f5:00:ee:2c:ff:bb:12:a8:80:d3:
68:df:94:23:f7:eb:40:d2:7e:40:1d:de:67:70:bc:3c:4d:4e:
1e:b8:8b:2c:5b:01:6b:f0:56:26:b2:0a:4e:bc:ac:98:8b:ce:
c0:85:63:3b:53:f3:e2:52:c4:98:1e:37:a2:87:ad:f3:9a:c8:
33:3d:e9:c3:03:9b:a5:cb:ec:b9:17:74:d6:d5:5e:ca:56:78:
67:04:dc:70:02:e2:75:a6:4b:0f:b1:e6:8d:4a:05:32:0a:ea:
c4:34:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:34 2026 by rpki-client