Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: p74cVXewxRb21B3kbGYi/fw932gQNBAFB1IkPEnhTj8=
Subject key identifier: 94:01:B6:FD:9B:51:AA:F6:E4:94:E5:B5:06:E0:EC:84:82:31:3A:F2
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 01A12D6A0A906CB732FC178227A78BF2D1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1AA8
Signing time: Mon 12 Oct 2026 00:01:26 +0000
Manifest this update: Mon 12 Oct 2026 00:01:26 +0000
Manifest next update: Tue 13 Oct 2026 00:01:26 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: CqLtYU5jppdAPNVqOO/3S9GLr8FcsNqXYs0k/o7SeSg=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:6a:0a:90:6c:b7:32:fc:17:82:27:a7:8b:f2:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Oct 12 00:01:26 2026 GMT
Not After : Oct 13 00:01:26 2026 GMT
Subject: CN=9401b6fd9b51aaf6e494e5b506e0ec8482313af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:f0:ad:c6:19:a0:3d:35:59:23:cc:c1:b0:
c0:34:a8:e3:90:f6:86:da:e2:48:2b:09:58:36:db:
bf:68:75:5a:9d:e7:d6:48:75:1c:71:6d:29:fd:43:
f3:54:b3:5f:22:82:26:9c:6c:48:4b:64:bc:76:f0:
be:28:25:2e:12:cc:c3:84:64:54:d2:47:a3:80:85:
32:c8:b1:d5:42:14:c4:2e:34:1b:28:6b:11:d7:9f:
14:e3:4c:c5:ce:a4:96:fd:16:0b:85:2c:88:7a:21:
e2:09:8c:fa:7a:60:40:b1:d5:59:c2:03:78:e4:fa:
53:89:18:b6:a8:1a:c6:ec:47:1c:32:3b:0c:d8:c9:
af:c7:33:22:16:04:c9:2b:01:6d:0e:2f:84:05:df:
64:c4:4e:c7:57:22:5a:f2:fd:78:2b:cf:64:1e:75:
cf:ae:be:b4:f0:3c:a3:d1:ad:aa:65:12:23:41:6a:
29:64:b7:b6:55:41:7e:23:f6:f9:ed:b1:f3:7d:7e:
ad:90:ff:9d:4b:c4:97:8b:51:86:89:66:d9:bb:ba:
86:61:b6:a0:73:3b:07:ee:07:d2:32:e5:51:25:c8:
2d:d9:d7:25:78:fd:35:ac:09:27:0b:00:b8:70:3f:
ed:91:85:b9:64:55:c9:83:36:62:ae:4f:1d:40:c4:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:B6:FD:9B:51:AA:F6:E4:94:E5:B5:06:E0:EC:84:82:31:3A:F2
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:2e:5f:6b:b2:5e:7d:34:1c:87:62:de:3a:53:e5:17:0b:
11:a8:82:d7:91:58:fc:17:02:e6:38:36:80:70:74:0c:5b:8c:
13:4d:a0:7c:d3:af:a5:5e:65:02:7f:8e:e2:27:a1:6c:58:8a:
99:ca:f4:d9:9d:e6:fc:fc:f0:7b:6c:e1:26:49:25:bc:f5:36:
0d:65:f5:1a:79:32:28:55:9c:ca:ba:d3:36:c0:db:81:38:2e:
5d:ff:60:45:61:4d:da:ee:89:e0:83:14:d4:bf:e9:f9:c0:3d:
06:be:b4:bc:f0:0a:d7:ca:58:c0:e3:10:03:16:d1:63:17:c8:
dc:1f:83:14:79:93:28:b9:d6:55:ce:f5:3b:55:b0:0c:2e:f4:
da:0a:b2:7f:44:0d:a2:b2:29:5c:f4:dc:2a:1a:f6:f5:cb:fc:
ce:6b:55:53:24:3f:28:03:24:fc:a0:1a:fb:87:90:07:d2:e1:
f1:b7:19:a9:c9:ed:68:8d:2f:42:b1:33:d7:07:2c:a5:cf:7f:
0b:49:45:af:8b:4e:80:c1:14:4f:61:3e:f8:de:c6:fc:c8:a3:
d1:e5:b5:8f:9c:12:6f:c6:18:50:89:aa:24:57:7f:6e:08:fc:
24:29:02:24:3d:32:43:ba:bb:ea:d6:44:38:b8:74:0e:4f:a6:
32:4a:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:32:56 2026 by rpki-client