Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: TbAE9yCYXMG1IqdgO2ROr5+jV2QWO7lrD5du0fOk0JA=
Subject key identifier: 1E:32:64:29:A4:89:CD:E4:08:EE:AB:E8:8B:B9:00:09:9D:05:F8:45
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019FAB2C2D9D1208CD413541DB8DC0DF582A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 00:00:26 +0000
Manifest this update: Wed 29 Jul 2026 00:00:26 +0000
Manifest next update: Thu 30 Jul 2026 00:00:26 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: yX7VCERAGCGxA+b8bbFK3cHmVXFcP76rOTB7H8PS28M=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:2d:9d:12:08:cd:41:35:41:db:8d:c0:df:58:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Jul 29 00:00:26 2026 GMT
Not After : Jul 30 00:00:26 2026 GMT
Subject: CN=1e326429a489cde408eeabe88bb900099d05f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:b3:c2:e9:6e:e0:4a:06:e3:29:6c:8f:06:
20:b4:d6:83:4b:ec:f8:e2:10:d6:68:f2:07:82:b1:
b3:91:b2:cd:e3:e3:4f:6f:43:5b:57:f4:0c:c0:f3:
ba:48:81:bd:40:99:70:86:a4:8c:51:4a:6a:98:1c:
6a:4a:1d:17:5b:0a:a8:a7:7f:c7:94:c3:d2:90:e6:
46:7c:87:24:0e:ef:3c:30:7e:18:90:31:d9:52:bb:
7f:d5:eb:8b:aa:dc:e6:04:c4:ef:77:55:e1:2c:46:
d8:50:d0:6f:05:04:8f:6b:ca:d5:10:1d:a9:84:c6:
e3:5b:55:c2:8a:f0:db:bc:94:bd:8a:5c:ec:72:6f:
f3:59:0f:fa:01:cb:23:67:a4:17:13:f5:81:d7:1c:
96:94:e3:44:ac:03:9c:cb:87:2a:b7:10:de:76:09:
9d:fa:5b:76:d1:5b:e4:98:4f:f8:6b:e7:2c:e0:d6:
3a:2d:19:74:05:e3:42:0d:72:aa:c9:a2:df:7f:5c:
65:94:04:fa:2f:51:ce:9d:5d:fa:71:d7:60:b9:da:
97:a8:9b:8f:02:15:a7:bc:a1:9e:a5:96:90:11:5a:
b7:79:27:77:0c:73:93:6d:cd:10:73:70:ff:47:77:
2a:c6:b6:de:9b:3f:73:33:58:81:2c:ab:88:64:51:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:64:29:A4:89:CD:E4:08:EE:AB:E8:8B:B9:00:09:9D:05:F8:45
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b4:f4:16:84:9a:ba:c9:00:38:45:ee:cd:71:de:3b:d3:f8:
ee:24:a6:a0:45:73:35:51:86:3a:70:39:06:13:ec:6c:bb:e6:
15:e9:ae:3e:1f:e7:55:50:09:39:6b:a9:94:0a:be:1f:d2:a3:
e6:c7:83:ef:ec:2d:62:e8:7b:d0:8a:a1:6e:2e:5f:1e:b5:db:
65:74:92:96:40:8d:63:d2:c2:35:59:1c:a5:1c:1f:fc:7a:1e:
39:b2:b2:02:b4:6e:a6:aa:8f:ed:32:f4:d8:60:99:0c:32:51:
4b:f0:b7:9d:e1:87:c9:75:b2:d1:ee:5f:fa:3d:5a:32:37:07:
e8:87:88:15:32:1e:99:48:e1:e1:8e:47:43:7c:b3:94:4d:db:
3b:10:c6:92:8b:d3:b3:ae:ad:11:00:37:4e:fa:e2:71:c9:45:
98:d9:bc:f6:76:1a:22:13:4b:9a:7d:c0:5b:a5:e8:4d:3b:56:
a7:ee:e0:30:a1:25:da:5c:0d:aa:04:2e:a1:30:1e:9a:58:5c:
ff:ef:3c:d6:3e:2f:df:61:86:13:df:59:4a:e9:c5:70:d1:9f:
3c:e2:d0:4f:40:e6:5f:0d:03:04:4b:50:00:d5:fd:52:6e:52:
24:98:d8:9e:24:32:42:26:ac:ae:21:0e:80:60:77:6c:8c:de:
3d:7f:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:57 2026 by rpki-client