Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: g7FDZQaiNIIVXm6lzr1l/b48PoPqD7u8yJy+kWzWp2E=
Subject key identifier: E9:AA:94:DF:F7:62:61:93:B8:AF:E1:52:D4:06:E9:4E:65:00:EC:6C
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019CABD8E9D4A70156A4C40745B1ACF62724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: 8hpue3mqQ0qw/J493fYZEUK+7wsryuIotYlbeHcCkWQ=)
2: RoLgrjDxF4akRKaq8T1rSF19Kng.roa (hash: +7nyTK/C6dWtP3h0zQHeagqR3OkxYgHMPvGFJRKBnDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e9:d4:a7:01:56:a4:c4:07:45:b1:ac:f6:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=e9aa94dff7626193b8afe152d406e94e6500ec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:4b:28:96:01:c2:84:e3:92:44:f1:4e:df:
be:6a:f6:8e:7c:9d:8e:d8:c8:7c:b5:5e:0b:cb:64:
09:22:4b:24:f2:f3:8b:ac:96:f7:d1:73:f6:86:e5:
b7:50:7b:b2:51:25:50:e1:73:cd:54:55:e1:42:21:
08:4e:8f:5e:66:82:a3:44:84:e3:17:59:8d:84:2c:
c7:ca:9d:c3:08:7d:3f:0a:03:f2:2c:9a:fe:3b:8f:
b4:fc:84:12:ea:fa:2e:f8:6b:d6:64:93:24:cc:a2:
88:f9:ab:be:f9:97:84:90:fe:c8:05:08:71:a5:5c:
7b:14:ea:76:25:fa:40:db:37:a5:d9:b8:32:8d:b8:
70:68:84:ab:a5:61:3b:4c:8b:04:84:88:ec:07:fc:
25:08:33:0f:ad:ec:56:40:45:54:63:99:1a:f1:4a:
bd:48:14:5d:df:d8:97:96:62:43:9c:e9:85:ce:3a:
4c:fd:c5:6a:f4:c9:c2:32:dc:a7:ef:30:3b:6c:f2:
21:66:fe:3b:52:37:3d:e3:e6:dc:15:10:7c:90:f2:
c2:87:2f:49:dc:0a:62:c3:31:ce:c5:fd:ad:12:7e:
89:b8:ee:3a:8e:8d:36:55:19:8e:a0:e8:ea:b5:37:
03:95:ac:5c:4a:49:61:5f:73:65:61:f2:db:e9:8b:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:94:DF:F7:62:61:93:B8:AF:E1:52:D4:06:E9:4E:65:00:EC:6C
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:13:ab:eb:5a:55:8b:39:f5:3f:4b:51:4c:4f:ec:d9:17:
07:c1:be:60:f7:0a:aa:ce:74:68:f7:12:a3:ce:79:07:6b:36:
0d:7b:d6:b1:21:a9:a7:f6:18:4d:44:12:81:2a:30:2b:c6:5a:
ab:48:6d:1f:c1:97:01:54:c3:6a:5e:a4:22:03:14:e7:6c:98:
83:f7:dd:06:78:72:d4:8c:b9:38:c8:66:7b:08:b7:72:11:e0:
94:1b:b7:a5:da:c1:a4:5a:0c:6a:77:9a:d1:4d:e8:44:73:fa:
cb:cc:8c:20:99:12:d6:da:33:cf:29:83:40:cf:64:22:04:53:
62:7e:96:98:3a:a5:da:61:db:83:47:40:e0:b0:39:12:4c:e0:
a5:56:77:38:73:ca:b9:59:ea:b2:ad:8a:f1:2d:fa:56:28:5e:
07:9b:83:26:b7:aa:bf:1f:86:f2:ec:1e:a6:21:14:a7:7b:d3:
c1:bd:b9:dc:c9:7e:02:8a:a8:bd:d1:34:2f:55:7b:53:c5:42:
00:64:b4:11:a2:2e:cb:72:6b:79:86:eb:81:b3:42:24:7c:22:
2f:84:0a:69:ae:4f:84:81:08:a2:c4:74:ac:6a:db:21:10:36:
ca:e3:d2:bd:0f:38:bf:e1:a9:ed:9a:17:f3:b7:bb:1e:ae:e7:
92:5a:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:52 2026 by rpki-client