Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: LB+GdRAqnYZ8xHrtn+bfPaxqsIbpgfmqLqek3Cd0LB8=
Subject key identifier: 55:F8:DE:A7:82:7B:6F:F2:C0:1C:F2:69:29:59:28:B5:70:AE:7B:FA
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019D97741F4BD768EB1FED35C8B4219A7305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 18CB
Signing time: Thu 16 Apr 2026 18:01:02 +0000
Manifest this update: Thu 16 Apr 2026 18:01:02 +0000
Manifest next update: Fri 17 Apr 2026 18:01:02 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: VEQidcG7QpMX9ZTh476Bq6hlmCof4TAh9XoKA87wz/U=)
2: RoLgrjDxF4akRKaq8T1rSF19Kng.roa (hash: +7nyTK/C6dWtP3h0zQHeagqR3OkxYgHMPvGFJRKBnDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:1f:4b:d7:68:eb:1f:ed:35:c8:b4:21:9a:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Apr 16 18:01:02 2026 GMT
Not After : Apr 17 18:01:02 2026 GMT
Subject: CN=55f8dea7827b6ff2c01cf269295928b570ae7bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:13:d7:64:2d:88:a1:9b:fa:e2:0b:a2:47:
d5:68:49:e0:42:83:e4:96:73:10:b6:b5:80:80:2a:
6e:99:cb:44:81:43:a0:ec:ac:be:92:14:d4:4a:b1:
d9:0d:9d:f9:ed:7c:bd:2a:b9:7e:60:ef:76:19:12:
e0:d4:8f:26:72:60:79:28:49:e7:db:a0:03:7f:d9:
28:a0:8e:de:ac:6a:59:38:c1:c5:39:05:44:d9:fe:
71:57:0b:3a:5f:07:b2:f0:17:6f:9f:65:52:25:4f:
b5:09:31:34:c2:65:2f:b0:a3:f5:67:30:f8:70:1c:
c2:7a:a5:ff:d7:c2:1a:1a:fb:a0:ec:dc:e4:96:d4:
6c:91:8f:40:7c:1c:02:f7:b2:59:f6:fe:42:97:b4:
c3:d7:d4:80:2d:e4:e2:aa:80:99:2c:df:73:f6:4e:
47:d0:b1:e6:58:12:2f:c7:70:34:56:42:6f:42:97:
2b:76:78:b1:fb:a4:fa:6e:17:ce:69:af:5c:17:1b:
1b:85:92:c9:8d:de:da:e0:42:a4:9e:1c:b5:71:92:
f0:fe:bd:19:51:0a:23:91:e2:a9:c2:c3:b0:f6:3b:
f0:65:a0:86:5c:21:22:5b:67:10:e8:c4:3f:e7:dd:
42:14:8b:e2:f8:47:79:cc:f1:03:f1:ca:86:db:83:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:DE:A7:82:7B:6F:F2:C0:1C:F2:69:29:59:28:B5:70:AE:7B:FA
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cb:f3:8e:61:55:fd:b6:3f:0b:d3:c1:f7:85:8a:da:41:40:
6c:ac:ae:69:05:f3:fc:51:4b:75:44:e6:c5:b5:82:47:f3:2f:
da:87:25:fa:1a:e6:ce:bb:19:c9:40:cf:70:78:5c:be:92:45:
ce:e1:d3:c3:e2:f1:f5:97:e0:57:b3:b6:cd:ad:a2:64:e6:77:
f7:79:24:87:1b:b8:de:51:07:cd:01:dd:a3:1c:2e:9d:2f:99:
37:08:1c:c0:93:9d:48:ca:98:18:c2:28:d4:ee:b9:f7:59:82:
f8:a3:e8:0b:c3:2d:17:da:1f:4b:3c:86:37:ea:c9:70:87:e7:
49:71:da:9b:38:4a:21:db:ae:c8:a9:c4:13:5e:81:49:75:9d:
92:39:2c:2d:e1:47:7c:66:d7:e5:99:99:55:07:93:fe:6c:c8:
f7:8b:81:14:0e:7e:a6:6b:f4:b3:5f:cf:a8:7e:b9:97:e1:a3:
01:a0:a2:91:88:d0:12:b4:33:6d:33:da:a0:a6:da:50:66:dc:
64:5a:62:7b:af:27:8c:2f:e7:1f:3c:f6:c1:5c:55:47:27:b4:
1d:72:5f:fb:c3:c1:fc:e8:c0:95:1b:9d:2a:bb:f7:d2:d7:c0:
2c:8c:36:71:2c:4e:94:88:6b:34:68:cb:be:62:4e:af:95:66:
07:c5:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:09:41 2026 by rpki-client