Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: ApMHAyIabrlTCB8bJ+2yyRYLCqEsWCTsBNuoGboBHIU=
Subject key identifier: A3:E0:96:75:E1:69:9E:1D:A6:DA:DA:DC:EE:C5:D2:F5:5F:00:C6:1F
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019CA9B3DA296558739C27F3F80D35910C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 14:01:02 +0000
Manifest this update: Sun 01 Mar 2026 14:01:02 +0000
Manifest next update: Mon 02 Mar 2026 14:01:02 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: Fkg0hZr3AxAc5vXp/s7JWhAeCN5QmMq8r6Ovt0aRdYk=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:da:29:65:58:73:9c:27:f3:f8:0d:35:91:0c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Mar 1 14:01:02 2026 GMT
Not After : Mar 2 14:01:02 2026 GMT
Subject: CN=a3e09675e1699e1da6dadadceec5d2f55f00c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:e0:47:bb:15:12:61:2b:8e:57:ce:3e:57:
d9:b7:44:d8:a4:58:b3:ef:51:d8:a8:aa:cb:46:66:
37:93:58:5f:7d:fa:f9:ba:13:e4:8b:1b:dd:6c:0d:
e0:19:60:f0:76:38:8b:d4:2e:29:6d:fd:f3:4a:a2:
57:24:44:7c:57:43:af:2d:f8:68:ab:5e:38:e5:90:
bf:9c:e7:eb:8b:46:e2:20:5a:58:18:b2:6f:01:32:
20:9e:63:70:53:0b:63:56:21:7c:e1:24:0c:20:7c:
0d:27:4a:e2:eb:ee:82:a2:21:13:bf:5f:29:8b:9a:
37:01:14:24:9d:7a:1a:c8:49:75:28:a3:91:85:34:
18:47:ae:d8:a4:8a:79:15:2b:f4:10:82:a9:25:f6:
44:e0:45:2d:ec:f8:1f:4f:19:08:a2:f2:cd:87:3d:
68:2f:f0:81:32:b2:91:b2:39:6a:55:bb:d0:85:96:
f4:0e:de:0f:8a:4b:e7:13:90:1c:e3:9f:f9:75:4a:
9e:50:56:92:e5:19:0d:5a:c6:84:8a:95:80:e5:4f:
07:54:76:ab:65:8e:a6:47:a2:24:bd:9c:99:c4:7d:
1c:2f:dc:d5:5d:fe:e6:65:a7:3c:18:65:18:24:ad:
28:fa:31:9c:50:16:cf:6a:91:5e:53:42:cf:3d:aa:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:96:75:E1:69:9E:1D:A6:DA:DA:DC:EE:C5:D2:F5:5F:00:C6:1F
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:db:b0:f9:6e:fc:4f:00:d7:84:1f:6d:8f:8e:10:57:d6:
3a:f2:65:30:ab:52:73:89:27:d8:3c:8d:71:9a:63:53:b1:c6:
ab:23:1c:b5:fb:7c:ce:ad:09:63:35:88:0f:2c:99:7c:e7:a2:
72:4d:f3:d9:f9:a3:c5:3c:76:6b:ac:f6:c5:1a:2b:aa:6c:67:
33:bd:57:aa:81:3d:66:11:da:4f:f2:d9:67:38:a6:0a:34:52:
50:69:13:ac:ef:bc:3e:5c:49:c9:2e:c7:fa:39:9a:e7:c0:35:
da:00:e2:62:d1:9a:2b:fe:2f:1e:d2:12:f0:91:e2:e2:6c:56:
cf:69:2f:56:1f:be:2a:22:c9:a1:f5:66:06:ff:fa:ce:1e:c5:
c5:cd:27:c5:2b:6d:36:a8:00:4f:e9:89:16:9a:39:f1:48:0e:
47:15:2a:9f:62:10:06:03:06:41:1f:78:0c:b0:0b:f2:53:ad:
bb:cd:b7:4e:a5:b7:44:d2:54:c9:6c:d8:06:33:5b:02:6a:ed:
04:93:83:21:e4:42:65:66:b4:e9:a9:20:8f:0d:ea:86:1d:2b:
fb:6b:44:3b:8e:a2:22:ed:0d:e8:4e:44:4d:c0:9c:eb:d2:ea:
7e:53:69:d0:3f:19:bc:86:e2:c7:14:b1:1d:ba:f1:c6:cf:73:
9f:c8:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:07 2026 by rpki-client