Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: ivscMJ6VnHPZKh0LQZk6Ox/k/eT3CPVImv8DowevgDc=
Subject key identifier: 3A:DB:0F:D0:B3:68:E4:9B:DF:B3:32:BB:E8:AC:42:9E:0E:12:A1:56
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019DA3786DE8FF5269FF1618C737D1BC46B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 1418
Signing time: Sun 19 Apr 2026 02:01:11 +0000
Manifest this update: Sun 19 Apr 2026 02:01:11 +0000
Manifest next update: Mon 20 Apr 2026 02:01:11 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: rZQZ8GDvOGp+jjttZldrSeSTG2a+LFP99J6pv1HAboY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6d:e8:ff:52:69:ff:16:18:c7:37:d1:bc:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Apr 19 02:01:11 2026 GMT
Not After : Apr 20 02:01:11 2026 GMT
Subject: CN=3adb0fd0b368e49bdfb332bbe8ac429e0e12a156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:6b:6f:51:8b:b3:d8:37:91:aa:52:1f:23:
03:4b:bf:0a:2d:24:44:d0:27:6f:6d:ba:37:af:87:
cb:24:a2:cd:2f:75:9d:9c:8b:a8:c9:04:2c:19:06:
4e:6d:62:53:b7:0b:b4:ba:35:f7:96:ca:f8:02:53:
1a:d5:b8:cb:74:81:c1:ac:38:4a:5a:57:dc:ef:36:
70:4b:a0:c9:1e:08:1d:12:97:c2:92:dc:4b:ef:00:
2f:ed:15:ca:0b:cf:76:88:aa:fd:6f:d0:19:a8:7a:
69:76:e2:b6:cb:14:0d:c8:3c:d4:37:1b:f5:18:f5:
60:87:b4:65:cf:2b:63:a9:7c:c3:37:cf:fc:f5:58:
e2:4a:9f:f5:95:4c:d2:4c:0a:48:0d:70:13:36:8d:
67:a3:ae:98:cc:a4:1e:0b:29:a7:2b:03:24:ca:dc:
6d:11:e9:4d:dd:01:7a:4c:cd:37:74:9a:43:6b:83:
6f:ba:31:10:02:a7:5b:33:cd:c8:47:2d:56:cb:22:
0d:b7:12:1b:48:4b:2c:95:e7:df:c3:11:49:d1:a0:
ba:d1:a4:fd:5f:af:3b:ff:ae:97:2f:03:68:cc:ee:
08:2c:71:83:c9:b4:d8:d3:f9:cb:84:01:7d:ad:80:
70:09:c6:ea:82:a0:9f:33:f7:4a:73:0a:9d:81:a1:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:0F:D0:B3:68:E4:9B:DF:B3:32:BB:E8:AC:42:9E:0E:12:A1:56
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3a:5c:a9:fd:b2:80:f1:2f:5b:73:e3:ac:01:53:87:2d:8f:
66:30:4d:c3:9a:f3:58:fc:dc:85:18:9c:80:f4:32:22:46:85:
83:4b:27:34:ed:02:4c:cf:2a:52:fd:ee:95:28:dc:23:ad:da:
2a:0a:db:46:62:19:91:f2:50:15:d9:ff:6e:00:69:6e:7f:6d:
1d:29:cc:4d:36:68:04:d4:c2:6f:00:04:58:ab:7b:ae:61:1c:
d4:28:75:0e:be:dd:2c:61:be:d9:49:87:b8:88:ac:35:3a:b3:
07:57:10:e1:88:d0:02:78:86:68:ee:d8:7f:85:10:6b:f8:f6:
a7:40:95:de:9d:34:5e:40:84:e1:ca:73:c1:eb:7b:02:80:bc:
c9:a2:e1:1e:a0:88:d0:53:fd:88:c3:65:6e:d2:b2:50:e9:5c:
50:0e:71:bc:71:de:06:a1:ac:ed:90:c7:34:ba:c4:89:fe:7e:
ea:49:0b:86:cb:72:63:0f:4f:cc:e7:d3:23:c3:4b:75:ce:6c:
a6:d6:34:4a:32:c9:b5:c4:87:dc:9d:8f:7c:92:e2:d5:53:e2:
6b:4b:ef:6b:b0:9b:96:b5:e1:ab:53:a1:6f:1b:71:d8:51:da:
87:45:92:bd:f7:54:0c:16:8a:19:68:52:82:75:38:a9:1c:b3:
f3:55:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:44 2026 by rpki-client