Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: buxtJUsd+OKRLTNZvmzIK0lyM9Lv4P720Tvka30xzUs=
Subject key identifier: F2:D5:5A:03:B0:5A:CB:E7:0D:1C:49:68:5B:9E:6A:E9:01:74:2E:4C
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019CABD9F781EDF4976C0E67185E3CE437BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 060C
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: g05CXt/NoVuPjOqFhZ2y9dXNeQX5t6q6CbDtxsk1BiY=)
2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f7:81:ed:f4:97:6c:0e:67:18:5e:3c:e4:37:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=f2d55a03b05acbe70d1c49685b9e6ae901742e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:00:54:28:5f:2b:f6:0f:22:97:e3:d6:47:
cb:4a:90:69:e8:b0:93:f9:c8:c3:0e:45:af:78:30:
d0:27:87:d2:b8:f2:d2:a0:f9:c6:2e:24:b8:56:d4:
21:af:91:70:57:93:43:48:99:04:7c:13:b4:bc:94:
71:1d:a5:c4:56:19:9b:5c:62:f9:e0:62:52:8c:92:
2b:02:59:8c:b4:0f:92:db:fc:e2:5f:a4:01:ca:a5:
6f:f5:8b:9d:e0:53:3d:bb:5d:29:26:b9:ed:f2:8c:
1f:61:c6:44:df:c1:65:06:c5:5c:6b:45:0a:8c:92:
36:7b:d8:bb:74:ae:5c:05:ec:7c:72:8a:1c:de:6e:
70:89:a4:7d:c5:e6:e9:d2:74:1f:ef:6f:ba:a1:3d:
da:a2:6b:ac:d9:27:0d:6a:b9:85:c8:4f:c7:9d:14:
60:44:13:33:6b:ce:c7:5d:c6:2a:fa:1d:03:86:49:
fd:6a:82:38:73:47:51:cf:ca:c2:fe:49:56:97:ef:
cb:06:1d:ca:40:1f:2d:b6:08:89:8f:c9:d4:dc:c0:
a4:c0:8e:9a:40:11:ae:f9:74:36:a8:8d:5d:79:51:
81:5d:22:eb:9f:ed:e6:82:de:b0:5b:6f:81:b7:09:
dc:d3:16:ea:85:87:76:9e:5f:1c:08:79:db:08:ee:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:5A:03:B0:5A:CB:E7:0D:1C:49:68:5B:9E:6A:E9:01:74:2E:4C
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d7:c2:7f:17:63:33:88:ac:4d:a4:2d:53:20:4f:cb:72:ea:
54:74:d6:7a:5d:90:40:97:eb:74:68:d0:20:f0:86:c6:1e:83:
f4:56:63:7d:72:03:72:b7:dc:1b:18:a4:c2:93:63:b4:3b:5e:
17:35:2c:72:21:b0:f7:94:bb:9a:b4:af:96:50:7a:e9:43:1d:
ef:88:6d:5d:0a:d0:af:1b:46:97:fc:c7:77:8f:5d:e1:c5:81:
90:d9:7e:4c:c9:4e:de:9c:6a:74:7f:0c:ca:cd:ce:61:ee:bc:
c3:fc:43:ab:e5:5e:c7:66:e9:d3:03:b3:eb:f1:49:f2:bd:94:
28:7a:49:87:44:f8:59:5f:d2:83:29:18:48:93:02:3a:bc:59:
40:24:d5:fe:3c:69:3d:58:98:7d:92:48:57:cf:01:4f:bc:1b:
1d:88:20:0f:df:91:56:a0:87:1e:a2:2c:34:9d:58:63:ed:72:
c1:df:e8:9e:0f:88:34:02:0f:39:d9:81:73:76:20:2b:5e:c0:
29:f4:b6:38:a9:1f:bb:eb:e3:78:dc:a8:ec:b4:58:82:2d:7c:
c9:9c:66:55:b6:f8:ef:1a:5e:b6:cb:54:42:4d:18:3d:f3:ea:
8d:26:cc:92:6d:c5:ad:6e:22:de:a1:76:63:ac:69:f8:eb:85:
2d:e2:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:50 2026 by rpki-client