Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: BroWHGQ4HCxSaINw9LeA5HMn5VsEb04P6SG1/nO2u+Y=
Subject key identifier: 2C:96:F2:43:0A:D4:21:B5:3F:A4:91:F1:4A:F0:2C:95:CB:DE:B3:91
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019D99629655CA4F1E0AEEF8710124BFC8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 0687
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: rSOx54BoBnC1fHFJYhcGE2XEEKq4TKethn8w61+qKLk=)
2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:96:55:ca:4f:1e:0a:ee:f8:71:01:24:bf:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=2c96f2430ad421b53fa491f14af02c95cbdeb391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:15:00:7b:c5:ef:fd:33:12:b9:ff:0c:76:
0f:3c:11:48:3d:78:68:49:03:81:70:7c:c8:0c:2d:
33:40:7a:80:0a:2b:89:a6:76:39:bc:45:d2:e6:bc:
1d:93:39:b6:10:5b:10:6e:32:dc:00:12:a6:85:c4:
05:b8:b4:7b:48:05:97:70:de:97:74:79:a9:7a:84:
20:5a:74:82:40:47:cf:7d:11:54:f2:74:6d:bc:2c:
5e:f4:65:ef:21:93:3d:47:ad:a7:a1:ae:eb:81:dc:
6a:8f:1f:49:16:0a:7d:74:fa:63:f8:4f:6e:2a:ca:
ed:5d:85:fc:c7:51:23:7d:8d:ad:a4:df:7c:eb:02:
54:41:fe:d9:9a:1b:21:26:48:01:a2:1c:63:f4:a8:
7f:b5:11:a3:50:ab:c6:59:13:50:b4:60:4a:ec:69:
f4:cc:22:54:3a:54:79:65:bb:c9:fe:ef:d0:3b:09:
8b:3f:49:ec:da:4a:7b:6d:f8:9f:60:b5:1c:70:b5:
3a:49:28:c3:5a:b0:cf:f8:b8:26:d3:0c:98:27:59:
52:99:72:84:e8:f6:e8:0e:42:fa:b0:d0:e4:7f:94:
16:c9:f6:39:0f:7b:33:58:70:cc:28:7d:a8:4b:84:
5a:4d:ee:0b:2a:d2:32:ee:f0:38:4c:fd:87:c2:aa:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:F2:43:0A:D4:21:B5:3F:A4:91:F1:4A:F0:2C:95:CB:DE:B3:91
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:86:1d:33:9b:d3:c6:96:0b:26:16:ce:a7:32:69:64:82:
20:42:a9:3b:69:d2:c8:9f:36:71:36:31:02:32:dd:aa:5c:3e:
88:36:0b:91:2b:cc:df:1f:5b:57:97:80:87:79:b6:b3:85:d0:
21:6d:f9:c5:13:41:03:59:8a:f5:28:79:cb:70:82:75:4a:ce:
dd:9f:18:97:91:c5:69:7c:07:34:7a:93:fa:ef:b5:b7:0f:c4:
cb:4e:35:61:ff:2c:22:07:f8:1b:96:50:e9:b3:b9:14:2d:e3:
10:7c:c7:c3:a0:95:84:db:6d:21:bc:f0:aa:b9:db:7a:a0:37:
7d:61:71:0f:50:19:9a:a0:0e:52:c1:38:e6:70:ab:c1:a7:3e:
8e:c2:01:7c:5d:0c:d8:8a:ac:94:14:bd:93:e8:09:60:e3:8f:
ae:87:2f:4f:1c:a9:8d:ba:96:78:42:b5:12:9c:0f:80:b9:19:
05:32:65:03:4a:63:54:02:1c:0d:be:e2:76:7d:33:c8:3d:06:
85:ce:86:42:77:ce:2c:81:f9:a5:e7:d0:c1:32:2e:83:58:52:
f1:40:67:05:c5:e1:3a:3d:29:13:4a:cc:14:7b:71:3f:7a:da:
a7:82:cf:0a:e2:50:db:c7:86:5b:54:f4:7e:49:65:6a:00:39:
b6:e0:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:01 2026 by rpki-client