Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: YMQS1dcQM4mkfPHBMpNlqhJWespK0hIvB6mexmcz55U=
Subject key identifier: 18:6B:DC:B6:88:D9:5F:46:A6:3F:F7:EA:92:24:36:0C:C6:A1:F4:94
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 01A0CAB5442D396F33A787E1F4B259C73D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1684
Signing time: Tue 22 Sep 2026 20:01:11 +0000
Manifest this update: Tue 22 Sep 2026 20:01:11 +0000
Manifest next update: Wed 23 Sep 2026 20:01:11 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: Nu1iNd4EaPnDhESkpv4nSVtY5zwHovcDiho0dbZXrtE=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:44:2d:39:6f:33:a7:87:e1:f4:b2:59:c7:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Sep 22 20:01:11 2026 GMT
Not After : Sep 23 20:01:11 2026 GMT
Subject: CN=186bdcb688d95f46a63ff7ea9224360cc6a1f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:eb:98:c1:8b:5e:a3:e7:1b:6f:36:73:46:
35:5c:2f:0d:fe:99:d5:73:70:81:b0:de:46:16:15:
24:cb:60:13:ae:a9:f1:52:4f:5e:7c:72:e5:01:6b:
23:21:b1:af:5f:01:c1:e3:c7:64:82:4f:8a:e8:b0:
d1:b0:78:0c:59:c4:a4:ce:53:0b:0d:ae:79:6e:06:
1f:bd:86:48:b5:74:b0:90:22:68:e2:f0:f0:9a:7c:
5f:c0:08:2f:a3:ca:5e:83:88:c9:fb:f0:da:09:d4:
92:5e:88:cf:77:7f:41:fb:d7:c9:74:06:22:1b:e8:
8b:57:1c:99:09:fc:8b:fa:fa:a9:68:48:2e:a8:aa:
bb:69:3f:09:76:3a:c1:d9:f7:b1:a1:c4:f8:d4:8d:
6c:2c:a2:a7:e1:6c:12:b3:8b:26:90:86:98:78:28:
1d:88:5d:9d:a3:dc:3c:76:9e:53:e8:ce:95:1c:e1:
05:6a:91:ea:1c:bf:4a:09:57:75:0d:ed:a4:b3:45:
c5:c8:05:9c:bd:18:cb:7a:3c:66:cc:3a:05:00:97:
45:70:3e:45:61:c7:41:85:3c:b5:7c:65:36:8e:b3:
cd:35:75:31:a0:76:83:4d:5c:e8:2b:3b:fa:1a:bb:
e5:dc:8c:14:b8:c4:e4:15:69:ea:58:fb:7f:75:9d:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:DC:B6:88:D9:5F:46:A6:3F:F7:EA:92:24:36:0C:C6:A1:F4:94
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9b:03:ba:d1:85:fa:84:c6:8b:37:83:5d:dc:5a:27:65:40:
e9:bd:d5:67:ab:bc:9e:f1:9f:9f:48:93:6d:df:1b:9e:4c:a4:
0f:e5:c7:e0:d9:2a:77:50:2f:ca:0d:28:3e:1d:a0:57:20:1d:
4b:d4:b0:94:a8:f1:86:36:28:a9:6a:b7:61:6d:b1:a0:22:a1:
87:b4:ab:6f:2f:9c:09:66:d0:7c:5f:0a:ca:0b:b9:2f:bd:9d:
84:0b:ed:70:a8:7c:47:53:f0:67:19:82:a4:2f:df:82:a1:90:
c3:71:97:de:c9:00:dc:e8:fa:dd:d9:2d:7c:98:4c:cb:0e:a2:
fc:0c:56:93:02:f6:2a:d4:8c:9b:68:fb:b6:6d:ca:d2:96:3b:
e1:c8:cf:3e:da:77:e2:2b:c5:8e:e7:c4:cf:df:44:39:4f:1f:
6d:e1:c6:6d:b7:20:fc:d5:ca:7e:35:b4:b0:f3:25:a2:30:9b:
02:38:51:18:0b:2a:3d:bf:15:a1:55:1b:e1:ec:c1:97:f2:81:
bf:de:ba:de:b5:d0:17:84:55:9e:04:ee:36:0e:07:8a:93:52:
03:da:0c:b3:88:f9:3c:55:c5:8c:46:b5:42:87:c3:98:47:52:
94:7b:03:9a:8a:1a:24:0f:2b:d4:a2:7a:4d:e5:2c:df:7d:6d:
d1:82:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:14:14 2026 by rpki-client