Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: AAGbTHDiIurvy6bu082mdBtcEe30Fgrz4xm63XTqwCc=
Subject key identifier: 56:8F:71:F4:25:AA:4E:4E:8E:AD:C6:A3:61:2F:DE:9A:B6:F9:D9:14
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01A0C39FC4F87FAE2B3F5AEAAE0C40F09CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 12F1
Signing time: Mon 21 Sep 2026 11:00:22 +0000
Manifest this update: Mon 21 Sep 2026 11:00:22 +0000
Manifest next update: Tue 22 Sep 2026 11:00:22 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: E1PdC1NBvmbqdlg7S9dGK+tks8UQQPxUM14uZFhb090=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c4:f8:7f:ae:2b:3f:5a:ea:ae:0c:40:f0:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Sep 21 11:00:22 2026 GMT
Not After : Sep 22 11:00:22 2026 GMT
Subject: CN=568f71f425aa4e4e8eadc6a3612fde9ab6f9d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:80:01:d9:f9:68:bd:6d:a6:d6:98:50:39:
b1:01:50:f6:36:51:29:d0:fb:c8:44:52:72:16:18:
3c:cd:af:0a:17:c6:29:92:12:45:63:65:03:9d:be:
e6:bc:4e:10:bc:4c:c7:51:dc:3c:8e:b8:9d:3b:78:
b1:67:47:75:00:f5:be:66:12:3c:7b:fd:48:23:fd:
56:26:49:6d:76:23:7e:25:bb:6a:73:74:9a:7a:ff:
a1:d1:f7:da:9b:3f:61:7d:f2:6e:ea:a6:be:14:2c:
0a:41:ad:09:75:80:12:e6:ea:89:26:55:27:15:27:
c9:c7:0a:f2:09:46:38:4e:6f:42:b9:59:83:f9:f7:
85:3c:9d:13:45:0c:76:cd:7f:f6:db:59:e8:9c:22:
07:f0:ec:21:75:e6:df:5f:f4:ac:93:0d:39:cc:a9:
da:81:10:75:4a:c9:67:63:4b:b9:1e:b9:55:74:79:
bc:61:3f:a2:7d:e3:e3:74:3a:7f:d0:29:4a:1d:80:
c7:93:45:86:c3:b1:27:c3:71:38:0a:7f:85:90:a2:
ab:d4:bc:26:4a:a2:46:11:ec:45:d9:ef:c4:88:64:
36:10:80:b2:0a:a0:9a:ce:be:6a:e5:b4:c7:27:2b:
cf:6f:6f:25:59:c5:64:c9:6a:ee:e7:b4:af:62:d0:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:71:F4:25:AA:4E:4E:8E:AD:C6:A3:61:2F:DE:9A:B6:F9:D9:14
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:21:43:bf:6c:a7:c6:97:c7:5e:a5:61:d5:b9:d8:d8:05:
f7:42:63:ae:7f:74:b2:ae:cc:57:7b:e9:8c:54:33:75:37:af:
66:6e:4f:ab:3b:52:4c:05:7d:85:25:2a:23:e7:31:f1:66:bf:
92:d1:79:f8:ce:b7:17:db:83:39:c6:c3:52:05:28:50:77:4d:
b9:c4:0e:77:77:d3:7c:ea:29:d4:45:64:fc:82:ff:b6:20:f0:
2b:fb:2b:f5:09:31:0e:ab:6c:fa:39:a1:2e:4e:a6:8f:26:39:
18:7f:c1:e6:b8:b3:ca:58:7a:cc:01:a8:6e:a2:be:81:78:b9:
f5:77:44:3f:0e:b5:7c:24:86:90:70:57:8f:7b:76:35:d4:27:
9a:96:dc:e3:26:b5:93:df:02:5c:a3:64:40:0e:01:d1:16:e2:
4c:ed:37:38:fd:bd:f8:ed:85:3d:fe:0f:9b:f7:f8:0f:2b:28:
af:eb:87:0f:9d:60:4e:da:89:36:83:48:9a:6e:f6:83:b5:b6:
eb:b9:4a:29:0b:f3:69:79:b1:4e:50:4a:c6:98:70:36:47:1b:
5a:e4:ac:69:cd:7c:ae:be:73:b8:66:5c:af:37:58:0b:b4:49:
05:99:2e:95:26:de:31:4c:4a:59:dd:30:bf:3f:fa:50:05:90:
7b:4d:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:29:58 2026 by rpki-client