Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
File: HluDDH425082Xhmo3ifRDMxJTkc.mft (raw, json)
Hash identifier: W1uS9WrbZUCiajpxssmzT1JXhA4C2ImUsgdodxVJdyQ=
Subject key identifier: BB:AA:BB:91:46:B7:17:B6:0C:6D:74:3C:B1:22:D1:06:78:C7:D1:50
Authority key identifier: 1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
Certificate issuer: /CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Certificate serial: 019FAC76DA60746C518F160D15B506456A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:37 +0000
Manifest next update: Thu 30 Jul 2026 06:01:37 +0000
Files and hashes: 1: HluDDH425082Xhmo3ifRDMxJTkc.crl (hash: b81a8XiPJulYcc5UsyjEt+4TPq/XvlhtMhW9X1jUiH8=)
2: LHN1BnUSyqOFuhPoPwti-ZVElTA.roa (hash: QIWaWaWmcZOj30j5Z5yhhvWrhJu25QWzZTT3P56bHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:da:60:74:6c:51:8f:16:0d:15:b5:06:45:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Validity
Not Before: Jul 29 06:01:37 2026 GMT
Not After : Jul 30 06:01:37 2026 GMT
Subject: CN=bbaabb9146b717b60c6d743cb122d10678c7d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:b2:d5:de:a8:a4:ae:fe:b8:d6:3b:34:9c:
4e:8e:e9:49:4c:b6:cd:11:78:13:39:f9:4a:3f:1e:
f3:59:41:5f:68:1a:dc:17:f6:a5:85:a4:78:c3:5e:
64:05:18:ff:86:29:a9:e0:96:24:dc:99:e6:71:e3:
c2:aa:ce:20:32:33:22:94:f7:cf:35:ac:bd:c2:ac:
6d:73:40:3f:65:e0:c0:94:d5:78:71:8d:fa:4d:83:
55:39:11:91:e2:8f:d2:e7:ca:3c:9b:26:2e:01:29:
ab:43:f1:56:d0:0c:b4:19:db:87:fb:cd:36:28:7f:
a7:c5:5a:1c:60:68:e9:52:4e:f6:f7:a6:91:91:f9:
82:05:72:db:cd:57:1a:e0:17:bc:13:b9:cb:f9:86:
b4:b3:90:84:1a:41:20:fc:a8:be:71:b6:85:2d:2d:
3c:01:32:06:4e:65:5d:76:51:0a:d4:ba:f9:a8:51:
8a:3e:15:50:85:01:50:ed:bd:09:d0:e0:29:48:1b:
1f:d7:02:15:47:67:98:a7:3a:95:85:3e:aa:af:a8:
44:53:02:42:61:e3:43:fc:9f:be:24:cf:36:97:f8:
a6:77:10:b3:0a:08:95:50:ff:db:72:4f:db:d8:84:
b7:97:6d:75:8f:7c:c3:00:19:1e:6e:20:5c:5a:50:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:BB:91:46:B7:17:B6:0C:6D:74:3C:B1:22:D1:06:78:C7:D1:50
X509v3 Authority Key Identifier:
keyid:1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:b1:74:c7:66:3b:8e:08:a4:3f:2e:50:79:31:55:86:bb:
ef:e2:d1:d3:8a:96:52:57:e7:f9:77:f4:20:47:20:01:43:38:
d0:57:3a:fd:25:e6:ee:3b:27:e2:e2:11:f3:0e:32:b8:4b:21:
00:86:0c:45:2e:7a:6a:5e:ee:5e:5a:95:ca:2f:46:d9:68:e2:
6e:2b:d2:f3:fb:fa:76:1e:ee:42:3a:a9:82:58:28:51:83:d4:
bb:9b:73:85:b6:73:bd:ca:f7:20:0a:03:fa:70:15:5e:b5:2b:
94:69:c0:ce:d1:9b:d2:c0:92:b8:60:29:42:d5:93:b4:d1:64:
8d:64:c9:e5:30:a5:14:6d:7f:d6:18:4f:32:28:69:4f:53:bb:
42:89:3f:cc:31:74:46:0a:34:b0:bd:df:4d:a9:af:8e:88:4a:
d4:33:f1:4e:73:54:ea:69:c2:81:de:b4:c1:bc:ca:07:40:b7:
97:37:d1:6b:de:92:d4:88:1b:37:e9:e9:1a:25:80:be:d3:72:
6d:5a:06:5b:06:e1:fe:30:1b:3c:82:a8:98:73:be:5f:62:d2:
44:bd:48:24:cd:78:00:4b:33:a1:b5:d5:15:85:73:19:f4:42:
e5:5b:41:03:52:11:ea:05:df:6d:3c:c5:a3:84:fd:24:e7:c6:
a0:6a:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:23 2026 by rpki-client