Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: 0ocj8f/V2AVQ8lVGUugTJ8o3XMqalNFpJe/weL8aYTw=
Subject key identifier: F0:F2:4E:30:6E:AE:FC:5F:AA:E1:E5:1C:2A:7F:16:49:A4:8A:E5:61
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 019FA907C05A9DCC3C06D4B398A9B713C286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 03C7
Signing time: Tue 28 Jul 2026 14:01:25 +0000
Manifest this update: Tue 28 Jul 2026 14:01:25 +0000
Manifest next update: Wed 29 Jul 2026 14:01:25 +0000
Files and hashes: 1: F6Ed_v2GXlo2fPW9wme1LoJTt5Y.roa (hash: PVB5gLKN9XpK2cpVIIGfT9xr8RhREdDb3biV7KQ2JYE=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: gFlqzrLRKkfwfmbmqQwex/FE6t0h4yqMkkFOIFGtxgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:c0:5a:9d:cc:3c:06:d4:b3:98:a9:b7:13:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Jul 28 14:01:25 2026 GMT
Not After : Jul 29 14:01:25 2026 GMT
Subject: CN=f0f24e306eaefc5faae1e51c2a7f1649a48ae561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:73:ed:03:60:f1:43:57:b6:ab:8e:f8:93:
7e:35:3a:ba:96:6e:89:2b:e0:67:39:70:5a:d6:91:
61:60:b5:2c:c8:d2:7d:d6:6f:44:f5:72:9a:b4:d0:
d5:31:17:7c:37:fd:42:12:75:02:f2:78:a0:a8:58:
cb:bc:1c:9e:2c:9b:a0:94:3f:ee:82:4f:59:fb:17:
85:bd:c2:f4:da:4d:5b:5e:72:c1:d8:45:a8:44:54:
15:82:61:c8:ff:72:89:71:96:3a:4d:24:fc:8b:74:
f6:e2:78:82:cf:b6:88:49:ae:eb:59:5e:20:ad:f6:
68:51:9c:be:5d:92:1a:52:9f:93:bd:93:b4:df:3f:
7f:72:4e:3a:d4:2b:6a:8c:e9:70:3e:d8:ea:4f:9b:
61:32:c5:64:9f:ed:36:6b:9a:9a:96:5e:35:1d:37:
fc:87:22:62:a9:e1:e5:8f:a0:04:19:be:70:4c:58:
28:9e:4c:38:e7:fc:3f:b7:7d:8e:99:13:31:e0:60:
e7:8e:67:ea:15:15:86:36:28:ac:d2:22:0f:13:38:
ad:c3:6c:01:95:d8:6b:24:76:d7:ec:4b:7e:fd:79:
e3:bf:8b:e6:84:de:72:81:c6:1c:cd:44:92:b9:46:
64:b7:16:18:f9:55:31:9d:9f:c3:9f:97:06:01:ba:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:4E:30:6E:AE:FC:5F:AA:E1:E5:1C:2A:7F:16:49:A4:8A:E5:61
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:84:16:88:d3:74:1c:d9:1d:15:41:39:3a:46:17:db:1f:
77:cf:dc:40:9c:40:ae:03:dd:1a:a3:74:29:32:07:1b:46:7c:
58:49:54:09:6d:cf:df:9f:f2:52:f8:a1:ca:3a:f8:22:2a:c1:
e2:bd:9b:45:11:86:66:3d:8f:a1:d5:eb:3f:e1:11:47:1f:10:
ab:77:76:76:7b:a1:08:51:6f:8d:72:e7:79:84:11:f8:ef:1e:
a3:9b:60:bd:38:c1:4b:6d:83:a6:d0:a5:8c:06:68:76:8b:8d:
67:3d:78:2e:e2:cf:4a:e6:5c:9d:a0:93:af:f4:7b:8a:fc:09:
f0:57:ed:80:e7:e4:8a:8f:25:91:25:bd:74:86:e5:20:06:59:
c9:9c:96:66:fe:90:bd:f4:e7:39:f4:1c:49:c9:93:0b:c4:49:
9c:f5:24:db:c5:9e:99:78:7f:25:43:27:c7:e2:e2:dd:4f:05:
c1:a8:42:7b:61:76:b3:0d:32:2d:d5:e8:f0:ef:67:5a:87:6f:
f2:47:af:58:24:1a:7c:4b:5c:71:12:73:ed:58:19:9d:15:30:
de:79:0f:fb:c0:ae:e8:80:62:d1:95:ed:88:25:d8:5c:92:79:
c1:04:e9:d4:bc:cc:9b:08:d7:35:c5:e1:d3:f7:34:29:c0:79:
52:2e:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:24 2026 by rpki-client