Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: qaf7uoSxhmnVDheWCgvDd+FdsAbHbRIImCEcc62ELFk=
Subject key identifier: 53:6E:D6:B6:D0:C0:4A:9B:B0:92:28:57:8D:8B:45:EF:D2:48:25:9F
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019EBE113CE5589A21A65090373F1F4BD7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1960
Signing time: Fri 12 Jun 2026 23:01:01 +0000
Manifest this update: Fri 12 Jun 2026 23:01:01 +0000
Manifest next update: Sat 13 Jun 2026 23:01:01 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: FP41RGqne7X6w3XCtQtok/oqPpZMB05VBZ3XbTbqSfM=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: ZcmPuUcJ-uWadMEb7d7DH0U6Sng.roa (hash: VM0I5pmXHbVnNBlqkwc8P5AQG5ppgz3fNLG8j2PWjI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:3c:e5:58:9a:21:a6:50:90:37:3f:1f:4b:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jun 12 23:01:01 2026 GMT
Not After : Jun 13 23:01:01 2026 GMT
Subject: CN=536ed6b6d0c04a9bb09228578d8b45efd248259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:bc:4c:2b:1d:fa:b2:53:b7:16:b7:94:13:
0c:ea:eb:e1:7b:33:b3:b8:d8:b7:02:35:b1:87:29:
79:27:51:70:60:6e:88:73:43:4c:29:33:24:96:8e:
be:7c:a5:3c:7b:72:a6:94:02:d7:ce:22:92:0f:9f:
89:66:5b:73:f8:c9:c8:e8:a7:b3:2d:4a:51:bb:a3:
6f:c0:3a:05:9a:e4:2b:54:0c:33:08:eb:64:38:74:
ac:7e:e8:7b:6f:33:ae:23:1b:95:a5:91:0e:a1:60:
49:d5:66:bd:19:78:47:a3:8a:91:e2:ac:4b:26:1b:
45:d2:5a:fb:36:7f:d4:82:04:f9:99:d7:fb:aa:7b:
5d:16:c5:24:58:f4:3a:b7:6a:3f:f7:e3:94:6b:c2:
55:74:67:74:68:99:12:91:76:2c:d2:a7:ad:0d:fe:
d9:d9:7e:51:d5:c6:83:c6:99:62:1e:b3:83:e2:65:
1d:1c:d2:3b:d7:e2:90:bb:94:28:dd:16:db:d0:61:
36:c7:a1:ec:ca:e9:92:7b:c4:bc:a1:7f:ad:49:b0:
b4:c8:23:fa:4a:06:b2:d8:18:f8:9d:45:61:6d:bc:
ec:51:fb:ac:1c:2e:ec:53:af:d4:63:1e:75:12:eb:
15:e2:a2:1c:40:ae:b0:14:15:32:b1:90:ea:7d:9f:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:D6:B6:D0:C0:4A:9B:B0:92:28:57:8D:8B:45:EF:D2:48:25:9F
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b1:4a:61:93:4b:aa:5e:8a:e6:0f:f3:f6:17:9c:a6:9e:d2:
f9:b2:c0:d5:18:bc:df:2c:04:2b:58:19:fc:33:1a:4f:11:df:
3b:78:6f:c7:b1:c5:77:90:85:15:f0:94:a1:1d:e9:d5:84:23:
f5:f3:da:03:03:87:25:73:95:7c:e2:dc:6d:49:04:80:c7:27:
30:8e:ee:04:86:54:23:cf:d1:57:fa:08:b0:78:d6:e6:ea:e1:
04:fe:83:48:ab:f0:00:62:a5:21:9d:70:48:40:66:d9:07:f2:
6d:d8:73:84:45:cd:a0:0f:45:ce:bc:40:6e:fc:fa:70:58:e7:
7e:0c:6c:6c:fe:c2:6c:f8:e7:cf:53:40:ae:f7:5e:0f:03:ca:
1a:27:a2:f3:ea:e9:c5:05:45:e8:10:b0:d9:cc:12:6e:fd:60:
ca:1c:81:e5:52:b6:f0:12:8a:54:38:d0:31:92:c1:80:a1:2a:
80:99:9b:c1:ca:54:41:fa:23:e0:4a:68:0f:8c:1c:97:45:3d:
a3:78:32:42:c4:56:d8:12:d9:76:88:c6:4a:01:16:ad:2f:ad:
98:88:22:c2:9b:52:fe:e4:ca:21:7f:f7:f7:1d:9d:e8:32:ff:
4d:41:aa:b7:08:16:a6:75:d1:36:8e:31:24:1c:21:12:b5:66:
f8:ba:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:23 2026 by rpki-client