Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: AN4/C7O+U/Gtj4JvtHXzwbwwFiyfEp1S7VDbOja6DjQ=
Subject key identifier: 9D:48:ED:08:66:7D:B8:6F:07:8C:7D:03:3A:E0:98:44:7D:75:AC:35
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019CAC103B85125B8D1CF4E52520F3E71A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: 6KCPekzGisi90LlM1GualoRcMYw+JwEkgsv/0qzmk3g=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: bQ_2KAYZ-ANxN_du74fXu-azyig.roa (hash: 4w2fzmyJ/czolT16Qgh2AOzEmL6aZtIDVZ+0IIo1Sjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3b:85:12:5b:8d:1c:f4:e5:25:20:f3:e7:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=9d48ed08667db86f078c7d033ae098447d75ac35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:12:24:b1:ce:d7:de:cf:fa:d6:ce:2c:9e:
46:d5:3f:93:01:2e:62:ba:58:bb:5c:6b:91:24:70:
9b:09:38:a7:8c:52:2e:4e:c5:eb:2b:5a:a3:97:db:
6e:77:c7:33:1a:c6:ae:83:8e:8f:d8:02:dd:b1:db:
08:22:1c:99:53:e5:38:ec:19:09:c7:58:35:2f:eb:
b9:b6:33:4b:8d:d8:4e:ec:e7:12:8a:b6:b8:a8:26:
ba:6d:74:22:87:d5:95:de:31:bf:8b:96:c2:ba:ff:
0a:d6:96:5d:b7:d2:1b:c2:15:1d:cf:9a:5b:27:ee:
17:cf:ff:99:24:c3:f1:dd:6d:65:c8:a0:9c:b9:8c:
63:b2:cc:f9:53:85:14:dc:c8:d3:cf:e8:7a:9b:37:
2b:cc:de:8c:d5:d9:8c:a5:bd:1e:4b:b7:b5:bc:e3:
39:77:33:68:06:e0:c4:0c:2b:c5:b4:55:0c:90:02:
c1:91:ca:96:ff:c6:48:a9:33:2f:9d:db:36:be:e5:
03:f0:b3:70:09:be:1b:3c:c2:03:b9:9b:a6:9b:0e:
73:7b:d7:df:62:60:08:54:9c:f8:45:8d:94:0b:c0:
ab:ff:ad:0c:c5:09:c1:7b:72:6b:0e:73:cd:df:cf:
1d:af:73:10:18:d2:c8:4b:d8:b4:91:6d:8c:c6:19:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:ED:08:66:7D:B8:6F:07:8C:7D:03:3A:E0:98:44:7D:75:AC:35
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:21:3a:df:2f:99:f2:88:3e:63:bd:aa:96:2b:b4:c8:ae:
f7:67:0f:33:86:b6:f5:35:81:c8:2b:e3:df:fc:94:fc:7f:f4:
4e:25:66:31:0f:a6:b0:f2:d7:03:fb:68:6e:70:48:1f:58:ec:
a7:19:29:e5:5e:3c:3a:8d:4c:81:60:1c:b8:10:94:e4:15:8e:
ce:d6:49:4a:69:ab:7b:03:06:05:73:67:3c:73:c4:38:3a:c8:
bd:23:f5:ce:80:84:f7:62:a1:c2:e2:fd:4f:5c:cd:a4:26:91:
bf:9c:d0:d9:77:45:b8:e2:4f:df:dd:ff:b2:a3:6e:58:13:78:
b5:98:00:99:36:a3:a9:65:1f:52:20:f6:49:e7:b2:09:7f:b8:
4a:6d:bd:7e:0d:9d:c5:4d:6d:ac:3b:93:ad:0c:f5:c4:22:b7:
8e:1b:76:24:52:31:46:e7:d5:ab:58:b6:a9:74:95:e1:5c:1d:
47:4d:6b:8d:be:0b:87:ab:d1:64:89:76:1d:6f:56:71:5f:fd:
d1:b3:dc:0f:03:45:46:fd:a4:ff:3f:e7:22:fd:e2:2b:df:8f:
74:5f:dc:4f:4e:a8:1b:12:c4:5c:d8:af:6c:ab:3a:84:53:fb:
86:4d:c7:36:2b:a1:c8:49:3f:03:2e:b0:e7:08:2e:0e:63:71:
63:8f:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:54 2026 by rpki-client