Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: IGJxy9jCbarLupUoRHzu4eFKuDKuWMmY0y7TeacNUSI=
Subject key identifier: C6:0A:49:F8:BB:36:66:79:4E:4A:DC:40:54:02:74:DB:69:0D:7E:BD
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019FA8629AA797332298E1D88FD565D1605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 11:01:02 +0000
Manifest this update: Tue 28 Jul 2026 11:01:02 +0000
Manifest next update: Wed 29 Jul 2026 11:01:02 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: oawaFwxwEJvs5aDKtM9V1jXxQyQKSGGEliNAXjX/eCI=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (hash: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:9a:a7:97:33:22:98:e1:d8:8f:d5:65:d1:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jul 28 11:01:02 2026 GMT
Not After : Jul 29 11:01:02 2026 GMT
Subject: CN=c60a49f8bb3666794e4adc40540274db690d7ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:d6:39:28:f1:bb:e6:de:bc:c8:36:62:e5:
ec:52:14:9e:73:df:b3:b4:18:7f:8a:da:a1:0c:76:
25:c4:7e:42:90:ad:28:2d:03:9a:71:75:5c:9a:3e:
bd:2c:7e:2b:34:28:25:c5:e9:9a:b4:43:a8:20:b2:
e4:0f:e2:c8:ca:5e:67:42:f8:19:a5:7f:a4:09:5e:
ff:1b:88:ed:d9:5c:eb:99:25:75:5a:98:2e:14:e3:
89:a6:82:61:9c:84:7d:64:21:b0:62:db:c5:38:01:
07:b2:14:e8:4e:9e:60:7c:63:93:f7:20:e7:f0:54:
73:4d:4a:24:de:57:00:b4:bd:ba:94:91:d9:07:4c:
69:39:f2:44:97:f1:4a:6d:3d:82:0f:62:21:03:31:
aa:75:97:53:ef:f1:1d:a5:8a:af:58:a5:e2:1a:0f:
77:43:04:16:90:1d:24:fc:e2:0b:29:4d:e3:d6:9c:
c1:98:cf:07:1b:43:5a:f3:a1:bc:ac:6e:e7:5b:7b:
fa:f4:af:a2:d9:39:e4:1c:6c:78:d6:43:eb:a2:24:
2b:e0:b0:e1:c7:3c:d2:33:f8:97:9b:d9:be:ed:43:
30:81:23:91:54:7f:e6:ab:13:58:ef:3d:ff:b6:24:
93:d4:f8:62:48:26:0d:bb:c8:b8:74:ed:c6:19:01:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:49:F8:BB:36:66:79:4E:4A:DC:40:54:02:74:DB:69:0D:7E:BD
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cd:9b:8d:e4:4d:09:4c:0a:b1:40:2d:a2:ec:0a:ab:81:17:
5f:e5:a1:7d:8e:e1:35:04:c2:fb:6d:04:76:fe:40:48:0c:d9:
49:20:cf:98:6d:79:50:bc:96:53:af:7e:44:69:86:25:4a:0d:
09:30:8f:61:0f:ac:47:69:f1:4b:69:3e:ea:0a:16:9f:ef:65:
1b:d2:e2:a4:d5:f5:a5:62:eb:9e:e3:a0:12:de:50:00:f4:d9:
96:df:7a:d9:41:6c:75:83:7c:87:ec:34:a0:06:7c:5c:4e:2b:
ad:a9:07:fa:ba:7e:0d:8c:8a:d7:f9:5e:59:5c:8e:32:66:dc:
ee:09:11:55:9e:0d:22:88:22:dc:97:84:8f:f5:f1:a0:dc:e1:
54:df:60:58:94:bc:d9:bd:73:ac:19:31:37:e9:e2:4a:35:21:
c6:4f:4b:f6:08:c7:d5:16:04:81:ab:27:93:5d:66:b1:9f:07:
83:07:c3:50:a5:ae:c4:1e:93:6b:2c:2d:f5:14:25:7d:ef:11:
ea:46:a1:bb:03:89:60:c3:ed:01:c7:91:65:a8:d8:8c:9c:91:
ab:57:b4:f9:a8:56:50:5d:15:62:52:7b:07:44:ef:44:cd:bb:
ff:9f:db:75:d5:7c:fa:16:a8:05:5a:13:ea:b0:99:c3:a2:5d:
84:b3:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:25 2026 by rpki-client