Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: ZuwDyXfLIXoXRbsTPoemFtr9LYabm0uDavubp7klZMk=
Subject key identifier: BC:3C:DF:D0:3F:8F:95:61:C7:99:CC:FC:72:7E:F9:93:36:FA:31:E2
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019D988630DB9CDCC74046AC06CE7469D72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 23:00:24 +0000
Manifest this update: Thu 16 Apr 2026 23:00:24 +0000
Manifest next update: Fri 17 Apr 2026 23:00:24 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: C7K5HhMNzpzvlzyjHhZ/V5qHHvkeKBI3yQ144AMe5ME=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: ZcmPuUcJ-uWadMEb7d7DH0U6Sng.roa (hash: VM0I5pmXHbVnNBlqkwc8P5AQG5ppgz3fNLG8j2PWjI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:30:db:9c:dc:c7:40:46:ac:06:ce:74:69:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Apr 16 23:00:24 2026 GMT
Not After : Apr 17 23:00:24 2026 GMT
Subject: CN=bc3cdfd03f8f9561c799ccfc727ef99336fa31e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:0c:fb:1d:b4:9c:21:7f:d9:e1:2b:5c:0b:
68:e5:f3:ff:b7:f9:be:1c:63:a1:96:3f:63:7f:eb:
05:6e:1d:ac:ef:87:d5:09:4d:c0:c9:b5:b4:f3:59:
ec:28:90:99:a6:4d:92:14:e0:36:3a:4a:c7:75:ad:
4d:7b:d8:39:43:be:08:d6:8e:b5:23:8f:71:3f:2e:
78:77:9c:95:32:28:59:d9:3e:f6:20:c2:de:48:fe:
c2:6d:f0:e0:88:6e:3d:89:d6:7b:72:4e:17:12:c0:
73:f3:b3:6c:77:c2:6f:1b:89:99:70:ee:7f:7b:7b:
4a:50:31:8f:92:4f:e8:cf:70:cd:2e:ee:57:32:40:
6c:eb:2e:6a:f5:bf:10:e5:be:1d:00:21:7b:08:49:
9f:ef:da:b3:af:51:a5:a1:86:1f:9f:00:7b:25:93:
60:57:b4:5d:e9:06:d8:d2:f6:52:19:da:93:6f:8b:
ff:29:87:4d:b0:14:a0:96:37:ba:39:34:05:b8:0f:
c7:da:d6:f5:56:de:c9:b1:c0:1e:f0:cb:d5:79:74:
08:d7:6a:b7:5d:74:41:b0:ab:b1:75:c7:c7:db:fa:
eb:93:b7:8a:4e:ef:e3:3f:1c:fd:15:0d:7e:e9:69:
b8:cd:2d:77:64:67:ee:88:3f:3e:36:6b:a2:50:7f:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:DF:D0:3F:8F:95:61:C7:99:CC:FC:72:7E:F9:93:36:FA:31:E2
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:b9:30:5b:e2:3f:09:91:60:9d:58:46:0c:7c:65:67:20:
a2:aa:e0:8e:a2:e1:7d:6b:f8:b2:51:de:50:76:bb:33:33:f9:
34:c1:7f:2d:3b:05:2b:f8:b0:a9:ee:a6:46:d8:55:76:14:c9:
6e:91:cf:ed:fb:08:21:4e:13:01:e5:86:96:de:34:00:fc:c7:
5d:c6:d5:77:39:ce:06:23:fc:7a:53:88:aa:8c:07:3e:02:2d:
cb:49:40:85:9d:e5:0c:a0:36:8d:8a:dc:b5:e8:fa:1f:2e:d5:
17:14:52:08:a5:66:49:e0:c9:0b:12:e7:88:21:29:be:b3:45:
4b:b8:0f:9d:f1:39:95:e6:e4:9b:1a:15:f9:0f:e3:49:2c:d3:
1c:be:63:f5:36:21:c0:3a:d6:04:a8:70:4a:48:04:97:f9:ef:
ae:14:73:74:7b:87:08:5c:35:06:65:64:8d:46:30:98:f4:f0:
c0:e8:a6:ab:85:c3:e9:2f:b5:a7:55:86:92:fe:0c:e6:b4:7a:
bc:94:0a:2f:4b:77:5a:90:68:81:3c:e5:65:85:c7:99:c4:fc:
f3:fc:07:5f:c1:ff:d4:36:34:44:1c:22:67:01:8b:36:44:53:
48:8c:f0:47:3c:ed:6e:61:f3:97:39:29:9a:0f:b7:84:c2:e4:
9c:31:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:30 2026 by rpki-client