Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: AFf97Bq/Tw4GSlV11CpdJ4rdP5fmCEr+2i4f/+u5e6Y=
Subject key identifier: B4:9F:A9:03:76:D5:33:8B:C7:54:4D:88:D9:BE:9D:33:99:C4:C2:18
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019FAB63DE5FC10A49D72E24F9236F43193B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 18C4
Signing time: Wed 29 Jul 2026 01:01:16 +0000
Manifest this update: Wed 29 Jul 2026 01:01:16 +0000
Manifest next update: Thu 30 Jul 2026 01:01:16 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: 0xSXMv0xreyNPpesALRi4jFEt97FfWZrK7wHB8ajhbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:de:5f:c1:0a:49:d7:2e:24:f9:23:6f:43:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Jul 29 01:01:16 2026 GMT
Not After : Jul 30 01:01:16 2026 GMT
Subject: CN=b49fa90376d5338bc7544d88d9be9d3399c4c218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:a6:6c:74:d1:96:06:92:50:0a:40:0c:8d:
fd:d1:d0:c9:df:3a:48:7c:fc:d5:65:de:6f:88:22:
f7:f1:16:16:40:1a:e5:fe:3c:12:af:fb:29:c4:1a:
b3:fb:bf:65:07:51:9f:66:77:1d:c4:51:84:94:85:
be:f2:56:05:2f:e3:f7:4c:bd:5d:ab:57:09:7b:82:
29:3a:49:0c:4c:ae:8b:49:3b:73:a8:da:d6:e8:a8:
c0:76:a9:c8:6c:b5:d2:f5:6e:1e:c0:d2:b3:20:90:
27:ce:6d:2f:a2:5c:4a:70:e4:39:40:d8:62:a0:f6:
d9:96:a2:d4:68:d3:1c:59:56:ad:45:12:9c:c9:a6:
e9:8d:1c:42:e5:dc:1f:aa:88:e2:2b:b6:0b:8d:42:
15:99:de:c2:4c:57:33:d7:75:ad:5d:4c:7d:52:99:
ba:ca:65:39:98:c2:7d:1f:02:9b:58:a1:26:38:03:
9c:de:48:ee:85:e5:ad:dc:ec:f6:7d:6d:ab:59:d6:
99:66:18:b1:31:5d:08:ea:ae:d3:fa:f6:0b:56:84:
30:9e:66:21:8b:75:0c:e3:4b:b4:61:df:f7:71:a1:
8b:99:49:06:d2:01:d8:a7:99:b0:21:a7:ac:eb:ea:
22:ab:46:25:8c:7d:1a:d9:68:6a:22:15:40:f5:ff:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:A9:03:76:D5:33:8B:C7:54:4D:88:D9:BE:9D:33:99:C4:C2:18
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:37:10:e1:c8:c8:76:52:13:19:e9:3d:2f:b4:79:8d:fc:
3c:ba:4c:92:74:c9:be:c8:32:ff:40:3b:e1:ba:5b:b0:57:d1:
8d:a3:fd:66:2b:d1:20:4e:13:08:90:59:4e:29:0c:bf:d7:31:
51:06:d8:d0:b6:ed:b8:70:8b:36:6c:5b:17:8b:1d:07:d8:a5:
5e:4c:82:65:11:bd:b4:36:5e:e3:61:10:c6:d4:e1:f5:8f:95:
49:67:98:58:3c:db:9f:b3:ee:54:21:1d:60:89:c3:9f:6b:6f:
ec:13:5b:e0:58:a2:07:9a:c4:c1:11:d1:62:0a:f6:8b:00:ff:
93:a9:a2:5f:92:5d:bf:77:94:29:1f:5e:24:18:30:7c:da:f2:
c7:ba:62:3f:ca:0e:7c:15:52:06:61:1f:eb:50:16:da:a1:96:
94:0d:a5:b5:58:5c:b0:3f:22:b0:07:95:8b:c2:72:a4:04:9f:
e9:eb:16:ce:b2:98:fa:da:19:16:30:61:7a:94:0b:f8:a1:6b:
40:19:23:eb:60:32:8c:8b:f4:f0:ea:c3:dd:0c:24:01:cd:cd:
9c:38:4f:fe:ec:fc:65:ff:35:c6:7b:7f:d2:79:0f:15:fa:7a:
be:bb:85:36:03:e6:b5:88:1e:09:34:e0:b9:47:36:c4:26:ae:
a7:25:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:31:43 2026 by rpki-client