
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier: hFhCYPCN7doUxC/rxFZGMWE8ZdB0lQk85uW0eF9nvrY=
Subject key identifier: F6:58:E9:23:D2:66:39:76:69:0C:AD:82:2F:F2:BD:E9:F9:99:CF:B2
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A1C2C20D8DDB8D367DC49FD5B41B2DE4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number: 117D
Signing time: Tue 10 Nov 2026 00:00:59 +0000
Manifest this update: Tue 10 Nov 2026 00:00:59 +0000
Manifest next update: Wed 11 Nov 2026 00:00:59 +0000
Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=)
3: 6oX7ogKnna_ypXZ8MDh5x58FMtk.roa (hash: octsSR/p/oYnmWAgy7moWhXPeQCD19SmWvpLf6k7P8g=)
4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
6: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
7: Dk-jJFtIegd7vMtwXAPR2x7sWOg.roa (hash: eFq5rBM9aRlTQ6R3hKfapN16rEjVHqmjrF61RQvzONU=)
8: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: e25/S229w8sMiP1e6BV3FX7megYQfZmCJTaHpF9O4Wg=)
9: LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa (hash: 7h9ibuh5D9RPhhsbZk+iDJYxN9/RBYhyuSLUZM4uQAs=)
10: LWU4S3tXA3t2HmY4u3hvItzxzc4.roa (hash: iltsK+g7EyZOCkC7KVCD9uY7cLg9nA+EU/EdRFVv7g4=)
11: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=)
12: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
13: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=)
14: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=)
15: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
16: ZhiAqbbkXAApkWT6kURwGeP-C0Q.roa (hash: k/46MkBz/Q+HC2BE1Lz9YpIdedZQlvLjqZrQoKZdPpE=)
17: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=)
18: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=)
19: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
20: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
21: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
22: h7ZJeLoEm9cr-52_Jk_N2cwTcZM.roa (hash: L7GcpfDwgBpBvxZVg3DcuUlcPwm/rgquHuzGIa1/ZhU=)
23: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=)
24: q_5h2J2szvTHu7w0j365OsNO_28.roa (hash: ehVA9ZwcbxiL71TE9OayRWFVow00rmle7PO/BmkhQbU=)
25: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
26: sgB7Y6iAfG4YtCK5fcaRJ5CMZ9I.roa (hash: kusLyvgc/pixapeWbBNMAKTcjIgtCZ1dtKYQZG/QtHs=)
27: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
28: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
29: waVfjlEW9G5C6wB6VoPjPFZVCgo.roa (hash: GBWMN0rzQ7woVbRkW0/HGCfRanbLCyvTKE8YVyrrQls=)
30: wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa (hash: 0N3meIn2yL7+R4H9Boh39pJ8uOOO2cz3n7sm1Yhp1RM=)
31: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:c2:0d:8d:db:8d:36:7d:c4:9f:d5:b4:1b:2d:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 10 00:00:59 2026 GMT
Not After : Nov 11 00:00:59 2026 GMT
Subject: CN=f658e923d2663976690cad822ff2bde9f999cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:0e:25:0c:df:8d:63:5b:b3:b2:88:b9:4b:
18:71:23:53:1b:a2:b8:4b:48:1c:8f:59:b7:44:60:
ee:b7:4b:ec:4f:6b:65:ba:85:2e:73:8f:4a:81:e6:
5c:3d:42:37:b4:3a:ec:0a:0e:69:24:44:28:37:ba:
d2:c0:7d:b0:c0:22:bb:b3:39:6b:08:9c:84:4c:aa:
36:fe:78:a8:19:94:06:6c:65:4d:eb:54:bd:11:e1:
01:f0:68:12:d6:2a:91:c2:87:92:9f:67:bb:2b:b9:
e7:5d:dc:7e:ad:52:12:f0:15:69:c5:81:b2:60:c5:
a0:2c:ac:64:3c:3d:b2:09:63:33:d5:35:bc:7a:0c:
35:02:ed:8d:48:7b:9e:ae:51:89:9d:18:ea:8a:9a:
95:f3:2d:20:78:66:a0:87:ef:3d:6f:74:1f:df:e8:
21:c6:3f:7e:40:ff:9b:b8:45:bc:2d:dc:86:a9:bc:
ac:a3:6b:ec:5c:2c:ae:c6:c9:82:5f:25:1f:cd:21:
58:20:e6:79:c5:23:79:df:62:30:59:eb:63:e1:6f:
93:97:97:69:f9:da:1a:fb:f8:da:1a:3a:2a:93:36:
4f:9f:99:d0:46:b4:b7:07:ba:6d:b1:32:d0:f5:15:
c1:3b:3e:3f:12:31:a3:2b:ab:2f:33:c2:51:64:64:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:E9:23:D2:66:39:76:69:0C:AD:82:2F:F2:BD:E9:F9:99:CF:B2
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a3:f4:22:c8:05:8d:24:15:2f:52:90:ef:7c:2e:55:3b:0a:
c7:67:26:be:8c:1c:11:06:96:06:28:f3:0b:6e:47:b9:08:8a:
24:21:d8:e5:a1:28:28:05:d0:2e:b7:f5:7e:5c:90:f6:cb:49:
e7:bc:fc:a3:7b:af:bc:de:fb:00:89:98:50:5c:27:11:d0:ca:
6a:80:4e:d5:b9:3b:42:21:7b:98:41:67:d3:dc:79:04:8a:85:
27:ab:04:da:2f:84:48:35:39:f0:91:67:94:eb:00:64:dc:67:
8a:24:47:a1:e4:8e:0a:de:b3:44:f8:05:eb:c9:d4:1f:13:26:
aa:d6:1d:d6:4c:55:32:ac:ec:8e:13:a0:44:fa:a9:b2:09:66:
0f:f4:22:2d:1a:2a:77:42:28:fa:f1:95:44:6b:7c:60:ef:1c:
1f:53:8a:97:6c:f2:2a:b6:8f:23:f9:b8:d4:46:4d:63:6f:f2:
64:2d:01:47:3a:90:af:e2:65:ac:7a:64:eb:8c:6c:35:cc:ce:
70:3e:19:9c:70:42:af:66:86:fe:19:bb:e5:c2:28:08:09:d3:
da:3d:e5:ae:1a:10:aa:1e:01:52:1e:d4:a2:bd:46:db:3c:91:
16:78:49:3f:0b:aa:fd:69:7f:37:dc:8f:da:bd:57:fd:e9:22:
a9:fd:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:05:41 2026 by rpki-client