Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: pN1OHsHdVBTpjb62B3A8i21j9xvdPjCmUIrdx/VnxMA=
Subject key identifier: 57:CE:D8:43:C2:79:C5:F0:E4:19:86:7B:B1:35:A7:70:2D:5F:FA:7C
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019FA898FD6A3C3B5C3A13DCD1EAC1D0B9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 1581
Signing time: Tue 28 Jul 2026 12:00:26 +0000
Manifest this update: Tue 28 Jul 2026 12:00:26 +0000
Manifest next update: Wed 29 Jul 2026 12:00:26 +0000
Files and hashes: 1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: fpO3lQOz6o1Rh1VBIsGhy8v7wweY3wgySEV6XsDDXe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:fd:6a:3c:3b:5c:3a:13:dc:d1:ea:c1:d0:b9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Jul 28 12:00:26 2026 GMT
Not After : Jul 29 12:00:26 2026 GMT
Subject: CN=57ced843c279c5f0e419867bb135a7702d5ffa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:17:98:ff:d4:c7:97:f4:8d:d3:4c:67:d4:
d7:94:21:f2:93:39:44:4f:fe:83:e8:32:9a:df:5c:
72:c5:38:57:4a:d4:01:74:81:36:6f:51:87:e5:f1:
02:2c:bd:0b:87:3a:e6:10:ea:03:47:cd:59:88:a4:
a2:94:ae:ee:8e:c2:05:83:61:c3:af:d7:a9:38:e8:
83:c1:11:79:33:26:bc:75:a8:a4:3d:b2:bc:5e:8c:
20:a6:16:7d:e2:7c:e1:91:b1:1f:3a:90:bc:44:a4:
17:09:68:c1:8a:19:c6:09:50:87:f9:f6:5b:a5:f7:
ac:25:5d:52:53:5d:df:42:f6:89:a0:9b:66:1e:20:
22:eb:02:6e:a8:ac:50:ab:d8:78:0a:cc:72:eb:4e:
4a:a3:92:a2:44:1e:92:1a:35:5b:58:f1:2b:da:9e:
c0:58:e9:05:be:08:18:c9:f1:34:3b:bf:fa:51:6f:
d8:09:dc:9b:35:66:99:2f:90:32:60:d2:2a:42:e4:
44:eb:ef:ad:4c:73:00:ef:34:8d:5b:8e:ff:8c:73:
b5:42:c0:43:3f:cd:8f:31:8d:f8:06:67:93:8b:4e:
c3:8a:48:6e:de:03:72:63:dc:ca:41:14:cd:21:5d:
04:48:08:9c:46:39:92:3e:9b:8e:e6:d7:d9:04:de:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:D8:43:C2:79:C5:F0:E4:19:86:7B:B1:35:A7:70:2D:5F:FA:7C
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ad:7f:77:39:82:73:69:48:09:99:15:39:81:26:cb:60:2d:
0f:6c:c3:e6:de:eb:08:d9:6c:62:92:2b:61:ba:18:12:3a:cd:
58:6e:15:08:fe:62:9c:a4:dc:d8:3f:43:99:a0:a7:83:c8:13:
1a:a0:61:e3:9a:df:89:1a:14:d8:bb:9b:71:70:7e:d7:ac:39:
0b:0e:41:2e:ea:32:05:a7:2c:6a:49:3f:4c:42:c6:35:a3:76:
1b:5c:36:03:21:8c:c8:40:7d:f3:0b:c8:e1:98:fc:70:3f:ed:
98:76:31:da:f7:8e:84:9f:88:38:c2:4f:47:b2:d8:cd:69:e5:
84:93:f7:0d:8a:3b:08:ef:b4:9a:ab:94:58:69:dc:84:95:e9:
39:67:18:2a:89:88:0e:0a:20:db:ed:88:b3:6d:d0:29:55:22:
20:53:7c:5d:1c:ed:ee:c5:46:8c:50:9e:3c:85:1f:9d:c6:a2:
03:ae:e1:da:33:3f:47:b9:a3:bc:b8:14:c9:be:82:45:26:a5:
5a:d6:0a:02:a0:4e:b1:f7:0a:28:ec:5b:98:78:ff:d0:df:f5:
8f:3b:5b:45:9b:d4:35:d3:fd:2b:f9:f7:9f:f3:31:5f:05:63:
30:62:d0:34:c0:86:4c:0a:3d:d0:e7:05:f3:e2:4a:5b:e7:05:
c6:84:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:34 2026 by rpki-client