Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: avU/PHP/TnoB+Fh/JDjdAQKJGtpl4ZSzDsXomb3wbs8=
Subject key identifier: A6:B7:06:0F:02:D0:43:14:AA:B9:8B:51:C5:EA:76:C0:7B:F9:58:7D
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019D9A3E189131B6C9608F5A8C633C80AFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 07:00:53 +0000
Manifest this update: Fri 17 Apr 2026 07:00:53 +0000
Manifest next update: Sat 18 Apr 2026 07:00:53 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: tUlX7AtzCm4X3vUbuPnbsii+9iFY6uipzWNWvO89jYc=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:18:91:31:b6:c9:60:8f:5a:8c:63:3c:80:af:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Apr 17 07:00:53 2026 GMT
Not After : Apr 18 07:00:53 2026 GMT
Subject: CN=a6b7060f02d04314aab98b51c5ea76c07bf9587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:6f:15:93:be:47:a0:be:5d:b0:45:d8:d6:
82:cb:b6:f6:64:2f:36:33:4b:d9:8d:92:14:ba:3e:
30:66:7f:92:ef:0a:c7:fb:58:dd:e2:58:ad:c8:1c:
4f:7f:f6:d0:4d:c2:80:1b:b5:99:59:6e:a8:0d:40:
74:0d:a9:cc:e7:6f:e2:a0:e9:6f:4a:7b:84:83:36:
d8:22:e0:2a:b0:85:33:27:32:5c:05:ee:0d:ee:fa:
b2:c4:4b:15:a2:92:cc:48:0a:7a:d3:e9:dd:47:9c:
78:dc:30:9c:1e:ba:6d:e6:c5:5c:3c:4c:c5:d5:d3:
0d:01:d7:90:24:24:6b:e0:c3:ac:3a:3a:d6:f3:a0:
97:8a:0e:bb:d3:5e:74:66:1d:f0:cb:70:12:5c:20:
e7:fa:1f:94:03:8a:98:8a:fc:e0:f8:5f:6d:3b:a0:
c6:ff:94:94:e6:54:35:6b:d0:99:d7:8c:5e:b6:2b:
62:3b:b6:4c:03:b6:7a:4d:a1:53:1b:bf:1c:7f:4b:
eb:9f:ad:e6:48:d3:5d:d6:f7:17:11:3d:2e:77:c3:
ba:8c:e4:23:74:3f:03:7d:6b:b6:7b:18:6a:6a:24:
74:54:8d:f5:96:f0:a5:c9:32:ce:c3:df:9f:78:1f:
2c:29:7b:4a:f0:1c:cf:7b:6f:20:9d:dd:d8:46:ef:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:06:0F:02:D0:43:14:AA:B9:8B:51:C5:EA:76:C0:7B:F9:58:7D
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:1b:6e:02:f9:a6:70:1d:2e:22:b8:c2:80:3f:2a:c8:16:
93:28:28:09:49:f3:fb:f7:81:cf:33:c3:c9:e5:17:52:02:6b:
6a:3b:41:26:f2:ab:79:7e:07:15:e5:c6:4a:b7:f2:18:a7:b4:
d3:35:97:b8:14:41:f2:d2:9d:f7:41:49:b9:b6:63:93:32:bb:
5d:bf:c1:d1:b2:c8:9e:26:64:2b:38:26:54:24:41:e3:f5:28:
e7:55:0e:7b:be:21:69:2e:4c:bc:57:fe:81:6a:6a:33:b5:a6:
84:a3:7d:e6:72:a6:c2:55:c1:fe:15:99:29:0b:fd:f4:18:c7:
ce:d2:76:8f:5c:99:d7:19:84:41:d0:e4:22:06:f7:f0:e3:a5:
28:30:b9:74:ea:1c:e5:5f:2a:c7:9b:31:1f:f0:0d:02:f8:e3:
1d:5f:02:4e:fe:66:ae:6a:a7:41:bf:10:84:40:c7:ac:20:23:
bf:11:de:98:27:19:d8:8e:c7:b5:18:10:e9:be:9d:3a:f1:fd:
02:12:3f:21:ce:23:21:dc:eb:8c:51:eb:11:82:27:72:57:10:
50:3d:76:14:f6:17:1d:7f:0b:ba:d3:88:70:f8:16:c8:70:bc:
89:af:1a:8d:e6:88:eb:66:7f:fb:bf:75:1e:be:54:63:6a:b0:
05:fd:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:59 2026 by rpki-client