Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json)
Hash identifier: l0t9osmGFLMnBPPwnvhkO5/uW94+ZU16jV2Asx2vFro=
Subject key identifier: 5D:56:C2:DA:57:92:36:DA:66:D8:2F:32:90:8F:C9:91:AE:B7:7C:92
Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Certificate issuer: /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Certificate serial: 019CABD99D5BC23F18E0E8211DDC72D166F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
Manifest number: 06B2
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: /58DhfgnLRPhtkMwzyW2KEsRQ+FF6EVVQ+SeME9gJ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9d:5b:c2:3f:18:e0:e8:21:1d:dc:72:d1:66:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=5d56c2da579236da66d82f32908fc991aeb77c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:cf:13:fc:a0:51:8e:61:fd:2e:8a:f5:14:
b0:07:32:fa:04:29:95:7a:90:24:db:c6:83:30:30:
46:0d:25:4e:24:e0:b0:85:30:ca:86:eb:d1:8a:cf:
f5:f3:6f:04:a5:2f:5d:6d:80:bc:ba:eb:d0:a8:a2:
8f:c5:b8:c1:31:67:67:ef:75:9d:34:32:1c:50:d5:
67:d4:b6:d4:d6:4c:98:72:b7:35:81:7c:ce:48:bc:
20:28:e6:dc:53:61:68:26:6a:55:ef:9f:7c:52:87:
44:a1:09:d7:8c:6d:2a:36:29:1e:1f:8b:61:41:99:
07:83:60:52:59:97:05:b9:cc:4f:76:15:f8:cc:c5:
b7:06:48:13:df:39:68:0b:fa:f4:5a:f4:22:fe:65:
43:a9:d2:e3:05:94:e1:d9:75:59:86:36:d4:fa:11:
45:b8:bc:c4:fd:ff:5c:11:06:cd:f8:3d:97:06:55:
3c:2b:de:db:62:1e:06:e0:41:d3:b5:dd:5e:bf:e0:
12:4e:f9:e8:22:02:05:72:f6:b1:3a:16:f8:70:14:
2e:f2:cf:f2:a2:ef:50:e2:3a:4d:39:f5:e9:4d:04:
f0:3e:fc:ae:da:a6:3a:e6:8d:9c:1c:41:0f:84:28:
e3:d8:0e:ce:70:4d:e9:ae:59:56:48:13:4e:bb:46:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:C2:DA:57:92:36:DA:66:D8:2F:32:90:8F:C9:91:AE:B7:7C:92
X509v3 Authority Key Identifier:
keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:63:89:b9:10:3a:90:45:3c:c6:04:46:b3:4f:0e:bb:ae:
0e:6b:7b:a0:a3:ef:ba:12:d0:55:f3:12:8e:a3:3e:2a:c7:0f:
b2:1b:e6:87:d9:80:8c:49:b9:00:72:fd:f0:9e:31:94:fe:b5:
d1:90:c4:cf:cb:1b:40:62:73:8f:de:7a:35:45:64:a9:bb:d4:
35:13:7f:9a:e2:7f:34:31:3a:e0:78:59:b2:01:20:34:1d:9d:
52:49:89:d6:de:74:05:3c:f7:49:73:04:59:f4:58:f2:04:05:
71:68:69:01:c0:f2:e6:a4:83:5d:cb:ee:84:15:93:cd:76:48:
d6:38:54:5c:e9:d9:93:ab:1c:ce:3f:5e:43:ff:74:1c:f5:40:
42:c9:e9:d1:8d:57:b6:16:c2:bb:2d:50:0c:42:6f:48:39:dd:
c5:03:29:89:b7:0a:2e:f4:c4:a2:dc:42:1b:c2:f8:07:07:9e:
65:c8:20:2a:f6:84:6d:8f:66:17:ba:c2:b7:29:8c:b7:c3:51:
81:47:a9:c5:de:47:a0:23:6e:cf:68:e1:ef:c1:be:28:03:78:
3e:08:d0:3f:97:db:a4:1b:69:e9:da:b0:c8:6b:c1:9c:b5:f2:
17:50:a7:53:ba:e5:f6:16:30:b4:fe:2e:b1:8e:e9:ca:b0:62:
66:27:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:03 2026 by rpki-client