Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: gshbLuNOE1EcISuDjHQmZdcUGRSkHyzZe9NuTnPK/VU=
Subject key identifier: 23:5A:CE:94:EE:D1:CE:20:CE:82:DC:A3:5B:9C:F8:BA:69:27:A9:21
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 01A06D5E3C4A2F64F1E6E366EB8BFDF3CCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1A37
Signing time: Fri 04 Sep 2026 17:01:27 +0000
Manifest this update: Fri 04 Sep 2026 17:01:27 +0000
Manifest next update: Sat 05 Sep 2026 17:01:27 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: Ji8CPvrx//tLKyDwIxw4pgJVghfktLseKBKOWvKvMYI=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:3c:4a:2f:64:f1:e6:e3:66:eb:8b:fd:f3:cc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Sep 4 17:01:27 2026 GMT
Not After : Sep 5 17:01:27 2026 GMT
Subject: CN=235ace94eed1ce20ce82dca35b9cf8ba6927a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:03:69:b9:f4:1c:72:74:7f:c1:0e:d3:a4:
31:36:35:78:db:42:f7:97:ac:e5:1a:27:61:1f:ac:
25:93:cc:dc:4d:ac:c9:00:eb:ee:81:38:6b:71:30:
8c:e4:76:f9:42:1d:6a:cc:aa:90:95:ad:fc:9f:95:
fa:df:58:0a:b4:88:c8:c2:27:b9:ec:90:1f:15:7d:
b0:84:fa:39:9e:0f:e1:5c:b4:6a:42:9a:64:4f:60:
d3:ff:86:91:54:33:91:40:90:f8:8d:ab:b4:bf:8c:
7d:0c:8d:e3:23:58:d0:b8:64:32:77:8e:39:13:20:
96:2d:51:b4:58:0f:5f:1b:55:0e:1e:41:8a:6c:60:
1b:d2:21:b1:64:98:32:d1:89:d0:6c:90:fd:a5:bb:
f6:f5:a1:84:d5:55:28:78:a4:1e:f4:a2:c0:c5:4e:
57:48:bd:26:05:f0:a7:50:a3:e2:58:1e:be:4c:cf:
e0:03:6e:90:c2:d2:38:76:4e:c4:c3:08:6b:82:c9:
2e:0a:78:56:43:26:f7:cb:32:10:d4:9a:e1:f7:87:
a4:4e:a5:eb:4d:df:8c:f9:ce:da:3f:1f:ef:01:c0:
b2:38:b3:9c:10:2e:08:dc:84:6b:a7:b0:a5:d4:a5:
e9:a8:2c:6c:7c:b4:1a:29:c7:3b:38:de:c6:9c:87:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:CE:94:EE:D1:CE:20:CE:82:DC:A3:5B:9C:F8:BA:69:27:A9:21
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:65:b5:7e:f5:c9:58:4b:5d:97:94:a7:6c:e1:bd:93:77:ec:
ac:99:4a:bf:39:51:b8:e3:85:b5:bd:a1:02:8b:3b:d4:ec:53:
31:45:8b:7d:6c:34:91:49:38:30:91:05:d7:df:56:ce:08:72:
56:cd:e9:de:6d:2e:5f:b7:12:97:23:0f:b3:de:ed:e0:47:0f:
6b:2d:36:6d:32:a5:41:01:30:96:6b:4d:c4:09:c2:6c:3c:69:
48:40:f3:58:ce:2c:fe:d9:37:59:94:60:5c:a5:d7:87:ef:1c:
1a:2b:20:64:4b:1c:21:6b:9d:e7:6d:cc:c8:ec:9e:10:f8:f4:
72:ce:14:72:aa:d5:ec:80:9a:38:51:f5:4b:cb:54:e4:9c:2e:
72:3d:3f:49:ef:a3:32:e3:bf:b4:64:87:b9:6b:d4:b4:e5:a9:
dc:cc:a1:b4:b9:86:a3:60:6c:a7:fa:a1:82:d0:d9:ab:f2:02:
5f:50:b1:f1:eb:64:f6:5b:36:9c:e5:f9:d3:ef:53:bb:f4:ec:
4a:75:75:31:8f:f3:53:c6:73:9d:63:08:1b:70:6c:15:6e:56:
2a:2b:bb:9f:68:10:c5:ca:30:66:8f:68:cf:ca:1b:58:83:e4:
55:58:ed:4c:89:68:16:82:ed:f2:a7:f0:68:48:bd:fe:70:de:
f8:8e:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:37 2026 by rpki-client