Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: X1m61Q+zv/gaMhtkigpyrISA5yetPPbpevzwdQqY7q0=
Subject key identifier: 40:63:9D:3A:EA:B5:86:AA:C4:1C:06:03:9B:88:4A:6C:F1:2C:3E:78
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01A06F4C7855457B8504B3DE69996E70FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1A41
Signing time: Sat 05 Sep 2026 02:01:17 +0000
Manifest this update: Sat 05 Sep 2026 02:01:17 +0000
Manifest next update: Sun 06 Sep 2026 02:01:17 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: EglfLz51hHSXtoxb0wViOHEI0xsdMhz7OZXsX0aq/PY=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (hash: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:78:55:45:7b:85:04:b3:de:69:99:6e:70:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Sep 5 02:01:17 2026 GMT
Not After : Sep 6 02:01:17 2026 GMT
Subject: CN=40639d3aeab586aac41c06039b884a6cf12c3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:29:04:20:99:84:6b:03:4c:0f:44:dd:de:
e3:9c:87:39:1b:3a:18:48:e9:0b:cc:ab:dc:c0:d2:
21:d1:b0:04:52:73:54:b4:a4:d4:cf:39:7a:27:bb:
12:a5:24:b9:86:fe:04:f8:02:80:fb:33:16:d6:97:
f7:47:f7:8c:fc:64:47:7d:cb:c1:5f:43:7c:56:09:
22:e7:c0:64:b7:68:6a:38:e6:c4:8b:95:94:b6:b1:
d6:17:8b:6b:5b:d9:c7:6a:64:5a:8b:0f:84:82:fb:
85:b1:ff:7d:8c:66:2a:6d:0c:de:66:71:65:02:07:
1f:e6:0e:a0:ed:93:3d:59:68:fa:ac:04:e4:49:b1:
6d:5d:ce:0c:a4:e0:b1:63:a1:e8:be:b4:86:9d:ea:
90:23:ea:96:1e:61:d3:21:f8:08:85:d1:c9:fa:97:
46:39:f5:1c:5b:6c:23:4e:37:e7:5c:17:7e:f5:b8:
f2:2b:c5:17:63:bf:7e:45:97:dd:5a:22:b7:8c:5b:
57:78:9e:1f:cb:bd:36:d6:5c:90:8f:d6:b7:8c:cc:
28:dc:a9:da:88:2b:ed:97:cc:36:1e:f0:44:71:cd:
42:df:84:ea:53:69:07:50:3f:07:31:a1:d7:d5:5f:
3b:fa:8c:cf:64:ef:a7:d3:f0:37:81:fb:39:b5:6a:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:9D:3A:EA:B5:86:AA:C4:1C:06:03:9B:88:4A:6C:F1:2C:3E:78
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:97:90:3c:25:02:43:5f:64:ac:90:80:f4:13:c1:47:98:
39:12:63:78:b7:66:75:fc:49:de:37:d5:bf:41:3f:0e:4a:c4:
55:57:db:db:b8:55:1a:a4:73:d6:b1:55:d5:79:85:71:49:02:
94:a2:de:ca:dc:50:ab:be:9d:5d:e3:d4:a9:dd:e9:54:ef:a9:
24:6e:3b:c6:96:5a:c4:85:e8:45:44:16:4d:41:b6:6f:4d:8f:
4b:a5:b1:0a:f8:f5:a4:21:e5:1b:98:99:71:a2:e5:4a:c3:ba:
5d:0f:2b:b0:c3:28:0a:a9:d7:1d:0d:d9:e7:06:4a:3a:7d:d8:
be:20:7b:d6:ff:6d:9e:6b:21:61:15:cf:62:32:10:1b:73:e2:
82:8a:ce:fc:7d:d7:a3:d6:31:54:9d:c9:78:16:b5:4b:ee:f4:
c3:3b:80:80:95:c5:c7:9e:9b:98:8e:68:a0:20:6e:2c:a1:24:
02:19:9f:ca:6b:17:b4:6b:f7:ca:0e:e3:1a:ce:43:6b:7b:c7:
1b:76:ad:af:74:60:26:0f:8f:46:8d:df:8a:0f:fc:7d:b6:a4:
91:31:02:1c:d7:ac:fe:ff:89:d8:87:3d:7f:ef:b6:ea:66:54:
37:0b:93:c0:ec:cb:ad:86:18:3a:e2:53:a3:df:37:a9:d7:5c:
77:db:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:49:19 2026 by rpki-client