Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: i6TQBSlqKXSip9BxeOQBsS0W3HNv+VIjztkyC7Tu54k=
Subject key identifier: E3:B1:46:16:02:E2:AC:E6:B2:F6:DD:9A:5C:2C:FC:0B:0B:EE:2A:8B
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019F9F95CB53D15DD9FC8AF1F7F3ED4CD296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 19DA
Signing time: Sun 26 Jul 2026 18:00:21 +0000
Manifest this update: Sun 26 Jul 2026 18:00:21 +0000
Manifest next update: Mon 27 Jul 2026 18:00:21 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: lKlhfLS2EcmVDhmGD0tCp6ulW/KegsgYwSRvgbDcqv0=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:cb:53:d1:5d:d9:fc:8a:f1:f7:f3:ed:4c:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Jul 26 18:00:21 2026 GMT
Not After : Jul 27 18:00:21 2026 GMT
Subject: CN=e3b1461602e2ace6b2f6dd9a5c2cfc0b0bee2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:99:13:ba:8c:14:07:d8:e8:e1:7f:b3:af:
90:2e:37:62:9f:19:01:2b:2c:2a:c0:2f:5d:59:39:
91:e8:6e:8e:aa:16:d1:3b:12:73:05:c3:4c:77:09:
78:39:29:d7:6b:61:00:27:48:e0:e3:1a:3a:dd:e1:
35:6b:77:9b:a9:9e:f9:b4:20:30:f8:aa:ea:84:79:
a7:3a:e2:25:da:bb:4e:68:eb:7a:99:6d:39:cf:93:
62:14:c7:1b:37:cc:dd:fe:46:18:b2:58:43:9a:02:
59:d1:25:25:1d:0f:60:3a:1c:22:18:a5:25:e3:72:
de:d8:8e:a2:f3:7d:a0:44:0b:98:87:93:5a:91:2e:
11:0a:97:2a:65:0f:2a:5d:7d:8f:d5:98:df:9a:4e:
2b:6a:40:64:0b:4f:60:e6:62:c3:95:6f:07:ed:30:
6f:cf:5e:e4:2e:76:89:66:23:41:be:08:3e:38:1e:
81:9c:b6:56:22:16:8b:af:2e:a5:21:f3:25:16:02:
61:f7:50:c4:e8:31:36:14:18:fb:67:bb:fd:ad:2d:
a5:e7:54:10:b3:de:94:66:b2:4c:89:26:a0:d9:d3:
4e:bc:1e:b2:c4:3b:e8:d4:39:18:8d:78:39:0c:80:
ea:86:3a:e8:1a:6a:ca:06:96:46:b5:5a:14:9a:f3:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:46:16:02:E2:AC:E6:B2:F6:DD:9A:5C:2C:FC:0B:0B:EE:2A:8B
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:27:1f:4b:79:ad:08:56:f1:1b:da:6e:ff:63:82:86:93:
b7:fd:08:d5:3b:0d:9a:8f:53:43:19:97:d2:54:23:81:17:c9:
50:3a:23:cd:aa:41:96:e1:d5:69:7c:49:f2:34:e0:7a:48:4c:
87:3b:97:cb:fe:0b:d5:62:83:aa:4d:17:65:db:6b:04:ec:22:
58:2d:1d:71:ab:20:8b:c6:6f:65:99:10:d8:86:6b:98:0f:55:
a5:e7:3c:e2:66:e9:b9:e2:6a:fd:63:95:1e:da:a6:c4:70:7e:
5f:7d:a3:e7:23:15:61:73:97:03:38:05:a4:e5:d7:88:30:f1:
58:2d:9c:c7:cb:12:51:1e:f9:10:1a:52:35:a8:e8:4a:78:ee:
d9:ca:cb:b2:4f:e6:65:bb:af:17:5d:0c:85:0a:7a:27:db:f6:
8a:c3:d3:f7:ae:ee:50:0c:a7:17:8e:52:fd:58:c0:18:4e:34:
13:2f:b3:28:23:91:4f:fc:42:00:fd:4c:0f:00:dc:5a:e4:af:
f3:9d:9a:65:51:2a:64:9b:6b:f3:65:80:fa:26:55:ee:d4:1c:
e4:c9:19:a8:4d:f3:89:05:2b:dc:b4:7a:9e:47:63:ac:fe:ba:
1b:5c:f5:9e:f8:32:b1:79:15:d1:f1:ab:d9:5a:2b:1f:45:94:
47:54:48:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flctT0V3Z/Irx9/PtTNKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWFhZjNkMDY4M2RjOGEwZDU4YzY0MzgyNmUxNjZkM2My
OGNjYTkwHhcNMjYwNzI2MTgwMDIxWhcNMjYwNzI3MTgwMDIxWjAzMTEwLwYDVQQD
EyhlM2IxNDYxNjAyZTJhY2U2YjJmNmRkOWE1YzJjZmMwYjBiZWUyYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HGZE7qMFAfY6OF/s6+QLjdinxkB
KywqwC9dWTmR6G6OqhbROxJzBcNMdwl4OSnXa2EAJ0jg4xo63eE1a3ebqZ75tCAw
+KrqhHmnOuIl2rtOaOt6mW05z5NiFMcbN8zd/kYYslhDmgJZ0SUlHQ9gOhwiGKUl
43Le2I6i832gRAuYh5NakS4RCpcqZQ8qXX2P1Zjfmk4rakBkC09g5mLDlW8H7TBv
z17kLnaJZiNBvgg+OB6BnLZWIhaLry6lIfMlFgJh91DE6DE2FBj7Z7v9rS2l51QQ
s96UZrJMiSag2dNOvB6yxDvo1DkYjXg5DIDqhjroGmrKBpZGtVoUmvPKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOxRhYC4qzmsvbdmlws/AsL7iqLMB8GA1UdIwQY
MBaAFB5arz0Gg9yKDVjGQ4JuFm08KMypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMt
NGNkMzhiNzU4ZDVjLzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMtNGNkMzhiNzU4ZDVj
LzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSMnH0t5
rQhW8Rvabv9jgoaTt/0I1TsNmo9TQxmX0lQjgRfJUDojzapBluHVaXxJ8jTgekhM
hzuXy/4L1WKDqk0XZdtrBOwiWC0dcasgi8ZvZZkQ2IZrmA9Vpec84mbpueJq/WOV
HtqmxHB+X32j5yMVYXOXAzgFpOXXiDDxWC2cx8sSUR75EBpSNajoSnju2crLsk/m
ZbuvF10MhQp6J9v2isPT967uUAynF45S/VjAGE40Ey+zKCORT/xCAP1MDwDcWuSv
852aZVEqZJtr82WA+iZV7tQc5MkZqE3ziQUr3LR6nkdjrP66G1z1nvgysXkV0fGr
2VorH0WUR1RI6A==
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:24:28 2026 by rpki-client