Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: inFjE6/QBuOuGh+FpIYqo36GHkyi1CtbyBJR2yQOvsE=
Subject key identifier: E1:29:76:88:CD:36:C9:0E:F1:9D:B2:64:9D:BD:81:AF:2D:93:56:09
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 01A1998EC60E4E4749E792DFAE339305474F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1AE0
Signing time: Mon 02 Nov 2026 00:00:33 +0000
Manifest this update: Mon 02 Nov 2026 00:00:33 +0000
Manifest next update: Tue 03 Nov 2026 00:00:33 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: cZXat3tRarB8m55Zmhvw2obDp7BfuBFQdRSIdJckHFk=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:8e:c6:0e:4e:47:49:e7:92:df:ae:33:93:05:47:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Nov 2 00:00:33 2026 GMT
Not After : Nov 3 00:00:33 2026 GMT
Subject: CN=e1297688cd36c90ef19db2649dbd81af2d935609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:39:8b:1f:4c:b0:e6:20:2f:d9:73:50:58:
c5:dc:2c:c9:99:61:64:cb:0c:2c:a1:6c:10:89:09:
b0:07:35:c1:fa:57:9d:f0:b7:95:c6:4d:34:e4:48:
41:c7:d6:00:35:7c:26:a0:9d:82:6d:69:bb:56:6f:
8f:82:6c:0e:b7:77:fe:88:eb:c1:66:d1:90:8c:19:
e8:ca:60:72:57:d9:1e:ea:94:d8:a7:f7:a1:ff:fb:
8d:c7:5e:59:65:82:51:d2:63:8a:1f:9e:71:82:91:
7f:31:08:8d:0f:f0:7b:af:ab:8d:a0:0d:e9:d9:b3:
d0:a8:49:a9:33:88:46:78:fa:52:c3:1c:0d:f2:b4:
04:6c:75:a7:62:08:e0:d1:32:76:71:b7:57:78:44:
69:51:29:48:74:fe:e4:85:2b:81:43:91:08:3e:c3:
26:ad:11:50:60:28:37:38:bc:84:d1:f9:44:91:7c:
25:c2:fb:16:a2:4c:77:11:83:43:88:bf:27:e9:84:
e8:29:09:8a:a0:c6:c9:68:9e:5b:b2:23:7a:92:9b:
db:cd:b5:ef:50:01:2f:89:5c:69:05:48:72:fb:42:
bb:92:6f:cd:98:50:f7:59:b7:7e:d4:64:fd:ff:b5:
38:fe:29:5f:d2:50:12:0e:8b:f3:41:86:7f:0a:21:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:76:88:CD:36:C9:0E:F1:9D:B2:64:9D:BD:81:AF:2D:93:56:09
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:08:f4:dd:e4:52:36:69:07:28:da:f2:76:33:a6:8c:30:c3:
f8:49:ad:d2:86:aa:f1:c8:e8:03:3e:1b:cf:3e:1b:6c:9a:62:
6e:4f:42:e9:72:d0:6e:48:2c:02:c4:eb:e4:3e:3b:17:4d:28:
c7:80:f7:e0:80:8b:4c:ba:1e:da:dc:92:57:8b:3c:db:a1:15:
21:09:df:c4:48:60:3d:14:42:ab:1d:ec:65:ff:72:8c:9e:8d:
fa:58:08:dc:ba:41:1d:88:02:a5:1f:ea:38:a3:88:b4:d5:48:
7b:74:3e:64:5a:04:dd:72:38:cf:10:ee:af:59:fd:a3:a8:3a:
28:3b:0a:1f:b9:e2:ea:fd:34:56:9a:ae:2f:a9:59:61:de:54:
4c:4e:31:b1:71:b2:c3:99:b6:b4:0d:2e:09:56:c2:6d:9a:e8:
92:15:6e:c1:08:10:54:c7:a7:f5:c7:67:95:fd:8d:79:ef:f9:
0e:0e:14:74:38:08:9d:28:35:63:5f:d4:47:b8:88:a3:7d:4c:
51:cb:b9:f7:00:7e:40:72:0d:57:ca:7a:c3:29:de:de:c0:09:
bb:86:76:68:90:a2:c3:88:83:c3:f7:df:6e:eb:95:89:99:8c:
b9:6c:68:d3:96:d1:b5:a5:02:09:c2:76:b5:ff:5b:75:84:9c:
37:e9:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:28:30 2026 by rpki-client