Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: j4wYQu4zy4tITOKVQVCfl4kKtB5Jb1WiSyFf4Hi9Ulk=
Subject key identifier: 31:4F:E3:14:A6:ED:2E:85:56:03:B1:01:68:31:5C:A9:A4:BC:F7:35
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 01A08754A6828D5E8DE98A2FFC25A22DB7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1A52
Signing time: Wed 09 Sep 2026 18:01:06 +0000
Manifest this update: Wed 09 Sep 2026 18:01:06 +0000
Manifest next update: Thu 10 Sep 2026 18:01:06 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: n60gr7NgA+hNG1toVlrcltgAfdnIp1GlYGWjZ+5Rclw=)
2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:54:a6:82:8d:5e:8d:e9:8a:2f:fc:25:a2:2d:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Sep 9 18:01:06 2026 GMT
Not After : Sep 10 18:01:06 2026 GMT
Subject: CN=314fe314a6ed2e855603b10168315ca9a4bcf735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:45:de:0c:c7:01:b7:5a:fa:ed:fd:72:43:
a9:11:64:ab:a9:e5:f5:78:4e:65:c0:75:dc:81:0e:
bd:b0:cd:30:cd:f0:7b:c8:53:c6:51:a8:9a:82:4c:
7a:65:f4:41:35:fb:1b:19:a9:10:67:f3:27:72:4e:
71:50:28:ee:09:f5:5d:cd:25:61:ed:97:ac:9f:f7:
f5:a9:e5:fb:c4:b8:c1:b4:12:15:8e:44:7e:d4:05:
d5:8c:ce:22:d8:3c:60:29:dc:d0:90:86:d8:84:3e:
f9:03:32:19:33:d0:26:e2:69:c1:6d:a4:34:a9:a6:
02:90:38:bb:a9:82:29:90:d0:40:f9:0a:aa:d0:ef:
ef:59:99:05:1f:61:1a:73:87:66:06:de:03:94:a9:
98:a9:de:08:7d:9a:e0:11:a3:49:af:a5:f2:50:af:
e7:8e:22:7b:3c:c8:a0:66:d3:f2:af:39:86:16:8b:
61:64:60:50:14:b3:9c:eb:17:5a:b2:06:a3:2e:8f:
fa:4f:c7:3f:47:00:5b:13:89:17:d5:2f:50:69:85:
5c:a7:eb:e0:0d:6d:a6:40:42:a9:76:8d:22:1e:76:
3d:e4:b8:af:e0:68:2b:56:44:c1:b1:fa:ac:70:86:
fd:f7:39:ae:fb:e4:3e:7f:69:c5:49:d6:f8:27:b2:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:E3:14:A6:ED:2E:85:56:03:B1:01:68:31:5C:A9:A4:BC:F7:35
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:80:59:01:8f:d8:29:48:d1:9d:cc:2c:dc:2e:5c:3d:d6:
92:10:11:ad:63:a7:9b:10:01:d3:72:e7:5f:a4:b7:c0:d3:f1:
7e:b4:6a:d7:11:93:81:0e:13:6b:d4:80:a7:1d:6f:e2:a9:ab:
58:b8:8a:ad:ba:db:f2:f9:2f:e5:90:07:31:31:e9:bc:49:d4:
67:40:59:ca:d5:bd:a0:c4:43:14:21:19:ed:40:09:f5:66:15:
25:c4:64:75:72:85:9c:57:16:26:19:3e:7a:5a:a9:d4:43:99:
7e:21:4c:43:b8:bf:c6:4c:d0:27:0a:38:64:da:3a:63:c1:c1:
b8:1e:bd:4c:f2:52:3a:b4:de:4a:29:e8:57:f3:6b:47:6a:ef:
e5:66:13:2b:9e:95:20:4c:4c:37:aa:a0:ff:64:c7:9d:eb:91:
f2:ea:c4:6e:a0:e6:87:98:56:b6:df:e7:d6:80:b9:96:ee:17:
dd:b6:83:fa:a4:55:bd:ce:2d:43:a9:1a:25:67:06:da:0c:b6:
90:43:27:5e:9d:50:c8:0c:4b:f7:c9:28:f3:84:8a:33:b0:1c:
4a:ff:36:91:e5:38:be:7c:a4:6c:2f:08:91:62:9a:cc:9f:4c:
10:ea:8b:fe:fb:03:4c:9a:8c:e4:56:ce:3e:98:f8:fe:18:9f:
23:c0:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:17:42 2026 by rpki-client