Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: yxbfOSpBE7/lwNSHg7TKI7fOn6kOJWjOdsDbTu+GXQU=
Subject key identifier: 84:1E:AC:4D:BB:B9:3A:5C:6F:BD:68:A7:62:F1:7D:E6:00:EC:41:FA
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019D389C1B20379A039B33DB7603357D5962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: ECutqwuConKyo/NCN598AzNlb3X1Ep6j5loTVuA9Q/M=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1b:20:37:9a:03:9b:33:db:76:03:35:7d:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=841eac4dbbb93a5c6fbd68a762f17de600ec41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:0c:2c:f7:ce:b3:75:65:2d:15:a0:e7:5b:
95:00:e6:cc:02:f6:55:d3:77:4e:10:46:d2:2c:9f:
c0:d2:01:dc:e7:7a:e8:74:bf:da:41:1a:49:88:2b:
bf:4a:d6:81:b5:97:cc:ec:3e:e0:69:e7:3a:cc:02:
0f:8e:36:bb:bd:94:de:97:b3:14:4a:c3:49:c7:38:
85:7c:b2:65:96:36:18:33:eb:f5:b1:e8:c9:42:08:
fe:a9:60:de:af:03:5e:23:24:61:56:02:28:06:b6:
fa:c5:b7:f9:25:e2:e7:ae:f7:bc:50:bd:72:71:a3:
2f:62:db:0c:85:5a:fe:8f:f9:85:ff:f7:ae:1c:a6:
66:cf:35:c9:1d:fa:2f:67:e9:75:80:db:60:28:a0:
21:cb:39:79:e9:39:d5:b6:37:37:2b:97:51:8f:dc:
15:1c:3e:23:e0:58:db:9a:bf:03:bb:35:fe:a5:7f:
0b:ec:17:15:b4:f1:f6:0e:09:24:4f:55:9a:c9:73:
33:40:d3:a0:3f:be:c9:69:2b:0f:22:8d:9a:a8:ab:
47:76:6a:14:5c:32:be:7d:6f:f5:42:33:03:e3:3d:
4c:d8:85:9d:1c:bd:5c:e6:cb:28:57:f6:37:05:ac:
2c:62:8e:32:bf:c1:36:4e:52:af:c5:02:f8:f9:ef:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:AC:4D:BB:B9:3A:5C:6F:BD:68:A7:62:F1:7D:E6:00:EC:41:FA
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e2:4b:6c:0b:20:b4:e2:35:87:f2:06:34:d7:12:b9:8d:1b:
d4:ab:e9:b0:db:e0:a3:f8:48:11:9c:9d:6e:64:c0:71:b3:96:
2d:62:f7:ca:c2:d7:30:ec:6d:ab:9d:04:c9:b1:43:43:5d:5a:
cd:df:24:f9:c4:33:be:73:9b:fd:e9:c6:17:79:c6:07:0e:e3:
2e:01:e1:7c:0b:92:5c:53:2d:64:d2:7d:35:02:f7:9b:87:ec:
d8:6d:27:4f:30:d2:0d:cd:b7:27:ca:6e:9d:64:c6:6c:b0:4d:
d0:68:d9:53:41:d0:08:6b:37:b1:49:6f:94:2b:df:d5:87:90:
fb:ac:7a:06:ef:84:e6:bd:7f:c2:e4:24:9c:e6:6f:b9:d7:81:
e9:3c:25:32:73:06:2d:62:73:14:a8:90:ac:4b:b2:7f:9a:f7:
be:a3:3a:f2:0c:3b:38:3d:ac:be:1a:70:7e:7c:41:a6:25:7b:
d6:a6:5f:df:68:f4:3e:8b:c2:ba:1c:e1:30:27:53:42:75:f7:
c8:6b:0e:60:e4:c3:20:19:21:f8:6e:61:ce:b0:9e:c1:41:0e:
d8:67:d5:ed:22:72:a0:f2:f8:0d:ff:cb:99:02:3e:75:80:0f:
4c:fb:09:18:de:15:c3:a4:1a:e4:d3:c1:2a:a1:d3:c5:ec:bb:
6e:c1:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:47 2026 by rpki-client