Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: sVhr2j0CjPlwsfbrBIE19t3SB2w7ppagFJDpQBqUhnI=
Subject key identifier: 36:C7:09:D2:90:D1:AA:5D:0E:E0:B5:86:9F:42:51:98:34:A0:3E:B5
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 01A16C48586C99F54AAD34C05C4F1C65436B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1ABB
Signing time: Sat 24 Oct 2026 05:00:42 +0000
Manifest this update: Sat 24 Oct 2026 05:00:42 +0000
Manifest next update: Sun 25 Oct 2026 05:00:42 +0000
Files and hashes: 1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: 7rGgN5KSW/znTc9vNL5SxdWcVZvM8WWqcbDzAsmiCLI=)
3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:58:6c:99:f5:4a:ad:34:c0:5c:4f:1c:65:43:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Oct 24 05:00:42 2026 GMT
Not After : Oct 25 05:00:42 2026 GMT
Subject: CN=36c709d290d1aa5d0ee0b5869f42519834a03eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:f7:e7:75:bc:16:56:b6:08:80:e4:f3:27:
da:35:4b:0b:7b:4f:37:39:3a:38:6c:c2:e2:f7:f1:
91:39:9c:45:8a:24:c9:9e:83:a5:cd:f8:6a:61:31:
76:24:31:34:89:1a:a4:f1:fd:ea:7a:1d:5f:91:86:
d4:8f:a2:7b:da:67:eb:45:c3:89:70:a1:9e:a5:f6:
e1:02:f5:8f:08:a4:a2:75:17:bd:31:dd:5a:dd:af:
bc:7a:a2:9e:6a:1f:f5:c5:b8:0c:38:80:a7:3d:25:
49:15:de:5c:01:36:70:aa:f1:06:f1:88:30:bf:b1:
53:55:a6:61:53:ea:e0:65:f6:b6:3f:e0:98:96:20:
ea:27:9b:06:e2:d7:cf:94:59:0c:c7:b5:72:92:69:
c6:76:a1:96:c8:7e:90:0d:a9:ec:94:33:98:80:1a:
5a:aa:61:06:d2:64:db:63:f7:98:46:a4:5d:48:21:
8e:6f:45:b9:db:4b:6e:19:2a:31:f8:a6:1b:67:17:
fe:45:2b:0e:b1:67:1d:32:b1:4e:41:fa:96:a6:45:
45:5d:c2:d9:84:d5:3f:cb:28:35:65:f9:55:ea:78:
9d:c4:7d:68:1b:3f:6b:d0:91:86:4b:50:d0:8f:71:
ce:be:20:24:8f:64:12:45:01:b4:1e:b7:bc:9b:10:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C7:09:D2:90:D1:AA:5D:0E:E0:B5:86:9F:42:51:98:34:A0:3E:B5
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:bd:fd:c9:bf:c7:dc:eb:56:43:8d:1a:19:e7:d4:49:1f:
cb:6a:16:ed:c5:d4:91:2e:38:8a:7f:87:0e:f4:6a:a4:80:d0:
bd:90:de:f2:83:f4:ff:28:63:b8:00:d1:dd:ef:62:34:79:ad:
14:ba:58:b0:f9:63:f9:f0:0e:c9:2e:e7:0a:80:12:08:6b:2e:
2b:78:a8:c2:b2:19:59:a6:c0:62:38:0f:e4:54:6d:d4:2e:48:
1e:4c:ad:7e:4c:30:21:67:94:97:2e:b9:1b:b5:5b:17:87:f5:
56:73:06:09:4a:29:6d:58:5c:e5:16:11:99:2d:7c:1f:6a:bf:
c2:66:2d:5a:39:cb:c2:cd:05:6a:1d:40:74:55:3b:b6:5c:7c:
5b:47:18:71:af:df:3c:9a:e5:cf:3f:46:17:77:ac:b8:f2:5a:
ba:d9:92:a7:ec:fc:14:78:84:34:55:27:c4:5f:e4:a4:93:57:
2e:6c:7d:9d:75:9d:65:7c:9d:a6:ad:6e:24:3f:41:a5:b5:37:
70:f4:3f:2e:8d:d3:70:7b:e7:81:e5:73:cb:83:58:47:2d:25:
6d:a8:5c:f1:e3:65:89:37:4a:7f:ab:90:64:17:3b:4a:89:24:
34:88:02:ec:b1:e1:ab:e4:95:b9:db:54:fd:58:80:c0:71:1a:
08:79:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:10:50 2026 by rpki-client