Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
File: HlcDhG16g2S-wwMDTbkay_9C2gw.mft (raw, json)
Hash identifier: YP85MVe26BAG/mhrBafZAusHnz4nq3hgFUnfGKJpv5k=
Subject key identifier: 31:17:A5:E1:55:32:E2:62:22:A4:0A:AB:61:EC:B9:47:54:61:57:24
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Certificate issuer: /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial: 01A0841C449B860CD5D139EBBE4CB2544452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
Manifest number: 0E05
Signing time: Wed 09 Sep 2026 03:00:40 +0000
Manifest this update: Wed 09 Sep 2026 03:00:40 +0000
Manifest next update: Thu 10 Sep 2026 03:00:40 +0000
Files and hashes: 1: HlcDhG16g2S-wwMDTbkay_9C2gw.crl (hash: Ms6lFeO0zvTTgNAX6qKMJ2LWtI296la9Zkq9Wc9Ukbg=)
2: brOPRHZE8w8OlykjjLgAfmNZ_2E.roa (hash: KdHvIOBRCGI/cneTU0VrbKbHmdpXYBJ4OfKXRKTAahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:1c:44:9b:86:0c:d5:d1:39:eb:be:4c:b2:54:44:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
Validity
Not Before: Sep 9 03:00:40 2026 GMT
Not After : Sep 10 03:00:40 2026 GMT
Subject: CN=3117a5e15532e26222a40aab61ecb94754615724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:16:12:c7:9b:19:39:34:10:23:4e:22:47:
a6:45:a1:ff:3e:72:4d:40:c0:c0:29:11:d0:66:de:
80:e1:9e:f4:96:d6:94:c1:e3:39:17:82:f2:84:b4:
1a:c1:53:d4:2b:27:3f:24:67:9e:bf:e5:5f:d4:5f:
3f:ad:a0:1e:50:10:d9:5e:d7:a5:58:73:b2:76:d3:
5c:36:5a:6f:9d:2d:80:6d:66:ea:22:1c:30:c5:f1:
1c:79:53:73:b9:bb:fd:5f:e6:4f:10:d4:b4:58:f2:
aa:89:dc:81:49:c4:a5:c4:f4:aa:75:dc:72:e4:7e:
df:c5:a2:5e:92:22:c4:64:eb:40:41:c1:e0:ca:dc:
21:86:4b:28:37:f2:74:b3:df:48:40:68:76:bc:90:
07:77:7a:87:65:6e:ed:13:e2:c3:bf:da:dc:00:fb:
a6:d5:4e:68:fa:20:44:61:3d:28:8d:97:62:65:91:
c9:8f:38:9e:77:6a:46:30:96:36:8c:c2:b2:e8:48:
af:f5:2c:a1:91:43:44:81:6d:39:96:2e:28:28:05:
78:bd:c0:72:3f:5c:2b:06:bc:7f:31:c1:c7:1c:66:
d9:34:53:0d:30:08:8e:a9:fd:9a:3e:c1:26:e3:a3:
0f:1e:f7:8c:50:90:71:4d:9e:27:b1:97:17:b7:08:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:A5:E1:55:32:E2:62:22:A4:0A:AB:61:EC:B9:47:54:61:57:24
X509v3 Authority Key Identifier:
keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ce:81:d7:0b:48:1b:b3:bb:03:7b:e4:67:56:c5:98:80:40:
16:f3:ba:77:23:2d:82:0d:d7:bb:d9:ae:81:8e:be:d3:e2:88:
0e:07:4c:92:15:2e:b2:e8:eb:9e:83:5a:76:8d:78:ed:50:2a:
2a:62:05:f1:68:1c:3b:8b:4d:0a:42:af:00:d5:e5:f1:47:00:
f9:a5:87:e0:52:74:bf:a2:c4:e6:14:af:a5:0d:13:1e:63:a3:
bb:f8:6b:82:2a:e1:cd:6b:df:30:be:22:4d:db:62:28:70:eb:
c4:3e:82:d1:f5:71:b1:aa:95:40:4b:1b:6e:c1:6c:52:c5:1c:
84:5f:b4:e3:c1:16:23:76:31:e8:2e:3e:9d:2c:91:01:ba:c4:
62:50:3c:09:8d:6d:17:03:9c:6a:e1:df:6a:7f:ad:87:05:b7:
43:69:d9:c1:5c:68:50:af:26:83:e4:8d:b8:c9:8e:5b:32:28:
5b:38:1c:89:45:35:78:11:f8:43:ec:2c:b0:65:a4:82:c6:46:
81:55:6b:37:7e:ce:72:5c:73:d0:67:c4:09:d0:30:ff:dc:62:
ea:96:f8:65:f8:a8:f3:2d:c4:24:fe:73:6e:1b:e5:b6:33:6d:
6a:c5:47:72:5d:77:ae:27:d3:52:f7:8a:09:ca:ae:c3:86:5e:
8c:0e:5d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCEHESbhgzV0TnrvkyyVERSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNTcwMzg0NmQ3YTgzNjRiZWMzMDMwMzRkYjkxYWNiZmY0
MmRhMGMwHhcNMjYwOTA5MDMwMDQwWhcNMjYwOTEwMDMwMDQwWjAzMTEwLwYDVQQD
EygzMTE3YTVlMTU1MzJlMjYyMjJhNDBhYWI2MWVjYjk0NzU0NjE1NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvncWEsebGTk0ECNOIkemRaH/PnJN
QMDAKRHQZt6A4Z70ltaUweM5F4LyhLQawVPUKyc/JGeev+Vf1F8/raAeUBDZXtel
WHOydtNcNlpvnS2AbWbqIhwwxfEceVNzubv9X+ZPENS0WPKqidyBScSlxPSqddxy
5H7fxaJekiLEZOtAQcHgytwhhksoN/J0s99IQGh2vJAHd3qHZW7tE+LDv9rcAPum
1U5o+iBEYT0ojZdiZZHJjzied2pGMJY2jMKy6Eiv9SyhkUNEgW05li4oKAV4vcBy
P1wrBrx/McHHHGbZNFMNMAiOqf2aPsEm46MPHveMUJBxTZ4nsZcXtwjhKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEXpeFVMuJiIqQKq2HsuUdUYVckMB8GA1UdIwQY
MBaAFB5XA4RteoNkvsMDA025Gsv/QtoMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYzY1OGYtYTUyOC00MzYwLWI1OGMt
MDdiMDllNDY1MTE5LzEvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYzY1OGYtYTUyOC00MzYwLWI1OGMtMDdiMDllNDY1MTE5
LzEvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK86B1wtI
G7O7A3vkZ1bFmIBAFvO6dyMtgg3Xu9mugY6+0+KIDgdMkhUusujrnoNado147VAq
KmIF8WgcO4tNCkKvANXl8UcA+aWH4FJ0v6LE5hSvpQ0THmOju/hrgirhzWvfML4i
TdtiKHDrxD6C0fVxsaqVQEsbbsFsUsUchF+048EWI3Yx6C4+nSyRAbrEYlA8CY1t
FwOcauHfan+thwW3Q2nZwVxoUK8mg+SNuMmOWzIoWzgciUU1eBH4Q+wssGWkgsZG
gVVrN37Oclxz0GfECdAw/9xi6pb4Zfio8y3EJP5zbhvltjNtasVHcl13rifTUveK
Ccquw4ZejA5dGw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 09:35:41 2026 by rpki-client