Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
File: HlcDhG16g2S-wwMDTbkay_9C2gw.mft (raw, json)
Hash identifier: YWWSEQBmpX7uiZCDJLLpdbvZp08WkImgOCm9j+Es2pg=
Subject key identifier: 0E:B3:F8:08:8D:62:98:4A:40:10:46:6A:2E:53:9D:BD:27:23:F0:C9
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Certificate issuer: /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial: 01A1811996002484D8757D60CE68A8DC509C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
Manifest number: 0E88
Signing time: Wed 28 Oct 2026 06:01:39 +0000
Manifest this update: Wed 28 Oct 2026 06:01:39 +0000
Manifest next update: Thu 29 Oct 2026 06:01:39 +0000
Files and hashes: 1: HlcDhG16g2S-wwMDTbkay_9C2gw.crl (hash: XbRNcqlBKKKSfW8xIMXj+sB5UB1pNJUzZ6kstGiTrdQ=)
2: brOPRHZE8w8OlykjjLgAfmNZ_2E.roa (hash: KdHvIOBRCGI/cneTU0VrbKbHmdpXYBJ4OfKXRKTAahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:96:00:24:84:d8:75:7d:60:ce:68:a8:dc:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
Validity
Not Before: Oct 28 06:01:39 2026 GMT
Not After : Oct 29 06:01:39 2026 GMT
Subject: CN=0eb3f8088d62984a4010466a2e539dbd2723f0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:ba:e7:f8:25:42:01:9f:56:b9:5d:25:64:
8e:37:26:e9:25:59:d2:92:02:3b:90:2c:7d:be:59:
b9:7b:fd:ef:fe:bf:5b:e1:68:04:4c:34:d0:3f:46:
c6:d8:ed:8e:24:de:18:f1:24:6a:41:e5:5e:1d:4a:
bf:2b:2f:1a:6d:52:41:b7:04:ff:1c:05:38:71:8e:
3c:19:ab:5c:a6:89:38:9a:14:45:20:2b:f9:2e:34:
2d:00:fb:76:36:99:fe:11:c4:f0:ec:73:d8:95:90:
ea:ad:7a:a1:c4:ed:97:96:04:b6:d8:82:aa:1d:38:
d1:72:ff:91:74:f2:d9:2d:d7:cd:e7:32:f5:5c:85:
c2:8c:fd:1f:d3:3f:6b:51:2a:4b:05:1a:ad:6b:0c:
4b:fe:c3:e7:06:aa:ad:56:6c:01:59:73:c5:6f:85:
ad:55:27:80:9d:4e:f4:46:60:f5:2c:3b:51:d7:89:
7d:25:cb:d8:a0:1c:30:53:8b:b6:7e:84:9e:ed:d9:
40:65:27:09:4a:f7:cb:ee:6c:37:99:4e:e2:8d:c2:
7e:ce:5e:4d:a5:31:0d:43:0a:7f:37:b8:3f:5b:8a:
29:f7:f9:6c:4e:18:21:ed:71:c0:47:05:4e:7c:20:
75:6a:2e:81:7d:20:1d:af:12:c4:5e:e5:d3:01:94:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:F8:08:8D:62:98:4A:40:10:46:6A:2E:53:9D:BD:27:23:F0:C9
X509v3 Authority Key Identifier:
keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7f:62:83:de:d1:4a:16:fc:c6:e5:4d:35:d3:15:01:69:50:
dc:9b:35:10:49:da:3d:ae:07:b2:56:4e:5b:5d:1e:7b:9d:69:
f1:71:b1:30:25:8b:5c:a5:d8:7d:ed:a0:4e:c4:e5:01:f0:92:
4a:52:e2:52:56:0f:ae:95:50:16:56:94:82:88:ff:a2:18:68:
f4:f4:3d:c6:c5:12:10:9a:c3:5b:44:4e:67:36:88:a4:9b:65:
02:00:ad:d2:fc:5c:3d:50:7b:39:a3:66:b7:ce:d0:81:f4:c6:
41:60:37:eb:cd:b9:2d:80:be:27:a2:89:2c:92:8f:88:f3:18:
59:05:cf:bf:c0:ec:31:b0:9f:d1:96:a5:a2:59:3c:c6:7c:fa:
ab:ca:91:f2:b0:d4:cc:b3:d7:31:fa:94:43:53:bb:e4:77:aa:
0b:d0:63:36:3c:b9:b1:3d:d5:6e:e9:1a:12:95:93:6b:a9:a5:
1a:12:f9:a3:dd:36:6a:7f:6f:91:a7:d4:34:b0:57:4e:13:b2:
6d:04:ed:1d:b3:04:2b:d2:0b:af:1d:a9:c1:ef:a3:d6:8e:59:
7d:aa:5e:fd:cb:a9:f5:07:ab:43:ac:e4:13:fa:e8:3a:4f:34:
af:73:b2:14:36:28:ed:f8:ec:b8:d9:2b:d3:7d:9b:62:2b:18:
68:ca:e2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGZYAJITYdX1gzmio3FCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNTcwMzg0NmQ3YTgzNjRiZWMzMDMwMzRkYjkxYWNiZmY0
MmRhMGMwHhcNMjYxMDI4MDYwMTM5WhcNMjYxMDI5MDYwMTM5WjAzMTEwLwYDVQQD
EygwZWIzZjgwODhkNjI5ODRhNDAxMDQ2NmEyZTUzOWRiZDI3MjNmMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kq65/glQgGfVrldJWSONybpJVnS
kgI7kCx9vlm5e/3v/r9b4WgETDTQP0bG2O2OJN4Y8SRqQeVeHUq/Ky8abVJBtwT/
HAU4cY48Gatcpok4mhRFICv5LjQtAPt2Npn+EcTw7HPYlZDqrXqhxO2XlgS22IKq
HTjRcv+RdPLZLdfN5zL1XIXCjP0f0z9rUSpLBRqtawxL/sPnBqqtVmwBWXPFb4Wt
VSeAnU70RmD1LDtR14l9JcvYoBwwU4u2foSe7dlAZScJSvfL7mw3mU7ijcJ+zl5N
pTENQwp/N7g/W4op9/lsThgh7XHARwVOfCB1ai6BfSAdrxLEXuXTAZSnlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6z+AiNYphKQBBGai5Tnb0nI/DJMB8GA1UdIwQY
MBaAFB5XA4RteoNkvsMDA025Gsv/QtoMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYzY1OGYtYTUyOC00MzYwLWI1OGMt
MDdiMDllNDY1MTE5LzEvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYzY1OGYtYTUyOC00MzYwLWI1OGMtMDdiMDllNDY1MTE5
LzEvSGxjRGhHMTZnMlMtd3dNRFRia2F5XzlDMmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX9ig97R
Shb8xuVNNdMVAWlQ3Js1EEnaPa4HslZOW10ee51p8XGxMCWLXKXYfe2gTsTlAfCS
SlLiUlYPrpVQFlaUgoj/ohho9PQ9xsUSEJrDW0ROZzaIpJtlAgCt0vxcPVB7OaNm
t87QgfTGQWA36825LYC+J6KJLJKPiPMYWQXPv8DsMbCf0Zalolk8xnz6q8qR8rDU
zLPXMfqUQ1O75HeqC9BjNjy5sT3VbukaEpWTa6mlGhL5o902an9vkafUNLBXThOy
bQTtHbMEK9ILrx2pwe+j1o5Zfape/cup9QerQ6zkE/roOk80r3OyFDYo7fjsuNkr
032bYisYaMrivg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:49 2026 by rpki-client