Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
File: HlcDhG16g2S-wwMDTbkay_9C2gw.mft (raw, json)
Hash identifier: 6CxMs0PHDbd8I370Q1qALs6fDBhjGNDLTCErp9MBBac=
Subject key identifier: 90:8D:5A:D5:C0:31:2E:9D:66:55:6D:76:4E:2F:F7:BF:2C:37:77:19
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Certificate issuer: /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial: 019F9881C5E6CC892135BFE28FE5096FB08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
Manifest number: 0D8B
Signing time: Sat 25 Jul 2026 09:01:09 +0000
Manifest this update: Sat 25 Jul 2026 09:01:09 +0000
Manifest next update: Sun 26 Jul 2026 09:01:09 +0000
Files and hashes: 1: HlcDhG16g2S-wwMDTbkay_9C2gw.crl (hash: QR7UMOptawBaq85LMqGcvIsavL4/5DePF89nbuFxgaA=)
2: brOPRHZE8w8OlykjjLgAfmNZ_2E.roa (hash: KdHvIOBRCGI/cneTU0VrbKbHmdpXYBJ4OfKXRKTAahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:81:c5:e6:cc:89:21:35:bf:e2:8f:e5:09:6f:b0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
Validity
Not Before: Jul 25 09:01:09 2026 GMT
Not After : Jul 26 09:01:09 2026 GMT
Subject: CN=908d5ad5c0312e9d66556d764e2ff7bf2c377719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:cc:45:79:ad:2b:39:8d:37:08:9f:c6:79:
10:2c:ee:c1:72:2e:f2:47:d9:4b:df:93:52:da:95:
14:2f:44:74:81:08:9e:eb:1a:a8:20:83:3b:cc:dc:
20:13:70:af:bc:a7:a6:ed:bd:02:13:07:bd:59:55:
2e:7d:1b:64:be:99:91:de:17:55:26:3a:ae:f0:8b:
cc:30:36:a6:20:55:96:a4:ad:2d:5c:94:88:30:72:
f6:14:3d:bd:6a:1c:31:99:0b:30:c8:4c:7a:5e:23:
7c:5f:7a:bd:79:44:73:b1:36:03:14:3d:f0:c1:e9:
a8:29:50:00:46:b8:df:94:8e:c9:e2:4c:be:60:55:
73:eb:7f:59:e9:3c:99:39:94:2c:e3:53:6f:1f:22:
7b:b4:9a:54:33:7e:57:b2:53:4c:53:4d:74:94:ea:
cf:a3:51:fe:d5:bf:d3:e9:97:f2:a7:7f:86:f6:8d:
59:a6:fb:8b:b9:04:70:6f:e1:f2:2e:59:1b:93:63:
91:db:67:7c:bd:c8:32:6e:a2:6c:97:7a:de:c0:dd:
79:2a:43:8f:d7:45:a4:f0:b3:af:51:ae:11:30:c3:
c9:f5:13:21:8c:64:59:bf:f0:4c:4d:d7:7d:10:0c:
8e:63:81:12:f3:90:ea:cc:d4:87:bc:d5:e5:9d:30:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:5A:D5:C0:31:2E:9D:66:55:6D:76:4E:2F:F7:BF:2C:37:77:19
X509v3 Authority Key Identifier:
keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:45:66:1d:fe:ac:dc:8e:1b:78:32:39:bf:d2:ba:44:27:5f:
e5:6c:fb:47:1f:9c:ef:0d:72:af:3c:ee:e2:e5:a3:d5:9f:cf:
35:8f:8c:86:7a:dc:73:06:b9:48:a6:72:7b:74:7c:54:27:37:
7d:48:e1:93:6f:d7:5a:6f:81:37:93:11:d3:ec:0e:2d:26:d4:
16:cc:30:56:e4:c7:b1:62:c3:c6:10:48:44:38:b5:96:e0:be:
59:b3:f3:3d:39:fe:80:61:a1:8b:08:9b:42:f0:31:79:14:7a:
7f:6a:aa:ad:c6:c6:8d:93:89:8e:65:df:5a:49:79:3e:15:a2:
44:1c:3a:b2:6e:aa:30:3f:bb:b1:07:42:fc:eb:3b:dc:5e:e0:
71:8b:2c:0d:76:78:0d:d2:12:5e:b2:5a:1a:d3:5f:d7:07:7b:
d1:f4:02:32:13:16:d5:f1:f8:f1:64:3f:07:57:d9:98:1c:15:
53:6a:8f:21:af:e5:53:db:9c:c9:72:91:fd:01:47:45:6c:79:
15:86:50:e6:83:1e:1c:0b:6e:fd:7b:0d:7f:1a:00:41:82:5b:
c8:b5:bd:fc:5f:0c:e0:2d:27:c3:b9:6a:70:f1:1e:b6:25:c2:
bc:eb:b9:69:fc:bb:0f:b3:d6:ab:b7:83:83:cc:48:b4:e2:8f:
d1:89:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:27:04 2026 by rpki-client