Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: KZy2QFMuY0N5tJFy2EHDCTBZseTeWKOTi1nBqzM+tj8=
Subject key identifier: F0:B4:65:1F:6C:20:94:A1:9E:26:AC:1C:0C:3C:5E:C6:B4:6C:58:75
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019F9F5F340A7D95CA2BAAED1C8A48345328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 151F
Signing time: Sun 26 Jul 2026 17:00:44 +0000
Manifest this update: Sun 26 Jul 2026 17:00:44 +0000
Manifest next update: Mon 27 Jul 2026 17:00:44 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: 40B9og8NYG31vzDUWftIF6nedmqEvLRKjgQWuYhps74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:34:0a:7d:95:ca:2b:aa:ed:1c:8a:48:34:53:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jul 26 17:00:44 2026 GMT
Not After : Jul 27 17:00:44 2026 GMT
Subject: CN=f0b4651f6c2094a19e26ac1c0c3c5ec6b46c5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:f0:ae:48:69:f5:4b:0f:e3:44:1e:f3:80:
9c:9d:91:a9:fc:9a:9c:72:87:f7:ad:1c:8a:fa:5c:
4d:fa:8a:e8:3c:e7:15:41:f9:8e:32:a1:90:7f:98:
f9:2a:07:82:b8:db:da:7b:04:51:83:d8:67:74:35:
cc:ba:3d:61:65:47:d3:b2:da:de:0c:fe:b0:f6:b2:
55:8b:f2:fd:63:c7:04:ff:37:76:04:7a:e5:60:88:
a7:1b:1c:f5:b8:35:81:7c:ff:d2:b7:96:bf:e2:ae:
08:fc:86:cd:d7:f6:33:aa:42:ef:17:7a:e9:3b:ad:
b5:e0:01:b1:bd:96:ee:dd:5c:e3:cf:a1:81:e7:2e:
f7:04:d6:b9:77:c0:72:af:85:88:30:52:26:af:ac:
c1:65:fd:74:40:5a:24:11:38:aa:f6:7b:b8:a2:76:
57:51:b5:5c:45:11:5d:62:d3:4c:3d:32:73:03:a7:
04:5a:44:6c:ce:5f:35:61:27:23:b3:ce:4d:df:6f:
bb:6b:8e:6e:53:04:67:84:7d:a2:f6:38:39:cd:bb:
7c:6f:0a:7f:cc:e7:a4:10:b6:b7:09:f6:2e:4d:2c:
28:0a:d9:e8:7a:b3:17:6c:fe:15:84:21:b5:6c:00:
7f:98:1f:2e:bd:7b:e9:5e:4c:b6:87:f5:f1:1a:27:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:65:1F:6C:20:94:A1:9E:26:AC:1C:0C:3C:5E:C6:B4:6C:58:75
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c9:e7:c8:51:eb:54:da:20:8b:85:de:dd:7d:2c:89:9c:78:
45:4b:18:dd:2f:1d:7a:75:2e:cb:6f:d7:ff:10:2e:9b:c5:4e:
a6:2b:c7:7e:bf:8d:23:ce:dc:df:98:6f:bc:5e:ae:6c:03:50:
95:40:ae:9c:21:82:63:c2:2a:e4:54:8b:a7:f8:ab:63:f9:44:
63:85:a0:46:45:0f:9a:af:94:d6:84:e4:4b:d4:6b:5f:a6:2b:
f1:40:f3:b5:17:b5:87:2f:fb:87:91:33:7b:04:b3:24:75:c9:
6b:3d:3e:f9:da:92:30:ec:5e:a7:62:19:ad:79:89:34:f4:4c:
d0:7f:fa:98:0d:74:4a:3c:78:6c:fc:30:93:e3:2a:b4:a6:e5:
21:88:7e:32:b2:ff:36:bb:83:a6:f5:e5:72:5f:91:da:6a:89:
0a:5f:d9:44:c9:6d:f5:c1:1f:8a:77:49:80:9f:b9:f8:4b:3e:
9f:ef:aa:62:a9:ab:60:83:a3:c7:e2:b7:18:33:fa:f5:1f:32:
57:cb:2b:04:e8:9d:7a:53:70:af:bd:98:5c:4a:c4:80:bc:3f:
42:07:0e:b4:4d:ae:87:34:01:3c:e4:e9:fe:0b:f7:cd:aa:e5:
f1:0d:db:8c:ba:f4:4a:3c:4e:8b:9b:68:27:8e:9e:3b:fe:7b:
a4:97:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:20:17 2026 by rpki-client