Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: Oo732UJ1pmOXUnpaGNnvIE7Yyc4fBciAqeCRomSE14U=
Subject key identifier: 30:04:31:FB:B6:8B:24:20:8F:E4:99:E1:55:50:2F:17:1B:61:2C:DE
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019D3AC1938081A77F4C3046ACD3EC569905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 0656
Signing time: Sun 29 Mar 2026 18:00:57 +0000
Manifest this update: Sun 29 Mar 2026 18:00:57 +0000
Manifest next update: Mon 30 Mar 2026 18:00:57 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: tx8N2FjwlBEvhpP2YnKBrITV6c7uCSYwdfqEsOJqqEM=)
2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:93:80:81:a7:7f:4c:30:46:ac:d3:ec:56:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Mar 29 18:00:57 2026 GMT
Not After : Mar 30 18:00:57 2026 GMT
Subject: CN=300431fbb68b24208fe499e155502f171b612cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:72:22:b6:75:b4:23:a2:0b:8f:f8:4e:7a:
0e:67:3e:3d:c4:5f:fa:b4:59:0a:10:61:72:61:c3:
40:ee:d6:53:07:c2:97:6f:cb:79:f4:18:3f:76:79:
3f:3f:56:e4:13:22:7a:53:b1:c8:47:db:ce:27:fd:
27:40:b1:d6:2b:0d:0a:26:21:49:d7:c3:b0:92:fd:
3e:cd:1c:6f:01:94:b5:88:95:06:9a:b4:fa:c9:ae:
4b:83:bd:74:63:68:1a:73:87:9b:f5:8c:32:98:1a:
a8:8c:c4:91:70:d7:6b:8c:77:1c:2a:33:d9:1a:d8:
88:5f:93:8f:c6:7f:8b:02:a8:dd:05:49:21:7d:89:
3f:34:aa:5b:c3:dc:eb:22:f5:04:12:c0:32:82:ea:
0a:03:d9:d9:06:f1:e4:f5:94:6c:d9:40:ae:97:c9:
ce:2d:6d:2c:4d:ed:fa:a2:9c:bc:32:e7:cc:87:19:
b8:b8:57:6e:32:30:3d:0a:36:58:58:24:13:82:7e:
ff:07:c9:01:b5:94:1d:4a:57:67:95:7e:fe:c1:22:
71:24:54:9a:06:5e:dc:79:32:13:c9:94:7f:2c:ab:
eb:c2:40:97:ed:94:ec:db:38:7a:f6:22:6d:c3:bf:
0b:f1:78:49:b7:af:bb:f1:bc:a2:8b:a9:99:2f:47:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:31:FB:B6:8B:24:20:8F:E4:99:E1:55:50:2F:17:1B:61:2C:DE
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3b:a0:96:a5:98:63:4d:52:d4:7d:af:fc:32:26:a9:e6:a0:
a8:79:c0:bc:b5:2c:7e:00:24:b4:85:bc:bf:39:cf:4b:21:08:
a2:09:fe:c7:1d:53:4e:72:1e:ec:10:20:70:f1:9d:24:6a:38:
6c:f4:0a:dc:06:b1:95:17:c0:2c:6e:58:72:d6:57:a0:22:c2:
c1:6d:30:c3:92:23:59:2a:5d:0e:89:18:93:f4:5c:af:53:d8:
20:71:da:9d:d8:c3:99:8a:a0:2d:21:1b:86:89:0f:8b:f5:70:
e9:8d:84:b4:ed:de:b6:d2:cc:66:eb:ba:41:bd:cf:91:6f:01:
69:35:ba:4f:6f:ad:d2:8b:69:8f:94:4a:82:47:53:e3:a6:35:
35:e3:f6:c9:cb:f6:c4:f1:be:19:ef:ea:33:3a:40:2e:7d:59:
a7:b6:ec:3d:7d:14:3d:b2:b5:9c:25:6f:88:e1:35:6f:c1:f6:
dd:f5:b2:d4:72:b3:a7:c0:ff:87:22:6c:c0:4e:9f:9a:2a:5a:
e2:34:1e:31:4b:b8:ff:d3:c4:36:ff:65:00:ec:98:7c:df:43:
d4:22:86:ba:8a:ec:f2:49:75:ca:55:cc:29:f1:65:72:c7:4e:
09:f1:cf:c7:c9:10:9e:73:9e:5a:04:55:44:b1:3f:de:68:2f:
a9:26:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:41 2026 by rpki-client