Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: 8RMf2x4llJoWq8M3ze2qOIYyMiXb+2CV6vKpFe8Dn/I=
Subject key identifier: 5B:87:EF:7C:78:14:1C:8E:19:28:73:6D:FC:D8:B6:6D:5B:A8:79:95
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019E2C95EB529FCB8FCEBBEB612476C45A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1529
Signing time: Fri 15 May 2026 17:01:23 +0000
Manifest this update: Fri 15 May 2026 17:01:23 +0000
Manifest next update: Sat 16 May 2026 17:01:23 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: ofon8OVIEJHcYeAIwZ7ByImC+fsDCRydhwKa0DS5mhQ=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:95:eb:52:9f:cb:8f:ce:bb:eb:61:24:76:c4:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: May 15 17:01:23 2026 GMT
Not After : May 16 17:01:23 2026 GMT
Subject: CN=5b87ef7c78141c8e1928736dfcd8b66d5ba87995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:2e:0a:00:9d:97:55:9a:3f:fd:1e:5b:aa:
73:b9:3c:2f:9d:4c:e4:1f:80:0c:77:48:60:71:9c:
92:ae:06:0f:e6:6b:43:a8:44:86:c5:e3:b0:23:f9:
89:03:92:9d:d4:1d:97:59:6d:80:c0:d5:5f:38:91:
de:60:1f:6f:b7:59:71:b9:1f:e1:e2:55:71:46:3d:
58:bf:50:eb:86:bd:92:ec:83:6a:88:23:5a:1d:67:
1b:01:c1:b9:7a:9e:4e:67:e9:64:7c:3c:fe:0c:3b:
c1:fd:64:29:56:07:54:e8:fa:bc:33:83:4a:5f:9c:
36:35:dd:85:9b:aa:d4:5e:8e:1f:64:fe:3d:8f:78:
cc:fa:86:a1:44:ca:03:65:43:83:0e:4c:f6:c5:81:
c9:6e:2a:10:1f:87:58:ba:90:1a:eb:2e:1b:a5:dc:
6c:46:08:90:1d:00:07:ab:03:db:2e:a0:00:5c:df:
61:e7:85:31:9d:58:f0:66:d7:b6:e8:de:4b:b3:ea:
22:a9:42:39:37:08:2f:03:fc:be:02:0e:71:ae:96:
eb:6c:2d:26:77:2f:55:a3:3b:63:6e:3f:9b:93:cb:
c5:58:3c:c0:2b:04:10:c7:34:59:c4:ad:09:b6:68:
fb:53:d9:b0:57:4a:b0:cf:95:58:f0:2b:72:e2:fc:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:EF:7C:78:14:1C:8E:19:28:73:6D:FC:D8:B6:6D:5B:A8:79:95
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e7:bd:19:14:91:27:7e:28:b2:af:22:46:75:54:6c:cc:2b:
c5:76:86:1d:9f:27:88:ac:65:ce:03:b5:cd:ac:a5:55:2e:7b:
bc:92:74:f1:5e:5e:a1:57:8f:8f:fd:df:09:83:a1:53:d2:a6:
83:25:3b:5a:8e:0b:1f:d7:2b:69:9c:48:75:79:78:ee:ce:7b:
83:2f:00:73:c4:ea:ac:25:08:2c:fb:69:ff:b3:69:86:90:0a:
cb:74:be:44:e7:72:5e:1d:ee:61:f1:27:28:ac:48:0a:4c:72:
5c:a4:41:ec:59:05:aa:f1:8d:df:dd:78:a0:2a:76:73:19:e5:
36:d1:f6:b2:2d:99:f2:1a:1a:13:95:0c:04:f1:3f:e6:36:06:
5c:0b:7e:ac:0d:f3:e0:f6:fa:0a:9d:af:23:2a:cb:ca:e2:ec:
27:a3:62:a9:d1:43:fd:ce:b5:6c:e0:c9:31:20:5a:7a:99:c6:
f0:34:ef:98:53:c1:9f:0d:df:5d:69:01:28:8f:69:11:02:ad:
d9:d2:7c:af:45:64:32:63:98:65:04:d3:ef:50:db:fa:af:0d:
ad:9d:b6:7d:79:43:ba:7c:ba:64:6b:3f:d9:a1:89:f4:94:d2:
28:17:c5:58:a1:d4:45:29:1a:06:24:e4:3e:e7:15:10:90:1b:
0a:2f:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:43:36 2026 by rpki-client