Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: pSWA21eimMLoCJWG4wXe/cO2yy0ZNQ/JJCydcDWPj8g=
Subject key identifier: EA:CD:43:40:FC:F1:C8:BE:7A:06:50:78:BE:C1:5E:63:E0:76:65:9A
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019D394072DF3FAA52B3975714AAEACF1056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 14AB
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: MlHgGahlEAKhAipFqO/jXJrJPM9WCLom10xMelNbQVs=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:72:df:3f:aa:52:b3:97:57:14:aa:ea:cf:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=eacd4340fcf1c8be7a065078bec15e63e076659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:20:b7:2c:04:6e:2a:5b:f1:b0:c0:eb:ba:
29:50:64:a0:ba:d7:69:af:a2:ba:78:42:b7:85:52:
9a:a4:be:96:29:ea:49:48:6f:55:35:0b:c2:db:53:
55:ca:81:ed:ec:99:16:0a:7a:7f:53:73:28:47:18:
07:c4:70:3b:19:0e:aa:a8:bd:55:7f:39:fb:62:1f:
da:a7:32:0f:e5:35:77:6f:b0:8b:6f:a0:d9:52:17:
45:aa:64:74:16:f7:1d:32:bb:be:0b:02:79:26:4f:
c0:76:4f:b6:d1:c2:4b:44:aa:7e:f8:a4:36:07:cd:
69:38:e5:65:7a:04:03:17:b6:13:b4:20:9a:3f:12:
70:89:5c:d7:87:a6:ea:70:14:05:c1:6b:29:a0:53:
5c:20:0f:b1:74:c2:07:1e:f0:bd:be:bf:2f:06:7c:
7b:1f:af:95:f5:dd:e5:63:e6:5b:aa:8f:98:eb:38:
c6:75:2f:d7:99:a6:82:9e:92:9b:23:5a:8d:2a:91:
bc:60:2a:66:60:cc:a3:4f:c2:77:fe:ee:d2:c6:70:
36:01:6d:be:62:bf:f5:04:6f:20:50:ad:b9:d9:d5:
a9:07:b7:97:10:60:c6:20:49:5c:0e:4c:33:21:ad:
66:29:1b:a3:43:f5:65:b9:ed:ef:f1:cf:b5:2e:42:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:43:40:FC:F1:C8:BE:7A:06:50:78:BE:C1:5E:63:E0:76:65:9A
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:41:c2:64:1e:6a:d3:f9:95:23:42:9b:2b:1b:6a:39:f3:
56:a0:03:6b:df:b8:70:a7:d4:a2:a5:64:e9:30:51:fa:6c:81:
88:d1:7c:33:f1:1d:a3:1c:c6:8f:63:cd:21:e8:cc:23:5c:ee:
19:d0:eb:8c:12:6d:26:5b:77:6d:35:02:64:c9:0a:da:45:c7:
18:67:3f:da:26:ad:2c:91:ba:54:c9:71:e9:7a:d2:a9:e5:4f:
33:0d:57:d0:27:d8:40:c1:15:d8:2f:06:38:75:e4:6c:ee:dd:
9f:19:b5:3e:fa:14:d5:1d:58:4d:83:d1:4d:39:51:f2:14:c2:
53:e6:fb:18:41:d2:b5:08:8b:c9:40:17:02:bc:3a:6a:91:70:
c2:fd:d8:ef:da:cc:82:bc:ab:b3:50:02:a8:82:6c:aa:65:19:
0f:33:c2:fd:e5:ca:fb:01:24:7d:1c:9d:a5:52:72:ed:c6:43:
55:6e:a9:9b:6d:db:8c:1f:20:4d:1a:0f:7b:e0:ef:4b:43:0d:
84:ab:57:34:3f:cb:f0:c7:5d:10:16:72:55:41:d6:0e:a5:4f:
50:fe:5f:76:3f:8c:47:4d:21:55:ce:07:63:2f:80:23:ad:ef:
ce:fd:4c:82:59:55:af:a3:b5:0b:3d:81:de:04:ef:78:ef:3a:
3e:6f:20:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHLfP6pSs5dXFKrqzxBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmZkMjk3Zjk1NTMxZmViODJjOTY0ZmQ2N2Y2Yzk0MzIw
OTM4ZjYwHhcNMjYwMzI5MTEwMDE4WhcNMjYwMzMwMTEwMDE4WjAzMTEwLwYDVQQD
EyhlYWNkNDM0MGZjZjFjOGJlN2EwNjUwNzhiZWMxNWU2M2UwNzY2NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mggtywEbipb8bDA67opUGSgutdp
r6K6eEK3hVKapL6WKepJSG9VNQvC21NVyoHt7JkWCnp/U3MoRxgHxHA7GQ6qqL1V
fzn7Yh/apzIP5TV3b7CLb6DZUhdFqmR0FvcdMru+CwJ5Jk/Adk+20cJLRKp++KQ2
B81pOOVlegQDF7YTtCCaPxJwiVzXh6bqcBQFwWspoFNcIA+xdMIHHvC9vr8vBnx7
H6+V9d3lY+Zbqo+Y6zjGdS/XmaaCnpKbI1qNKpG8YCpmYMyjT8J3/u7SxnA2AW2+
Yr/1BG8gUK252dWpB7eXEGDGIElcDkwzIa1mKRujQ/Vlue3v8c+1LkKLmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrNQ0D88ci+egZQeL7BXmPgdmWaMB8GA1UdIwQY
MBaAFBxv0pf5VTH+uCyWT9Z/bJQyCTj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDct
ZWY3OGE4YTc2MDZjLzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDctZWY3OGE4YTc2MDZj
LzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdARBwmQe
atP5lSNCmysbajnzVqADa9+4cKfUoqVk6TBR+myBiNF8M/EdoxzGj2PNIejMI1zu
GdDrjBJtJlt3bTUCZMkK2kXHGGc/2iatLJG6VMlx6XrSqeVPMw1X0CfYQMEV2C8G
OHXkbO7dnxm1PvoU1R1YTYPRTTlR8hTCU+b7GEHStQiLyUAXArw6apFwwv3Y79rM
gryrs1ACqIJsqmUZDzPC/eXK+wEkfRydpVJy7cZDVW6pm23bjB8gTRoPe+DvS0MN
hKtXND/L8MddEBZyVUHWDqVPUP5fdj+MR00hVc4HYy+AI63vzv1MgllVr6O1Cz2B
3gTveO86Pm8gTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:51 2026 by rpki-client