Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: BKuc/LX32y9Ffr32LfRgEpzcpUMfLBYsTzq40HgjspY=
Subject key identifier: BF:CC:D7:C6:0C:B8:DA:DC:EB:99:45:FA:85:E4:ED:34:04:84:83:D1
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 01A1957BA3A467B968828FF4A20D0A441E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 16ED
Signing time: Sun 01 Nov 2026 05:01:10 +0000
Manifest this update: Sun 01 Nov 2026 05:01:10 +0000
Manifest next update: Mon 02 Nov 2026 05:01:10 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: wreMR1QNzDadSOrTTFcdzfJwxMrz2vlD3ZAolGpyK/E=)
2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:7b:a3:a4:67:b9:68:82:8f:f4:a2:0d:0a:44:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Nov 1 05:01:10 2026 GMT
Not After : Nov 2 05:01:10 2026 GMT
Subject: CN=bfccd7c60cb8dadceb9945fa85e4ed34048483d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:76:6d:6c:a3:ca:a0:45:69:06:a1:8e:2f:
22:10:1f:61:2d:b2:64:04:03:73:ae:29:fd:ca:b2:
ba:02:b7:05:d6:a3:7d:eb:ff:38:8f:22:11:09:b5:
38:99:90:57:85:d1:2c:b4:fb:3b:74:28:9a:45:cc:
50:3b:04:08:8e:4f:2f:8d:26:c1:d6:13:27:5c:f2:
11:22:bc:20:5a:5f:56:f0:79:4e:05:98:2c:73:e4:
4b:4d:0c:8e:6b:ff:bf:99:6e:3b:74:f3:b4:87:2c:
72:69:d1:4d:91:0e:d5:42:a0:d3:6d:2f:1f:90:2d:
56:d8:7f:10:94:69:ec:d2:1b:63:bd:38:25:f9:7e:
28:26:4a:57:06:a2:ac:5b:58:dd:ef:37:ec:14:69:
50:06:0f:97:a5:a0:e6:e8:b9:2e:d8:21:ce:9c:8e:
13:26:73:fd:70:7f:d1:dc:c4:d8:9c:fa:26:6c:49:
5e:7e:49:db:aa:40:56:f3:13:28:f8:e9:ef:6b:f1:
12:88:15:e5:48:e7:b9:d8:a8:8b:45:fb:94:be:49:
4c:3b:bf:b3:fe:05:a2:11:54:89:f8:24:a9:51:bf:
e1:d4:40:08:7a:ee:46:18:01:d4:46:4a:04:61:e9:
2f:c5:f7:11:bb:7e:4d:6c:d5:b1:3c:38:b4:e0:76:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CC:D7:C6:0C:B8:DA:DC:EB:99:45:FA:85:E4:ED:34:04:84:83:D1
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:20:ad:48:32:4e:f5:e0:3c:8e:b5:a5:f9:da:bd:ce:c3:96:
cc:c0:1b:dd:a9:c5:19:d6:e0:ed:58:cd:0d:b5:9f:5e:74:40:
4a:4f:f6:09:30:1c:b6:e3:8a:65:ec:ff:a6:23:90:e0:0f:ea:
03:b0:b4:76:15:ba:6e:f7:b9:be:28:ec:3b:22:87:6e:ba:6d:
0c:4f:a8:39:e8:a2:23:29:48:2e:48:97:9f:d8:ae:65:2a:b5:
64:e6:45:8c:9d:c3:ae:7f:8e:32:ba:3b:a8:5d:e5:41:8d:f7:
38:7c:9e:4b:5b:35:a9:3a:d7:cf:4e:66:f0:da:97:25:e3:3a:
9f:a6:c5:85:88:81:5c:83:ee:61:49:ba:e1:12:2a:c5:0d:91:
eb:49:55:05:3f:9f:7d:45:de:c7:20:88:2b:ee:94:f0:d1:b1:
cf:f8:d7:9f:77:5e:34:34:25:77:bc:0f:1e:f1:e2:10:2a:33:
f0:da:97:83:b7:91:62:70:68:61:4c:cc:0b:c9:d4:24:37:a3:
1c:8b:f0:ca:17:c0:ca:5d:ca:3c:45:f1:41:a3:ad:8e:83:7f:
d0:ac:29:ae:34:d6:3a:61:42:61:ea:0d:50:1a:a6:60:ac:21:
c5:63:6a:94:1d:58:a7:e4:b8:cc:23:46:a5:2a:3c:f1:84:fe:
74:b8:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:52 2026 by rpki-client