Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: lNMb1XYEzBCeEVfpPue4vjsyGYPaemRD7RIzg5D6f/U=
Subject key identifier: 20:4D:78:29:FD:38:EE:3C:A3:2B:C6:6A:05:CA:0C:78:50:0F:88:82
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 019E8FB7FB19473B43302637EAAE60267AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 11CD
Signing time: Wed 03 Jun 2026 23:00:59 +0000
Manifest this update: Wed 03 Jun 2026 23:00:59 +0000
Manifest next update: Thu 04 Jun 2026 23:00:59 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: h9BjY/gnbR8E/NcdO3nwiZ/i+P7Y/Octv5q2SbuzNFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:fb:19:47:3b:43:30:26:37:ea:ae:60:26:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Jun 3 23:00:59 2026 GMT
Not After : Jun 4 23:00:59 2026 GMT
Subject: CN=204d7829fd38ee3ca32bc66a05ca0c78500f8882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:bf:b6:98:53:3d:13:2c:64:4d:7c:e8:96:
3f:ab:07:0f:00:28:90:48:4f:58:32:1f:02:a8:25:
1d:a8:09:09:5f:8b:3d:33:05:dd:d0:49:d1:dd:b8:
90:04:f2:46:43:9c:75:f4:c1:c6:a5:ae:6b:16:cc:
54:1f:d9:e2:e9:87:57:00:ab:54:28:44:b9:e0:e6:
b6:38:1a:97:d1:db:e8:be:11:71:6e:6a:36:be:49:
ea:3f:8e:28:23:d2:c3:f0:6e:18:6b:f2:19:60:61:
6a:31:42:0e:ca:f3:a4:2f:08:0d:dd:55:f1:76:86:
54:5f:a7:61:3c:b3:1e:6a:a3:cf:7e:5b:18:9f:e5:
2b:15:07:7c:15:18:b2:0d:c0:96:d2:ee:bf:e2:d8:
91:37:11:0f:26:c7:2d:56:19:c7:08:28:4e:0b:b6:
f9:e0:a4:6b:60:00:f9:ec:1a:cc:a5:11:e2:9f:23:
25:89:ad:f2:34:ac:7f:9d:ae:cb:99:88:a6:65:94:
a7:ec:34:b7:4b:41:72:67:3c:dc:f4:d8:35:fa:9c:
13:c3:79:29:b0:cc:c0:38:07:69:19:3e:07:7a:24:
c5:f5:94:45:71:d1:0c:2c:9f:1b:fd:ab:ec:5c:fc:
29:41:54:37:82:f1:e4:2b:98:f7:78:b0:a8:c7:ca:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4D:78:29:FD:38:EE:3C:A3:2B:C6:6A:05:CA:0C:78:50:0F:88:82
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:50:12:5e:af:d1:73:32:a1:fc:1d:c5:ca:8d:57:b9:a3:
e9:a9:2d:31:49:0d:16:44:00:ff:01:96:13:6e:96:bc:94:0e:
86:81:1e:1e:b1:f4:e3:1a:43:5f:2c:01:bc:cf:21:74:58:15:
70:23:50:53:36:d7:16:c1:e2:ee:cf:51:7e:94:ab:5a:0b:6a:
e1:b8:57:f4:5b:6b:61:2b:da:b2:e9:11:19:18:fa:80:83:c2:
e1:e4:98:01:30:3a:80:cf:cd:a2:66:b1:89:fc:ae:bd:3e:af:
e2:ef:14:1a:c3:e3:84:2b:a4:fe:7e:52:ad:40:c5:c2:f8:3f:
d9:5b:5f:d2:3e:2e:c3:fe:60:e7:a2:e0:d9:22:95:c2:e4:63:
96:36:4a:5f:0d:fa:41:a6:3c:cc:79:ff:92:e7:ee:92:bd:c1:
b2:c7:cd:be:fc:6d:90:32:a1:5d:51:34:68:d3:d4:3a:18:71:
fe:e2:b5:bc:4d:8b:b3:86:17:f3:a5:16:d0:f0:52:08:f0:24:
be:9e:d9:27:aa:f4:da:76:e3:d6:23:2f:68:e7:c2:8c:0b:37:
48:2c:45:7c:e6:29:2c:15:8c:0c:8e:af:6d:99:05:bc:de:69:
5b:db:f2:43:70:e3:a8:c0:73:9c:30:88:98:33:ef:b3:07:e0:
93:17:ae:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Pt/sZRztDMCY36q5gJnqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx
NjYxOGQwHhcNMjYwNjAzMjMwMDU5WhcNMjYwNjA0MjMwMDU5WjAzMTEwLwYDVQQD
EygyMDRkNzgyOWZkMzhlZTNjYTMyYmM2NmEwNWNhMGM3ODUwMGY4ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oq/tphTPRMsZE186JY/qwcPACiQ
SE9YMh8CqCUdqAkJX4s9MwXd0EnR3biQBPJGQ5x19MHGpa5rFsxUH9ni6YdXAKtU
KES54Oa2OBqX0dvovhFxbmo2vknqP44oI9LD8G4Ya/IZYGFqMUIOyvOkLwgN3VXx
doZUX6dhPLMeaqPPflsYn+UrFQd8FRiyDcCW0u6/4tiRNxEPJsctVhnHCChOC7b5
4KRrYAD57BrMpRHinyMlia3yNKx/na7LmYimZZSn7DS3S0FyZzzc9Ng1+pwTw3kp
sMzAOAdpGT4HeiTF9ZRFcdEMLJ8b/avsXPwpQVQ3gvHkK5j3eLCox8psYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBNeCn9OO48oyvGagXKDHhQD4iCMB8GA1UdIwQY
MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt
OGNmOWQ1MGFkZjI5LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5
LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHZQEl6v
0XMyofwdxcqNV7mj6aktMUkNFkQA/wGWE26WvJQOhoEeHrH04xpDXywBvM8hdFgV
cCNQUzbXFsHi7s9RfpSrWgtq4bhX9FtrYSvasukRGRj6gIPC4eSYATA6gM/Nomax
ifyuvT6v4u8UGsPjhCuk/n5SrUDFwvg/2Vtf0j4uw/5g56Lg2SKVwuRjljZKXw36
QaY8zHn/kufukr3BssfNvvxtkDKhXVE0aNPUOhhx/uK1vE2Ls4YX86UW0PBSCPAk
vp7ZJ6r02nbj1iMvaOfCjAs3SCxFfOYpLBWMDI6vbZkFvN5pW9vyQ3DjqMBznDCI
mDPvswfgkxeuGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:57 2026 by rpki-client