Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: 3iNCQGY31Tp9U9QhORwMZnhHeNyU+djtz0IBrpD41LI=
Subject key identifier: 62:A8:C2:A5:5A:4B:1A:74:FE:B3:52:3D:9D:CC:8C:D5:29:36:E9:43
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01A15C311B2220809DC71721100A4D1D4499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 1340
Signing time: Wed 21 Oct 2026 02:01:24 +0000
Manifest this update: Wed 21 Oct 2026 02:01:24 +0000
Manifest next update: Thu 22 Oct 2026 02:01:24 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: ulQJ1Lzpe5DwtYpNx1KgT20MonoQvbasB6bSR4oKRwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:31:1b:22:20:80:9d:c7:17:21:10:0a:4d:1d:44:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Oct 21 02:01:24 2026 GMT
Not After : Oct 22 02:01:24 2026 GMT
Subject: CN=62a8c2a55a4b1a74feb3523d9dcc8cd52936e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:8c:91:a5:e6:50:0e:29:14:4c:7a:e5:93:
31:b0:d2:d0:87:2d:42:f1:ce:ed:76:ec:5d:8f:b6:
9a:f1:d4:34:8a:0e:f4:68:50:26:56:cf:51:f1:89:
6c:4e:57:e1:07:37:39:68:31:7f:10:85:c9:b4:94:
25:45:3f:90:52:a2:e2:f3:d0:07:df:99:de:f8:01:
25:71:87:87:93:50:c4:89:00:f5:93:8c:2f:20:31:
17:77:9c:ab:ec:62:6a:60:da:62:94:59:6b:92:7f:
14:c3:84:ca:55:1b:57:9f:13:b8:58:65:4a:f7:6a:
4b:57:bc:2d:cd:cc:ad:e6:13:3d:39:39:7a:e1:08:
f3:bc:6b:4f:54:c6:aa:f1:bd:70:2b:4a:6b:5f:e5:
e9:6f:46:a4:d1:ef:89:97:1d:ad:87:df:3e:eb:c4:
5c:ea:6d:50:e0:75:9c:c1:e9:f5:98:12:5c:82:4d:
0e:9b:80:5b:90:ce:df:96:1c:45:2f:89:2b:8c:14:
fa:9c:a7:f7:de:57:36:20:59:57:e9:4a:55:ad:6a:
85:86:d6:2b:68:ec:cd:4d:46:64:f2:db:a5:d4:37:
9d:0c:22:eb:9d:92:0d:b0:e7:97:39:70:a4:72:ee:
bb:c3:31:17:e8:d1:0f:3e:60:70:8d:8d:4a:02:02:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:C2:A5:5A:4B:1A:74:FE:B3:52:3D:9D:CC:8C:D5:29:36:E9:43
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:66:59:77:d6:74:9a:d6:36:b6:0b:6d:7e:7c:90:f4:b4:
d8:c2:17:57:c5:57:cd:1b:cc:94:55:91:a3:ed:33:d2:c8:b0:
c2:ff:91:a5:1e:ac:c9:5a:8a:6f:90:34:d3:7c:fb:e4:f7:c9:
21:5e:b0:15:7f:1a:89:31:ba:e3:63:2e:8d:27:cb:67:31:8f:
7b:2d:9d:50:e8:f5:04:36:11:ad:34:a0:d2:e3:af:7f:1d:08:
14:d3:67:46:56:02:35:9c:da:fd:a1:fb:18:2b:8e:41:ac:9b:
92:6f:d7:75:e2:21:d5:57:a7:87:34:4d:22:24:ba:fb:d3:bf:
7d:b0:09:3c:77:9e:15:d2:91:a6:fa:ed:e2:ae:68:4a:f4:e8:
74:80:a0:ca:7f:b6:52:fd:32:b5:68:93:db:15:04:43:85:4d:
71:c2:0d:81:b8:80:70:8d:e2:7f:21:8c:b2:29:09:f5:53:1f:
32:4c:a6:8a:c8:56:bc:71:59:f5:66:4a:fa:a5:df:a1:58:68:
3f:f5:0f:9b:64:4d:80:58:32:f8:5c:96:a2:06:af:9b:ee:a0:
b1:4b:d8:e3:a7:f6:2e:f5:c2:4a:10:de:5d:64:2a:a5:22:2f:
ae:26:75:1c:e4:83:98:58:52:7f:a3:4f:76:a2:78:47:ba:04:
45:d0:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:09:54 2026 by rpki-client