Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: YeASh5HCCeY5i+tFNW365XrCku6TSaRtnOcOZ6X0J1M=
Subject key identifier: 98:3A:FE:E9:B4:FD:4D:F6:D8:C7:DF:40:C3:A2:4C:DF:36:37:1F:52
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 019D8EDE9B782D5BECFF87F85B48CB3FA9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 1148
Signing time: Wed 15 Apr 2026 02:00:46 +0000
Manifest this update: Wed 15 Apr 2026 02:00:46 +0000
Manifest next update: Thu 16 Apr 2026 02:00:46 +0000
Files and hashes: 1: X-nIksYLcM6UY700IvmpbbqFcRs.roa (hash: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=)
2: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 3SrWboAzeGXlMnS3Yenw/zjaxixzzSxMPDBbHUxfLlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:de:9b:78:2d:5b:ec:ff:87:f8:5b:48:cb:3f:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Apr 15 02:00:46 2026 GMT
Not After : Apr 16 02:00:46 2026 GMT
Subject: CN=983afee9b4fd4df6d8c7df40c3a24cdf36371f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:95:d5:1c:35:62:1c:91:05:a4:2b:c1:22:
9d:62:d8:22:5d:e7:3c:6b:94:be:c1:e2:33:ac:84:
83:f3:fb:01:01:bc:df:38:ae:92:fd:6b:9b:29:9f:
fd:78:a3:b2:d8:dc:c3:eb:f1:26:a1:2a:9d:de:91:
7c:73:c5:e2:71:8f:c0:3b:ca:ff:dd:bd:4d:f0:8d:
f0:e2:60:b4:1c:67:d6:eb:a6:66:f3:7b:4f:3a:ec:
78:78:9f:aa:e5:96:87:9b:40:08:43:9e:d9:41:11:
d8:b5:e1:6d:c8:86:a4:04:1c:25:2c:5d:3a:96:e5:
50:c4:55:92:9f:b6:73:ed:1b:0b:7c:63:98:9a:21:
da:2a:2c:a1:10:18:05:a8:dc:90:7d:3e:2f:7f:47:
34:e1:44:a9:e9:e2:1b:2a:ff:cc:04:3c:f6:23:fb:
1f:e2:54:9a:43:bc:14:3a:ae:21:c3:a1:f7:18:fa:
82:a7:d3:7b:19:dd:85:e0:44:04:50:91:4e:59:ea:
1e:ab:f1:8c:a8:72:45:d4:32:49:78:80:71:05:46:
d6:59:69:17:ed:1a:48:ee:9f:37:72:8f:83:8b:5d:
8f:c7:61:6d:e2:ef:32:b1:97:76:ed:2b:ea:1f:df:
2a:d8:db:54:2f:c4:8e:48:2c:93:f8:f8:a9:4c:f1:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:FE:E9:B4:FD:4D:F6:D8:C7:DF:40:C3:A2:4C:DF:36:37:1F:52
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:6a:29:50:d9:51:30:66:ba:42:af:1d:24:6a:fd:5b:03:
42:bb:ad:5a:ac:44:f0:ab:4c:00:0c:f7:cb:a9:1c:5f:e6:86:
3c:7d:49:93:76:b8:23:93:eb:da:9a:49:d5:27:d9:ae:11:42:
f1:9f:5e:b6:ad:cc:a0:d0:96:f1:cd:98:ac:f8:eb:5f:22:84:
37:22:95:fb:bc:d6:c5:c3:b0:b1:fb:cf:90:59:25:de:24:5d:
e0:3c:fb:a7:67:9a:dc:40:30:2a:b2:f5:26:80:97:2a:72:c6:
a2:7e:33:12:8e:ea:28:92:c2:b6:2f:40:f5:5f:97:b8:c0:27:
3d:48:d8:92:6f:86:ad:a2:e9:17:1e:96:94:f7:ad:b5:1d:4b:
ad:05:b2:4f:34:83:5f:9e:45:db:b6:23:28:2e:11:2e:75:c5:
0a:11:75:d0:b9:45:dd:54:c0:fa:e6:3a:c4:25:9d:da:33:e5:
c0:03:24:f8:ac:1e:87:fa:49:12:6e:64:27:f6:b1:43:0a:20:
11:28:44:d5:c8:9c:94:d1:76:72:df:2e:4b:82:91:2a:78:eb:
41:cc:42:0f:68:d5:77:2d:63:78:5e:d2:84:36:ce:83:a2:3d:
39:bd:93:93:b4:7e:ca:95:03:24:6b:20:aa:82:44:6e:92:40:
8b:9b:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 07:46:36 2026 by rpki-client