Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
File: HluDDH425082Xhmo3ifRDMxJTkc.mft (raw, json)
Hash identifier: 6IQ1RqOCOPp3cAxH234B7xa4wfgt5/dAQf4BDbW/Nhs=
Subject key identifier: 0D:3F:46:43:78:B3:22:F3:8D:DF:D4:04:A3:75:A1:1B:00:2C:7C:6C
Authority key identifier: 1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
Certificate issuer: /CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Certificate serial: 01A18F4254F2C96BAA7E5813613278527935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:51 +0000
Manifest this update: Sat 31 Oct 2026 00:00:51 +0000
Manifest next update: Sun 01 Nov 2026 00:00:51 +0000
Files and hashes: 1: HluDDH425082Xhmo3ifRDMxJTkc.crl (hash: ELIG67KeLl4A3UcWKRrhyycJUa36p8PYwA6pz0Y2nvE=)
2: LHN1BnUSyqOFuhPoPwti-ZVElTA.roa (hash: QIWaWaWmcZOj30j5Z5yhhvWrhJu25QWzZTT3P56bHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:54:f2:c9:6b:aa:7e:58:13:61:32:78:52:79:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Validity
Not Before: Oct 31 00:00:51 2026 GMT
Not After : Nov 1 00:00:51 2026 GMT
Subject: CN=0d3f464378b322f38ddfd404a375a11b002c7c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:70:2c:aa:f5:d6:9b:71:02:93:11:a9:93:
f6:e5:3e:6e:ca:59:6b:27:0f:1d:b5:b2:9e:39:00:
b2:7d:69:ae:6f:6c:10:a3:09:49:12:8e:8c:12:c3:
a9:8c:27:bf:eb:0f:e9:b1:63:67:c7:33:7e:cc:72:
2a:cb:de:d3:ed:fe:ad:fd:b1:a2:87:e6:8a:e3:95:
fe:40:f6:26:4a:f4:b2:41:d5:ef:60:5c:97:09:29:
83:62:07:09:a2:cc:0b:19:9b:40:c4:8e:67:2c:47:
af:9f:c2:e3:5e:2c:ef:1f:60:85:2e:d4:f6:7b:56:
2b:35:84:dd:88:a3:2b:fb:35:54:cf:f7:cb:52:b1:
66:c0:62:ea:8e:e0:53:64:d4:c3:62:9f:6a:b2:13:
e2:19:8d:07:03:39:e4:46:ac:80:9d:f2:34:f2:61:
63:d5:1b:f1:9d:e1:f8:18:7b:ef:f4:d4:e3:1c:cd:
87:4b:de:22:16:9a:d1:e8:9b:3a:11:e6:81:53:ec:
24:65:cd:ec:e4:9c:31:4d:88:bf:ce:94:a8:90:2d:
43:39:96:0b:53:5b:91:18:56:fc:c1:be:b7:6a:f2:
dd:fc:2d:af:ab:2c:0c:50:f5:c1:ed:b1:18:e2:70:
aa:d8:a9:52:e0:04:b1:a1:08:af:28:e6:9d:88:04:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:46:43:78:B3:22:F3:8D:DF:D4:04:A3:75:A1:1B:00:2C:7C:6C
X509v3 Authority Key Identifier:
keyid:1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:39:4c:1a:68:d1:f9:b6:04:b4:a6:09:77:3b:9e:a6:a1:05:
d5:c6:44:b5:09:9a:2e:12:82:d7:2c:bf:a1:93:f8:8c:18:71:
33:c8:01:33:f6:9e:55:bd:eb:6b:10:59:4b:ae:c4:d0:14:8e:
43:7f:f7:dc:16:06:b2:0f:a8:8f:70:d2:77:89:39:2f:d6:a4:
10:71:25:9a:4c:7f:17:39:6a:87:bb:87:08:34:03:84:3e:10:
1b:b4:30:c7:6b:f7:be:11:c9:87:42:79:2d:d3:ce:29:d6:ad:
a3:d4:b6:28:b0:22:13:29:7b:2a:54:d3:18:a6:95:69:90:d2:
12:9e:e1:4e:4e:40:e5:71:c5:9d:a8:a3:b4:2c:18:25:ed:40:
9a:93:07:47:2c:59:e5:92:11:b3:f9:32:04:b0:7e:05:f6:21:
8c:40:54:c0:04:48:6f:00:37:81:d9:43:cf:95:fa:e4:45:e7:
77:15:68:e8:fc:87:d0:05:1d:4d:c3:02:cb:9c:cb:c9:5a:24:
81:46:e4:e3:09:64:f9:7f:d2:bf:ac:b4:d2:d6:71:6d:02:55:
b1:d1:fc:34:91:0f:7c:73:97:70:90:d3:07:ad:7c:13:a2:34:
94:b7:7d:3d:ed:3c:90:46:c0:2a:aa:9a:cc:64:bb:83:85:07:
d7:b8:c0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPQlTyyWuqflgTYTJ4Unk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWI4MzBjN2UzNmU3NGYzNjVlMTlhOGRlMjdkMTBjY2M0
OTRlNDcwHhcNMjYxMDMxMDAwMDUxWhcNMjYxMTAxMDAwMDUxWjAzMTEwLwYDVQQD
EygwZDNmNDY0Mzc4YjMyMmYzOGRkZmQ0MDRhMzc1YTExYjAwMmM3YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vZwLKr11ptxApMRqZP25T5uyllr
Jw8dtbKeOQCyfWmub2wQowlJEo6MEsOpjCe/6w/psWNnxzN+zHIqy97T7f6t/bGi
h+aK45X+QPYmSvSyQdXvYFyXCSmDYgcJoswLGZtAxI5nLEevn8LjXizvH2CFLtT2
e1YrNYTdiKMr+zVUz/fLUrFmwGLqjuBTZNTDYp9qshPiGY0HAznkRqyAnfI08mFj
1RvxneH4GHvv9NTjHM2HS94iFprR6Js6EeaBU+wkZc3s5JwxTYi/zpSokC1DOZYL
U1uRGFb8wb63avLd/C2vqywMUPXB7bEY4nCq2KlS4ASxoQivKOadiAR2CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0/RkN4syLzjd/UBKN1oRsALHxsMB8GA1UdIwQY
MBaAFB5bgwx+NudPNl4ZqN4n0QzMSU5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGx1RERINDI1MDgyWGhtbzNpZlJETXhKVGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYmVhMzMtYmI0MC00YmQxLTk3MjQt
ZjY0YzcwZjRkNDQ1LzEvSGx1RERINDI1MDgyWGhtbzNpZlJETXhKVGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wYmVhMzMtYmI0MC00YmQxLTk3MjQtZjY0YzcwZjRkNDQ1
LzEvSGx1RERINDI1MDgyWGhtbzNpZlJETXhKVGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDlMGmjR
+bYEtKYJdzuepqEF1cZEtQmaLhKC1yy/oZP4jBhxM8gBM/aeVb3raxBZS67E0BSO
Q3/33BYGsg+oj3DSd4k5L9akEHElmkx/Fzlqh7uHCDQDhD4QG7Qwx2v3vhHJh0J5
LdPOKdato9S2KLAiEyl7KlTTGKaVaZDSEp7hTk5A5XHFnaijtCwYJe1AmpMHRyxZ
5ZIRs/kyBLB+BfYhjEBUwARIbwA3gdlDz5X65EXndxVo6PyH0AUdTcMCy5zLyVok
gUbk4wlk+X/Sv6y00tZxbQJVsdH8NJEPfHOXcJDTB618E6I0lLd9Pe08kEbAKqqa
zGS7g4UH17jAAg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:45:58 2026 by rpki-client