Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
File: HluDDH425082Xhmo3ifRDMxJTkc.mft (raw, json)
Hash identifier: Om4Q7nfBCJHmZ+QUDoyyh9A3XGaeh3/OmhGgIFgzvFs=
Subject key identifier: B3:D5:1B:56:3A:6F:67:13:33:0B:28:F9:BC:6F:D9:D3:62:DF:38:9A
Authority key identifier: 1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
Certificate issuer: /CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Certificate serial: 019FA0E04FA64D5BD6B841CEC5D9A06FD5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:22 +0000
Manifest this update: Mon 27 Jul 2026 00:01:22 +0000
Manifest next update: Tue 28 Jul 2026 00:01:22 +0000
Files and hashes: 1: HluDDH425082Xhmo3ifRDMxJTkc.crl (hash: 0+aqfjYkmVWx3UPnWGyzNwxTipMetG6cRRmBELu8rMs=)
2: LHN1BnUSyqOFuhPoPwti-ZVElTA.roa (hash: QIWaWaWmcZOj30j5Z5yhhvWrhJu25QWzZTT3P56bHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:4f:a6:4d:5b:d6:b8:41:ce:c5:d9:a0:6f:d5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Validity
Not Before: Jul 27 00:01:22 2026 GMT
Not After : Jul 28 00:01:22 2026 GMT
Subject: CN=b3d51b563a6f6713330b28f9bc6fd9d362df389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:cb:a4:71:52:f5:d8:31:6b:42:c9:08:04:
c0:fc:49:56:ba:16:e9:24:99:7d:57:23:38:cf:c4:
fc:3e:3b:9a:92:58:62:e9:16:84:86:d6:d2:8b:5a:
2a:91:96:48:cd:dc:53:1b:d3:6f:53:8c:83:c1:24:
be:fd:c2:f2:22:ba:ba:4a:a5:4a:19:ad:be:af:74:
c3:91:3d:5b:24:64:08:58:8c:10:71:1b:02:29:a4:
6e:d1:06:56:cf:59:75:c1:7d:df:8e:f4:3d:e0:ef:
4c:2e:de:c0:14:95:73:2f:0f:da:4b:fc:50:2a:ea:
88:bf:02:9a:5c:cf:c9:73:cf:68:be:9f:f5:4b:6a:
0d:e5:72:0e:b9:4a:11:98:9f:de:cb:6d:57:74:a7:
e8:6e:d4:b5:d1:fc:9a:85:28:a2:93:86:3a:ef:12:
61:ac:13:e5:36:7a:ac:f7:7a:c6:9c:4c:c2:98:0d:
8b:bf:90:24:3f:48:f7:58:75:15:56:9c:02:81:f6:
af:80:da:77:10:71:75:ef:32:eb:8b:8a:47:c0:83:
5d:62:f3:3d:e7:cb:e3:90:41:e0:92:b8:24:cf:58:
26:75:ce:fc:32:4a:f4:88:75:1d:91:cd:0e:58:ec:
8e:f0:87:cc:5c:c4:2a:c0:5a:e6:e9:35:b6:f7:43:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:1B:56:3A:6F:67:13:33:0B:28:F9:BC:6F:D9:D3:62:DF:38:9A
X509v3 Authority Key Identifier:
keyid:1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:76:51:11:9c:1b:90:7b:7f:1f:cc:d1:58:17:11:4f:04:
f3:12:74:22:81:89:ac:21:30:44:11:8a:cb:2d:2a:b3:23:7d:
7d:71:de:12:5e:e3:ce:66:da:94:bf:23:fe:cf:2c:1b:59:fd:
88:51:bf:f7:d1:56:29:04:fe:9e:fe:eb:98:3b:d8:84:c4:f3:
ae:ae:71:b6:92:18:1d:eb:1d:26:cc:76:30:3b:a6:99:3c:b2:
e7:65:23:9f:4d:99:ee:be:1c:23:9a:02:4e:22:b3:08:72:4a:
4f:83:6a:a4:4a:69:a7:fd:92:cc:d2:3d:4e:ed:93:3c:79:40:
83:78:d2:d4:a2:c2:d7:c4:d8:7a:42:4f:c3:8e:e7:f8:e1:b6:
4f:74:65:a4:08:4d:5e:32:2a:b9:37:c8:89:bf:9d:bb:77:52:
04:b1:ab:6f:08:27:05:0f:49:cb:5a:dd:a6:41:a8:bc:2e:0c:
c2:69:00:73:68:0d:0c:b6:36:b0:79:c5:b1:d8:03:55:4c:49:
67:c9:40:30:e1:ac:7c:f9:b4:fd:3c:e1:b7:4d:d8:eb:24:af:
5c:57:68:e9:21:07:be:57:d4:52:d0:39:11:fd:83:da:8a:bc:
a9:60:fd:25:cf:ff:ba:c2:9f:1f:28:74:dc:05:7a:e3:59:42:
52:ed:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:08 2026 by rpki-client