Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: vSVesMRl+Wj9run7RwvisXuLvQhbMsGLhWEV18f5Y8w=
Subject key identifier: 08:99:7A:86:D4:83:3C:B3:8E:32:26:A1:94:63:BC:08:02:8A:BF:58
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 019FD94FA6B9A1D73CC8D9721EC61F3B90E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 03E0
Signing time: Thu 06 Aug 2026 23:01:43 +0000
Manifest this update: Thu 06 Aug 2026 23:01:43 +0000
Manifest next update: Fri 07 Aug 2026 23:01:43 +0000
Files and hashes: 1: F6Ed_v2GXlo2fPW9wme1LoJTt5Y.roa (hash: PVB5gLKN9XpK2cpVIIGfT9xr8RhREdDb3biV7KQ2JYE=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: hYNaT5wKQqQWQ1qzITPTI8wWktJaWJmHfSC9HBA23dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:4f:a6:b9:a1:d7:3c:c8:d9:72:1e:c6:1f:3b:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Aug 6 23:01:43 2026 GMT
Not After : Aug 7 23:01:43 2026 GMT
Subject: CN=08997a86d4833cb38e3226a19463bc08028abf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:0a:59:54:14:3e:64:8a:68:94:91:25:bd:
94:e8:09:d2:2c:59:21:f5:89:c2:4b:d8:3b:35:ee:
50:b8:63:57:16:27:94:b1:a2:44:b9:ce:62:56:c5:
84:4f:67:3d:ce:f3:29:33:b8:a9:ca:39:2b:bc:a7:
c4:ab:5c:ab:de:68:fd:89:01:a7:52:5f:c0:65:37:
ae:f7:03:e3:ed:d3:78:75:1e:cf:6e:42:9a:fe:2f:
a2:5b:f6:5b:2b:ac:21:e9:7f:d9:af:5f:12:86:18:
4f:4b:8f:74:59:3f:8f:03:3b:e6:de:dd:6c:4b:d7:
39:df:81:41:d6:04:c7:6e:6b:c7:0f:9e:4d:64:ec:
7f:06:85:a7:e0:6d:54:05:0b:56:05:20:b5:34:6f:
40:e9:a7:61:33:7a:8c:06:8d:7f:64:c9:2c:db:3c:
06:ab:5d:8f:81:cc:6c:67:bc:7c:4a:15:aa:4d:27:
a8:f8:c3:b4:f3:6c:cd:3c:55:10:8b:c4:a9:10:87:
9b:4e:6a:8f:7e:85:57:76:21:f1:fd:44:ef:1b:2b:
26:b9:94:3e:13:b1:75:35:45:73:8c:ed:aa:ee:cb:
8d:21:e0:77:b8:fd:b6:c8:06:d7:0a:81:a9:b3:92:
ee:4e:fb:70:3d:55:a1:5c:a7:a2:14:92:0b:19:4b:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:99:7A:86:D4:83:3C:B3:8E:32:26:A1:94:63:BC:08:02:8A:BF:58
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:42:44:01:8a:ab:28:e0:28:68:11:08:05:b8:40:e7:c9:bb:
45:85:84:b5:be:c6:4a:85:3c:1e:5e:29:50:07:a1:c3:09:f3:
45:5a:07:df:28:75:e8:b3:b4:69:e0:ce:35:69:70:43:35:01:
73:82:4a:c3:08:8c:e0:1a:98:76:02:06:98:96:57:c8:33:1d:
f4:9c:1e:02:2c:c0:a1:8f:05:92:84:e2:62:43:9a:b9:63:df:
3e:88:9c:9d:4d:8e:f2:2b:4f:83:9c:a6:b9:45:7b:02:b6:06:
a6:dc:1f:56:3c:c5:7c:57:67:73:ca:d0:cd:bd:fc:dd:8e:a6:
59:69:c9:2b:5a:9d:60:b6:5f:32:35:65:ce:64:4a:b7:4d:e9:
57:66:92:6f:40:03:6b:46:e8:88:01:1a:b5:21:0a:f9:17:df:
bd:3c:c0:03:d9:8f:d6:45:b7:af:c4:f5:6e:79:92:1d:bc:e7:
65:c1:14:ed:6c:bb:81:03:bc:90:52:48:b4:f7:8e:ec:d8:3a:
56:46:0e:e2:b5:2a:f7:8d:49:9b:33:fc:a4:4a:71:32:fb:d1:
0b:35:f3:7a:3b:54:07:d4:b9:b5:57:b4:36:5e:ae:9c:3d:7c:
05:30:cd:f0:f8:b3:da:9c:22:44:8d:5a:24:a1:f9:99:f9:68:
93:0d:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:53:36 2026 by rpki-client