Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: EN76vonxWcxcrAe3q67XzzFCrs6FBoqCsjGr2A7sdbM=
Subject key identifier: 45:FE:F9:26:43:B3:02:72:01:58:2F:C4:D5:2E:E8:09:37:F8:B8:1E
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 01A0D15BEDA2615E4945DE49A5EF456230C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 0462
Signing time: Thu 24 Sep 2026 03:00:57 +0000
Manifest this update: Thu 24 Sep 2026 03:00:57 +0000
Manifest next update: Fri 25 Sep 2026 03:00:57 +0000
Files and hashes: 1: c-6Hu0Q6KVByexb7ai3zy809xac.roa (hash: veDFchcM2SNVuwzCbLkM0CwAD1EuPwvwRgb+dufQVR4=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: DJrvWkSTgIOcF+sYuLWmvBacIosN8/58SMzu+mQqnB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:ed:a2:61:5e:49:45:de:49:a5:ef:45:62:30:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Sep 24 03:00:57 2026 GMT
Not After : Sep 25 03:00:57 2026 GMT
Subject: CN=45fef92643b3027201582fc4d52ee80937f8b81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:bc:4d:a1:60:4f:79:34:43:c8:28:32:9c:
67:6b:a9:7b:8b:74:69:e6:8a:ab:1e:80:d3:a4:4a:
c6:d5:18:b6:1a:b2:44:9e:df:c2:3e:38:d2:d1:62:
42:34:5c:eb:1c:4d:90:1f:da:62:61:74:08:bf:af:
17:b1:c7:40:53:19:e9:0a:f6:bb:3b:38:57:da:c7:
dc:d3:e6:fa:bc:ef:b0:4e:d0:c2:fe:76:5a:0d:0c:
d1:3b:54:1a:4b:cb:26:79:cf:3f:cf:d2:45:9e:f2:
6f:08:22:21:b2:27:55:ce:86:25:90:8c:bd:d0:0c:
18:dc:5d:17:20:57:44:2f:5e:a9:1f:83:40:b1:50:
3d:f0:5a:eb:91:96:73:3f:aa:d8:be:be:b9:ab:33:
f0:d6:ec:20:12:6b:b7:60:cd:48:47:5d:75:73:2b:
16:4f:57:59:b9:7d:5f:7c:12:f0:2a:bb:d4:b1:46:
40:45:53:45:d1:b2:c1:4d:93:bc:1f:60:38:7e:30:
e6:f0:89:d9:e0:02:fc:89:95:94:5d:87:ee:b9:58:
0c:3b:d0:9c:5c:5a:3c:f0:f4:b6:e2:79:55:68:27:
70:93:b0:18:65:97:60:68:d0:52:6a:a4:78:00:c9:
1e:34:85:ec:37:87:b2:93:d7:26:55:6f:22:d5:11:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:F9:26:43:B3:02:72:01:58:2F:C4:D5:2E:E8:09:37:F8:B8:1E
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b7:c1:07:f9:41:81:b5:63:07:fc:a9:e3:58:89:98:e3:87:
a3:6f:48:cd:9d:fa:f8:5b:83:12:42:7f:f0:37:ef:55:bb:57:
25:85:95:93:b3:00:be:eb:9a:f6:b7:92:62:ac:b7:e9:a5:dd:
7f:1a:f8:ee:07:36:99:2b:54:5f:61:0d:31:10:8c:fb:dc:31:
cb:4f:d7:f4:d2:bb:47:63:4c:53:e7:31:3f:61:11:7d:56:ca:
0f:0d:6c:09:e8:57:4d:e3:cc:d6:dc:0c:d1:c8:4f:36:d4:9d:
f9:95:84:40:22:e9:b0:c0:4c:92:55:f5:77:ba:b3:54:b7:fe:
e6:16:98:56:1a:02:dd:d3:9c:df:25:1c:05:40:b4:96:a4:f4:
51:39:f9:00:74:72:fb:4d:5b:b7:96:d5:80:e5:2c:2c:ba:f3:
57:ff:6f:5c:4e:20:97:0e:19:26:0c:86:3d:51:c9:cb:ef:03:
43:9f:0b:3a:cc:47:a6:fa:04:ba:9a:26:61:1b:d0:5f:fe:69:
36:fa:a3:8f:8b:dd:82:e8:78:48:a3:f2:fe:8f:50:dd:c1:2c:
77:4f:6b:bf:34:7b:c6:33:6a:d1:4a:85:57:27:72:41:80:ed:
bf:45:9e:91:05:a0:79:93:2c:fa:b4:44:44:24:79:2d:30:db:
27:ed:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:06 2026 by rpki-client