Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: xw151q8n8wpj3s1yNKAcrNnK3Oh+yuMyiodMpNB+3cU=
Subject key identifier: 0A:AD:67:59:59:D8:A4:BB:58:70:20:D1:05:94:14:94:A4:C8:0D:B5
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 01A17D73539E89DB2276B550EB21F1F013A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 0EB5
Signing time: Tue 27 Oct 2026 13:01:12 +0000
Manifest this update: Tue 27 Oct 2026 13:01:12 +0000
Manifest next update: Wed 28 Oct 2026 13:01:12 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: h9nvCSgZbd58h2TFqcJqPwoBySULSWAeKZfRV1Gg/xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:53:9e:89:db:22:76:b5:50:eb:21:f1:f0:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Oct 27 13:01:12 2026 GMT
Not After : Oct 28 13:01:12 2026 GMT
Subject: CN=0aad675959d8a4bb587020d105941494a4c80db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:db:ce:c8:ca:30:22:ea:49:90:c1:97:2d:
0a:f0:7f:0d:af:00:49:aa:8f:39:e3:8e:7c:e5:db:
c3:03:ea:9b:b6:06:2a:d6:b5:39:28:99:df:6a:ad:
b6:2c:55:c2:e7:11:0b:93:c4:a5:c1:9f:a1:5a:4c:
ed:35:bb:2f:66:af:99:6c:80:43:72:e1:ed:5d:16:
f6:e0:a0:58:db:4e:08:d3:15:c9:16:6b:31:c2:76:
ac:e2:e0:07:e9:e5:6a:11:35:e5:a5:62:f5:ba:82:
ea:af:69:00:d2:b5:2c:da:85:5c:85:23:76:3f:61:
ce:06:0b:6e:ef:96:51:3f:45:9c:2a:b9:13:cf:fd:
f3:12:38:c9:72:a9:40:7c:d6:a1:81:c6:6a:22:32:
56:f5:c7:a3:39:63:9d:c7:c0:d0:aa:9b:41:51:88:
fd:2b:51:7f:fd:49:4f:c3:aa:b3:fe:79:09:52:98:
15:28:fe:b9:f1:f1:47:56:6f:dd:d1:7c:e8:8b:8a:
51:69:6f:32:cb:90:bf:82:c6:1c:e8:3d:aa:6b:38:
42:64:21:ff:19:d6:8f:54:7a:2d:72:57:84:56:2c:
80:22:53:e9:1b:76:6f:33:20:89:95:c2:be:6a:1d:
3b:9a:82:0e:56:25:52:23:5d:7f:03:4c:14:a1:f7:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:67:59:59:D8:A4:BB:58:70:20:D1:05:94:14:94:A4:C8:0D:B5
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:06:a0:5c:26:fa:58:de:62:9b:13:cc:85:80:c7:62:4a:d1:
56:47:7e:4c:fc:ed:a5:8b:9d:72:69:17:b9:90:7d:c5:85:b6:
60:ee:5b:22:15:cd:05:6d:32:44:ec:c6:48:51:f2:09:3b:49:
b9:6a:29:b0:75:9c:2d:f3:70:8d:50:39:5d:c2:cf:57:66:9e:
8f:96:a8:13:64:d5:2a:5f:1c:27:d3:6c:d8:fb:ab:fc:e9:4a:
1c:91:20:66:3e:89:41:7e:37:58:b8:2b:eb:e6:86:fd:87:33:
6d:bf:d7:a4:fc:1a:32:ac:59:55:23:f3:10:0a:fd:56:09:ae:
1b:aa:6f:49:b7:99:7f:7e:09:04:ec:a4:b7:67:7d:79:54:45:
8b:fb:fe:0d:30:e4:31:b9:bb:44:bc:3c:bf:cb:f1:2f:39:b4:
0e:b0:48:f5:9d:f0:08:a8:95:12:79:07:8f:b3:b7:41:c3:a7:
d7:f8:89:74:5b:60:43:cd:90:76:6d:7f:d8:38:e9:3f:f2:75:
7f:45:3e:fc:34:70:5e:e2:06:f4:3c:f7:8a:36:fb:b1:7b:d1:
a0:a7:f3:73:c1:36:e2:57:8f:1b:71:85:c7:f8:3e:56:3b:41:
23:4b:02:34:fd:c0:23:55:b9:be:9b:ba:0f:0e:a5:d6:dd:4a:
fa:33:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:01 2026 by rpki-client