Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: p6izeBeYdgPilCXywSL3FVuCLu/yTX14LJwlyp9xrhE=
Subject key identifier: 98:45:85:88:60:08:EF:1E:18:DF:A7:A8:67:B5:1F:32:F9:0F:98:EA
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 019FA071E0EACC34CD651A8C19E2C0C8BA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 0DBE
Signing time: Sun 26 Jul 2026 22:00:45 +0000
Manifest this update: Sun 26 Jul 2026 22:00:45 +0000
Manifest next update: Mon 27 Jul 2026 22:00:45 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: GzPn1TmhSWOCvOxPDrhQlU7dJjag3SKNTREDv0amsPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:e0:ea:cc:34:cd:65:1a:8c:19:e2:c0:c8:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Jul 26 22:00:45 2026 GMT
Not After : Jul 27 22:00:45 2026 GMT
Subject: CN=984585886008ef1e18dfa7a867b51f32f90f98ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:a3:17:28:09:db:f6:7d:c7:03:b3:94:59:
b7:85:59:cb:a9:c3:94:7f:5c:a6:d3:9b:97:0d:7b:
b7:8a:98:09:3f:96:d8:3f:ad:63:ac:c7:98:8e:cf:
83:a1:94:d4:e1:0b:14:a8:b8:a5:3a:36:00:ec:2f:
ca:fa:32:bb:5d:fa:0f:a1:2c:6c:33:f5:2d:b7:a4:
5a:11:d0:f4:7c:32:4e:b0:15:81:50:72:4c:03:cc:
5d:4d:fe:1e:c0:2f:47:d4:77:bb:5c:35:56:e7:4a:
85:3d:23:bb:a1:36:31:30:68:cb:dd:c9:63:69:94:
9b:34:e8:2d:0b:10:af:3c:65:d2:4b:14:3d:5f:51:
58:89:89:97:32:3e:98:60:4b:b0:3c:7e:b5:ce:98:
4f:e3:01:50:d6:a1:65:b1:e2:2c:7f:19:4b:35:07:
55:ba:74:35:ae:d1:99:1d:6a:a8:ca:d2:75:d6:3d:
ae:39:4d:b8:4a:a3:00:3e:81:79:9b:b0:72:d6:8d:
cf:46:fd:fc:81:84:6e:b6:d8:c8:b4:ff:b0:98:2b:
a0:a6:ff:19:7b:06:da:8e:f4:e6:b5:bd:63:e7:f3:
ba:70:0b:18:39:bb:4e:9a:77:fc:d5:3e:55:8a:1b:
e8:65:ea:23:7f:de:8c:d8:02:0c:8d:9f:a7:ab:e9:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:85:88:60:08:EF:1E:18:DF:A7:A8:67:B5:1F:32:F9:0F:98:EA
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5c:44:aa:30:20:e5:a9:f5:f3:96:34:aa:e8:a9:74:4f:ec:
1d:0d:08:5a:83:29:93:14:42:28:4b:84:77:e8:19:a5:59:ba:
09:3c:53:41:cc:c8:df:98:a5:a9:3a:1a:9b:d1:98:01:14:9b:
22:a3:d2:a7:65:1e:36:e0:0a:7b:c8:cc:9b:4c:be:ad:ed:68:
3c:10:ea:7f:02:79:90:eb:a4:d4:b0:23:0f:f1:1d:bb:48:eb:
c4:ba:15:91:51:65:42:20:00:c7:44:2e:d6:61:07:6c:58:4f:
da:0b:50:78:42:73:ae:a5:63:7e:8a:82:3f:2d:a5:4a:a1:f7:
41:d7:83:8b:c3:2a:c7:d5:64:6f:98:6a:4a:a8:4f:58:d0:cd:
97:99:31:97:45:5d:53:88:9c:87:b4:19:03:37:64:8c:e1:46:
52:34:fd:b7:1a:a1:2e:67:d8:9a:3c:ec:63:11:53:12:b0:e2:
8c:3c:ff:dc:df:13:24:e7:f4:92:87:3e:14:57:14:6a:2c:99:
77:05:d4:cb:49:72:73:ca:7a:97:01:f7:a8:c5:e8:2a:3c:05:
0f:11:61:24:20:51:7a:bb:c4:02:20:38:cd:6e:52:59:f2:0d:
13:44:f9:a9:44:60:aa:bf:84:b8:ef:5f:83:51:29:90:55:93:
98:0f:d2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gceDqzDTNZRqMGeLAyLp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NWFmMThhOGQ4MDI3NGMwYWMyZjUwMWIxNmQ2OWE0NTRl
MDhkNWUwHhcNMjYwNzI2MjIwMDQ1WhcNMjYwNzI3MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg5ODQ1ODU4ODYwMDhlZjFlMThkZmE3YTg2N2I1MWYzMmY5MGY5OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19WjFygJ2/Z9xwOzlFm3hVnLqcOU
f1ym05uXDXu3ipgJP5bYP61jrMeYjs+DoZTU4QsUqLilOjYA7C/K+jK7XfoPoSxs
M/Utt6RaEdD0fDJOsBWBUHJMA8xdTf4ewC9H1He7XDVW50qFPSO7oTYxMGjL3clj
aZSbNOgtCxCvPGXSSxQ9X1FYiYmXMj6YYEuwPH61zphP4wFQ1qFlseIsfxlLNQdV
unQ1rtGZHWqoytJ11j2uOU24SqMAPoF5m7By1o3PRv38gYRuttjItP+wmCugpv8Z
ewbajvTmtb1j5/O6cAsYObtOmnf81T5VihvoZeojf96M2AIMjZ+nq+lYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhFhYhgCO8eGN+nqGe1HzL5D5jqMB8GA1UdIwQY
MBaAFIZa8YqNgCdMCsL1AbFtaaRU4I1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jOWM4MDAtYWVmYi00NGJjLWI3MTIt
MWVlYTRlYTQzYTJmLzEvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jOWM4MDAtYWVmYi00NGJjLWI3MTItMWVlYTRlYTQzYTJm
LzEvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlxEqjAg
5an185Y0quipdE/sHQ0IWoMpkxRCKEuEd+gZpVm6CTxTQczI35ilqToam9GYARSb
IqPSp2UeNuAKe8jMm0y+re1oPBDqfwJ5kOuk1LAjD/Edu0jrxLoVkVFlQiAAx0Qu
1mEHbFhP2gtQeEJzrqVjfoqCPy2lSqH3QdeDi8Mqx9Vkb5hqSqhPWNDNl5kxl0Vd
U4ich7QZAzdkjOFGUjT9txqhLmfYmjzsYxFTErDijDz/3N8TJOf0koc+FFcUaiyZ
dwXUy0lyc8p6lwH3qMXoKjwFDxFhJCBRervEAiA4zW5SWfINE0T5qURgqr+EuO9f
g1EpkFWTmA/SGQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:35:34 2026 by rpki-client