Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: VqaBZgjivKnAeTidhb3i8cgG7dRZwVUkrqMH47MHE0Q=
Subject key identifier: F7:18:B0:69:F2:98:96:A1:6E:1C:E1:BC:EB:9B:9B:C7:AF:69:B5:BD
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 01A04CBFB46C18A98724092E85A2BE2DBFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 11DE
Signing time: Sat 29 Aug 2026 09:00:26 +0000
Manifest this update: Sat 29 Aug 2026 09:00:26 +0000
Manifest next update: Sun 30 Aug 2026 09:00:26 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: HZEG1vr3Z0XpOgwLQD4xkeryfkDbgbCizr+ZjpsNUu4=)
2: u_mH6EUqNkqz_nJQ2xMzHjAOs5k.roa (hash: Bwm8rVbQPci5MWzF+kRT+h1fK3xCwzJ+2otJGbrOfJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:bf:b4:6c:18:a9:87:24:09:2e:85:a2:be:2d:bf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Aug 29 09:00:26 2026 GMT
Not After : Aug 30 09:00:26 2026 GMT
Subject: CN=f718b069f29896a16e1ce1bceb9b9bc7af69b5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:7e:3f:f0:7c:fb:c4:8c:d5:3d:d8:55:6e:
2b:6d:f8:0a:7b:3e:1b:a0:69:ef:f6:55:af:b9:7f:
f1:69:81:c2:90:1b:d6:3f:94:24:f6:8d:57:4f:88:
3f:b8:42:98:71:a0:bc:68:4f:79:97:bd:fe:fa:2c:
c7:86:43:c8:a0:e1:1a:42:70:8e:4f:aa:7f:31:1e:
bb:35:88:fd:3f:83:1c:ad:e1:c7:4b:ac:93:e0:55:
c5:96:27:a8:83:e0:ae:61:85:13:10:b5:49:1d:fb:
14:6a:c5:2a:38:5a:77:f5:24:ce:60:c9:dc:cd:c7:
b5:c3:48:dc:19:e3:76:43:f5:94:57:b6:8d:c1:4c:
63:ca:c8:c7:2d:81:a7:ea:d1:c4:ef:e5:af:37:62:
f0:1b:68:fd:55:8d:01:01:94:0e:0b:04:15:86:0d:
7f:da:f9:e5:11:e9:de:42:49:03:f2:e6:2b:9a:00:
16:53:14:8e:16:98:1e:27:58:48:d3:ed:6c:43:ba:
9c:75:24:07:4f:73:fa:38:47:87:ee:86:6a:20:dc:
90:16:e5:9d:4e:b2:ac:35:e9:63:5f:21:8d:4c:2c:
8d:d3:93:d0:85:9b:f4:cd:90:79:bd:1d:33:69:a0:
3f:95:b4:ae:c1:b8:42:6e:1d:83:67:81:40:66:ac:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:B0:69:F2:98:96:A1:6E:1C:E1:BC:EB:9B:9B:C7:AF:69:B5:BD
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:97:99:30:4a:f5:be:7d:d5:36:6a:e9:24:8a:02:d8:06:c4:
e6:05:b6:c1:7d:5c:3a:22:6f:bf:91:c9:56:94:d5:20:1a:5d:
10:92:8d:3d:0f:0b:a2:5a:b3:f4:a8:7d:fc:cd:bf:9f:fc:f0:
0f:0c:80:83:76:9d:5e:78:8a:96:f8:81:e6:d2:7d:94:70:1d:
9d:3d:8e:6c:59:38:50:e0:6a:d1:c2:26:bd:5c:70:e4:04:c4:
92:93:99:88:0b:4c:65:9b:8d:15:79:85:d3:c4:46:66:d0:53:
10:57:6f:d1:23:77:cf:09:5c:c6:67:e6:01:4a:e4:05:14:77:
e8:6b:ed:a0:1a:bc:92:37:4f:2d:0c:43:82:1c:e4:54:f2:c7:
92:ba:d7:18:b3:8e:94:b3:62:8b:0c:ad:09:fe:78:72:ec:cf:
1d:17:62:af:e2:90:30:76:08:a5:9d:d8:19:69:63:5c:52:ba:
a3:1b:44:00:0b:d7:c5:0a:a6:a0:50:60:8e:ad:a3:02:66:ee:
b7:7b:c0:fe:1e:38:a5:8d:78:89:fb:3e:d2:79:b5:64:a5:89:
8e:3e:23:9a:fa:b5:ce:31:80:d9:2b:87:ac:f5:1e:40:32:59:
ec:27:51:05:0f:95:10:17:3f:c1:24:cb:1d:5b:e6:cf:ac:fa:
dc:44:85:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBMv7RsGKmHJAkuhaK+Lb/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjYwODI5MDkwMDI2WhcNMjYwODMwMDkwMDI2WjAzMTEwLwYDVQQD
EyhmNzE4YjA2OWYyOTg5NmExNmUxY2UxYmNlYjliOWJjN2FmNjliNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVZ+P/B8+8SM1T3YVW4rbfgKez4b
oGnv9lWvuX/xaYHCkBvWP5Qk9o1XT4g/uEKYcaC8aE95l73++izHhkPIoOEaQnCO
T6p/MR67NYj9P4McreHHS6yT4FXFlieog+CuYYUTELVJHfsUasUqOFp39STOYMnc
zce1w0jcGeN2Q/WUV7aNwUxjysjHLYGn6tHE7+WvN2LwG2j9VY0BAZQOCwQVhg1/
2vnlEeneQkkD8uYrmgAWUxSOFpgeJ1hI0+1sQ7qcdSQHT3P6OEeH7oZqINyQFuWd
TrKsNeljXyGNTCyN05PQhZv0zZB5vR0zaaA/lbSuwbhCbh2DZ4FAZqxogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcYsGnymJahbhzhvOubm8evabW9MB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5eZMEr1
vn3VNmrpJIoC2AbE5gW2wX1cOiJvv5HJVpTVIBpdEJKNPQ8Lolqz9Kh9/M2/n/zw
DwyAg3adXniKlviB5tJ9lHAdnT2ObFk4UOBq0cImvVxw5ATEkpOZiAtMZZuNFXmF
08RGZtBTEFdv0SN3zwlcxmfmAUrkBRR36GvtoBq8kjdPLQxDghzkVPLHkrrXGLOO
lLNiiwytCf54cuzPHRdir+KQMHYIpZ3YGWljXFK6oxtEAAvXxQqmoFBgjq2jAmbu
t3vA/h44pY14ifs+0nm1ZKWJjj4jmvq1zjGA2SuHrPUeQDJZ7CdRBQ+VEBc/wSTL
HVvmz6z63ESF6A==
-----END CERTIFICATE-----
Generated at Sat Aug 29 12:42:29 2026 by rpki-client