Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: jGN7BfhL/bRqJ3l+waKrHbOCk/VuBCdbO5aXejpgu1g=
Subject key identifier: 0E:63:17:B3:7F:31:4D:4C:38:70:EE:D5:5C:52:D5:2E:51:22:F0:0D
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 019E2926828CD3791F0EEFBDF6D46479E672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 18A1
Signing time: Fri 15 May 2026 01:00:49 +0000
Manifest this update: Fri 15 May 2026 01:00:49 +0000
Manifest next update: Sat 16 May 2026 01:00:49 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: QziQAVkklRW183f5+JwCc6VTkIDDi79ZZI94oaXDhvM=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:82:8c:d3:79:1f:0e:ef:bd:f6:d4:64:79:e6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: May 15 01:00:49 2026 GMT
Not After : May 16 01:00:49 2026 GMT
Subject: CN=0e6317b37f314d4c3870eed55c52d52e5122f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:8e:a4:64:f5:51:28:6d:01:2c:f7:45:73:
fd:e1:7f:20:5b:09:ad:72:04:ea:20:27:ee:9e:1e:
27:03:62:ff:68:b0:5c:10:92:22:2c:94:74:ed:e1:
4a:ff:13:ce:07:ee:cd:79:43:43:34:4a:26:a1:7f:
68:46:9a:ca:a4:6d:dc:f7:dd:bb:77:d9:bb:f0:f9:
17:b3:55:d2:df:48:18:df:fd:cd:30:bf:a3:fd:79:
f1:d1:85:2c:bf:5a:5a:48:eb:9d:b3:17:55:47:ae:
ef:64:24:d9:05:06:be:33:26:fe:fa:2c:34:f9:23:
d2:2a:0c:d7:dc:75:0c:1b:b4:58:f7:6f:18:cf:4c:
9e:51:b1:be:1b:b9:46:28:a8:ac:d6:ff:60:a9:cd:
fd:9b:22:4b:c6:f4:21:aa:3d:d6:24:9c:37:a5:50:
af:ed:0b:9f:92:67:e2:e0:b4:4a:cb:21:84:db:49:
a0:6c:b9:06:2e:53:da:96:bc:a4:cf:51:e2:d5:85:
77:75:38:3c:5b:d2:ef:3c:86:34:e2:f8:d1:f0:14:
83:f8:2f:1c:b4:89:bc:ea:2c:d5:8f:c3:1b:b7:30:
ce:a3:e5:a4:6c:df:7a:cd:ec:70:6e:91:9b:59:d5:
88:1e:30:72:19:4b:6a:f4:b2:12:e7:38:af:e1:11:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:17:B3:7F:31:4D:4C:38:70:EE:D5:5C:52:D5:2E:51:22:F0:0D
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:5f:9c:54:ca:d7:e8:5a:30:26:07:82:2e:7e:2d:ab:92:
ef:8c:b8:e6:b7:bc:5f:0b:31:df:4b:13:a1:e4:07:5f:22:0e:
ef:fa:a2:cb:69:7c:7e:f7:95:46:48:85:bc:55:e9:e1:07:b9:
21:f1:15:15:0a:81:67:03:10:49:fb:49:95:49:24:d3:7f:c5:
10:cb:a5:bd:63:13:c7:58:48:73:21:c7:a4:a4:f9:5f:a6:3d:
78:96:3e:1d:bf:86:a7:01:a8:cf:ff:cc:99:6c:cd:4f:65:c2:
a7:8a:e2:4c:f8:ce:a5:bb:03:76:c3:fe:e5:62:60:33:f9:0b:
41:49:24:dd:8f:28:ee:44:93:b3:ac:7e:a0:8c:8c:9e:01:49:
d4:e7:72:1a:d7:82:f2:f6:3f:13:59:d0:ac:df:f9:fd:5a:30:
71:e7:74:cb:d5:e6:5b:b1:a9:c9:e2:ad:e1:ee:b3:e1:2d:40:
f5:91:a1:d7:8f:4e:86:c0:88:c0:1e:54:b7:9c:7e:1a:8a:61:
0b:0c:26:b2:90:b5:a3:40:91:92:f7:93:a3:01:13:e3:f8:52:
7d:6d:b0:b1:91:9b:cc:f7:21:a1:54:0a:30:45:e9:0e:df:e2:
4f:19:57:ec:e8:28:23:2f:8a:4b:fd:7d:f7:5f:52:14:aa:3e:
8d:67:d5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJoKM03kfDu+99tRkeeZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmQ1NzQ2ZTMwMDA5MWRlZDFhMTFhMTNiMTY4MDdiNGZk
MGYxZmMwHhcNMjYwNTE1MDEwMDQ5WhcNMjYwNTE2MDEwMDQ5WjAzMTEwLwYDVQQD
EygwZTYzMTdiMzdmMzE0ZDRjMzg3MGVlZDU1YzUyZDUyZTUxMjJmMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT6OpGT1UShtASz3RXP94X8gWwmt
cgTqICfunh4nA2L/aLBcEJIiLJR07eFK/xPOB+7NeUNDNEomoX9oRprKpG3c9927
d9m78PkXs1XS30gY3/3NML+j/Xnx0YUsv1paSOudsxdVR67vZCTZBQa+Myb++iw0
+SPSKgzX3HUMG7RY928Yz0yeUbG+G7lGKKis1v9gqc39myJLxvQhqj3WJJw3pVCv
7Qufkmfi4LRKyyGE20mgbLkGLlPalrykz1Hi1YV3dTg8W9LvPIY04vjR8BSD+C8c
tIm86izVj8MbtzDOo+WkbN96zexwbpGbWdWIHjByGUtq9LIS5ziv4REV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5jF7N/MU1MOHDu1VxS1S5RIvANMB8GA1UdIwQY
MBaAFBy9V0bjAAkd7RoRoTsWgHtP0PH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQt
YmRlYTYzZTVhN2M0LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQtYmRlYTYzZTVhN2M0
LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpZfnFTK
1+haMCYHgi5+LauS74y45re8Xwsx30sToeQHXyIO7/qiy2l8fveVRkiFvFXp4Qe5
IfEVFQqBZwMQSftJlUkk03/FEMulvWMTx1hIcyHHpKT5X6Y9eJY+Hb+GpwGoz//M
mWzNT2XCp4riTPjOpbsDdsP+5WJgM/kLQUkk3Y8o7kSTs6x+oIyMngFJ1OdyGteC
8vY/E1nQrN/5/Vowced0y9XmW7GpyeKt4e6z4S1A9ZGh149OhsCIwB5Ut5x+Goph
CwwmspC1o0CRkveTowET4/hSfW2wsZGbzPchoVQKMEXpDt/iTxlX7OgoIy+KS/19
919SFKo+jWfV7g==
-----END CERTIFICATE-----
Generated at Fri May 15 09:51:24 2026 by rpki-client