Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: lrQUcM13TTlwW88B0XLEsMPe8kkVNo/mxNUx9XNB9qc=
Subject key identifier: 07:DE:31:63:57:D1:29:5E:0C:B6:9D:50:39:2C:E2:E9:5E:6D:65:0C
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 019F12D4087F18B8408323E9BE60881582F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 191A
Signing time: Mon 29 Jun 2026 10:01:53 +0000
Manifest this update: Mon 29 Jun 2026 10:01:53 +0000
Manifest next update: Tue 30 Jun 2026 10:01:53 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: +yJSHH1KjZ9cNGpymyVdWfncg7oPNbDPwsNkiTCQ5Sk=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d4:08:7f:18:b8:40:83:23:e9:be:60:88:15:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jun 29 10:01:53 2026 GMT
Not After : Jun 30 10:01:53 2026 GMT
Subject: CN=07de316357d1295e0cb69d50392ce2e95e6d650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:6e:e4:b9:12:a9:ab:83:1c:f2:e6:87:9e:
c6:a1:91:22:2b:1d:84:4a:73:a5:74:b6:79:b0:05:
4a:1e:4b:2b:44:4d:6f:d6:62:d2:1c:3d:d4:de:cb:
63:ef:e4:da:77:5f:de:4c:fe:2c:bd:e8:a8:80:ef:
c2:4b:71:19:5d:52:70:72:95:0c:b5:59:19:51:80:
e4:84:2f:65:7d:67:aa:95:e4:fd:94:23:c6:a4:aa:
64:0b:97:e4:26:8f:7e:c3:d2:73:ac:24:cd:1f:82:
d2:c5:c5:37:10:5c:41:13:fd:fb:7c:b4:c5:69:2f:
ed:d2:cb:b2:74:65:34:e7:47:54:14:c8:70:aa:41:
74:9f:ef:a7:d4:f7:dc:c2:07:03:ce:5a:c0:72:ff:
7e:35:32:4e:32:46:5b:c0:07:34:3c:82:25:a4:93:
6b:d1:5c:12:4f:8e:81:2b:b8:05:00:f0:cd:0e:80:
b6:8f:56:df:b3:9f:8e:f1:bb:22:cf:ac:6a:61:0f:
ad:c9:6e:d1:61:8e:25:db:74:cd:e2:c4:04:ac:33:
60:62:2d:6f:e5:b8:23:de:2c:99:ef:ca:ba:f4:d6:
b8:03:e3:2f:e5:2e:cc:0c:20:98:90:a4:2e:fa:d9:
e4:2a:57:45:fc:19:d1:dd:e7:1e:bc:4e:b0:bc:a3:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:31:63:57:D1:29:5E:0C:B6:9D:50:39:2C:E2:E9:5E:6D:65:0C
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ac:6a:c1:1f:6a:6b:20:b6:1d:cb:2b:fe:26:db:47:09:74:
5d:fd:d9:b1:7b:d0:bf:af:68:06:99:92:96:98:32:3f:20:3b:
92:60:ae:b8:34:b8:e0:ac:16:49:d3:b6:fc:dc:3e:56:08:27:
c6:ab:81:2f:d6:6e:8a:76:18:c3:6b:83:17:3f:75:14:fd:42:
1f:e0:14:81:6b:35:0b:81:dd:b8:e7:fe:66:03:4f:b9:25:67:
34:89:63:85:96:14:00:47:f7:07:e4:45:12:99:99:bd:1f:c9:
de:79:61:79:94:28:73:9c:8c:1e:e1:57:c0:a0:d2:cd:17:f0:
4b:52:60:6b:fa:74:91:93:d1:e4:68:1f:d6:f6:93:09:4d:61:
32:f6:9b:62:7e:c1:a9:51:c8:7d:33:0e:1b:e0:e1:de:a4:73:
02:39:02:2f:3e:94:fd:f0:6e:36:b5:c9:36:0c:4d:d5:4c:77:
74:eb:00:e0:f4:29:ac:9b:ba:06:33:22:f5:81:ec:cd:be:d0:
c4:5a:56:9b:5e:34:fd:fc:7f:b9:3a:6d:34:02:48:e1:c8:91:
e6:e4:9a:85:54:2f:ba:5b:41:48:4a:fb:2f:d3:7a:29:d1:ec:
c4:cd:fa:31:58:67:80:ac:91:4e:33:84:ce:48:c6:0f:14:eb:
73:fa:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:38:18 2026 by rpki-client