Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
File: hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft (raw, json)
Hash identifier: KanCFSheztcKI8SoZFgpDvELBW0QZQrvpkYJu1mGQiE=
Subject key identifier: 9C:F3:30:82:CB:44:BA:2C:DA:C9:98:5E:EB:C4:70:FD:93:46:D4:26
Authority key identifier: 86:58:AF:B2:BF:A5:1D:B8:E6:55:57:60:5D:92:25:1A:BC:5A:EC:CB
Certificate issuer: /CN=8658afb2bfa51db8e65557605d92251abc5aeccb
Certificate serial: 019D37C00FC324B07F64DEC2C061A92312DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
Manifest number: 12
Signing time: Sun 29 Mar 2026 04:00:26 +0000
Manifest this update: Sun 29 Mar 2026 04:00:26 +0000
Manifest next update: Mon 30 Mar 2026 04:00:26 +0000
Files and hashes: 1: hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl (hash: QQ1BT29uojREyA4PTQTe11MdmwK0nuxfQtpKp5Qe/10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0f:c3:24:b0:7f:64:de:c2:c0:61:a9:23:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8658afb2bfa51db8e65557605d92251abc5aeccb
Validity
Not Before: Mar 29 04:00:26 2026 GMT
Not After : Mar 30 04:00:26 2026 GMT
Subject: CN=9cf33082cb44ba2cdac9985eebc470fd9346d426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:90:0b:98:17:fb:55:17:85:11:00:31:47:
b7:29:0b:f2:df:7e:49:fc:e4:a5:76:df:43:2d:99:
31:39:53:97:92:90:28:e3:61:ba:62:24:3e:60:37:
63:ab:bc:dd:f6:83:f2:7f:5c:a1:0d:a3:39:a0:7c:
b9:e2:e4:8a:0c:ca:8d:92:8c:9a:94:d8:10:29:31:
08:45:a9:bf:71:21:4d:a3:31:c6:84:22:d7:a8:32:
07:ee:50:02:8b:0b:f8:01:64:21:44:4e:73:6e:9f:
dd:03:db:76:4a:1b:91:8f:e6:a1:56:76:e5:f4:6d:
d2:a9:73:a9:fc:60:fc:12:4b:c3:64:40:2d:4b:15:
28:14:7b:8a:3e:b1:7d:dd:b4:0e:8f:58:b9:f0:19:
39:85:46:74:dd:97:ee:bb:0e:72:1e:e0:23:99:e2:
fa:38:71:a5:24:0f:d9:92:a3:82:83:c5:c4:b7:a9:
2c:9e:2f:41:8b:88:a2:14:35:fa:3c:b9:66:0e:7c:
cf:3c:41:a1:f7:17:03:b8:29:95:14:d6:f2:61:a6:
63:61:ea:79:eb:0b:91:ed:88:7f:70:69:aa:3e:18:
89:ad:a5:86:2c:c9:f3:6e:8e:32:4c:11:17:c9:dc:
cb:73:3a:dc:a7:b4:05:f5:f4:52:d3:70:4e:1b:c6:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:30:82:CB:44:BA:2C:DA:C9:98:5E:EB:C4:70:FD:93:46:D4:26
X509v3 Authority Key Identifier:
keyid:86:58:AF:B2:BF:A5:1D:B8:E6:55:57:60:5D:92:25:1A:BC:5A:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlivsr-lHbjmVVdgXZIlGrxa7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0bb0b5-82cc-416c-93b5-b6376623e761/1/hlivsr-lHbjmVVdgXZIlGrxa7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:d2:99:2a:eb:1a:7d:2f:d8:c4:05:6f:30:60:41:1d:92:
cd:21:30:bb:1d:5f:54:78:19:14:bb:05:95:b3:34:ab:5b:f1:
cf:b7:28:03:ef:ff:5d:c7:58:88:15:06:a1:ff:a2:9f:59:b9:
79:43:67:7a:9d:c5:39:23:54:79:f4:a6:fb:2f:40:67:d2:62:
93:f6:7f:7a:44:d9:e4:87:a1:da:9a:5e:01:ed:a5:88:7f:d3:
c1:97:75:de:a3:d5:81:b1:a3:a3:e4:6b:fb:20:73:19:47:2c:
da:94:a0:a6:3a:0e:40:2e:55:c9:2e:a1:39:3f:58:c8:f6:fa:
ba:ea:69:6f:b5:97:34:ae:d0:65:12:44:05:0d:ca:af:4f:d0:
5b:eb:f3:c2:52:27:25:bd:c1:85:d2:c2:ac:6c:a2:d1:6c:f9:
3f:2a:3a:74:01:f8:53:60:ca:f5:da:79:89:7f:b5:ba:0e:da:
e9:d7:c3:1b:aa:aa:40:b5:ab:90:7f:53:3b:6a:49:0c:67:2c:
54:e9:fb:ba:14:cf:67:53:b2:aa:3c:03:14:dd:57:ba:a1:ba:
2c:8b:b5:38:e7:a5:33:62:f0:ce:ad:40:e0:dd:96:ce:24:59:
00:00:d3:9e:83:91:8e:0c:04:b3:99:36:d0:08:c5:f1:43:19:
e0:af:4b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wA/DJLB/ZN7CwGGpIxLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NThhZmIyYmZhNTFkYjhlNjU1NTc2MDVkOTIyNTFhYmM1
YWVjY2IwHhcNMjYwMzI5MDQwMDI2WhcNMjYwMzMwMDQwMDI2WjAzMTEwLwYDVQQD
Eyg5Y2YzMzA4MmNiNDRiYTJjZGFjOTk4NWVlYmM0NzBmZDkzNDZkNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY6QC5gX+1UXhREAMUe3KQvy335J
/OSldt9DLZkxOVOXkpAo42G6YiQ+YDdjq7zd9oPyf1yhDaM5oHy54uSKDMqNkoya
lNgQKTEIRam/cSFNozHGhCLXqDIH7lACiwv4AWQhRE5zbp/dA9t2ShuRj+ahVnbl
9G3SqXOp/GD8EkvDZEAtSxUoFHuKPrF93bQOj1i58Bk5hUZ03Zfuuw5yHuAjmeL6
OHGlJA/ZkqOCg8XEt6ksni9Bi4iiFDX6PLlmDnzPPEGh9xcDuCmVFNbyYaZjYep5
6wuR7Yh/cGmqPhiJraWGLMnzbo4yTBEXydzLczrcp7QF9fRS03BOG8adfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzzMILLRLos2smYXuvEcP2TRtQmMB8GA1UdIwQY
MBaAFIZYr7K/pR245lVXYF2SJRq8WuzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxpdnNyLWxIYmptVlZkZ1haSWxHcnhhN01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wYmIwYjUtODJjYy00MTZjLTkzYjUt
YjYzNzY2MjNlNzYxLzEvaGxpdnNyLWxIYmptVlZkZ1haSWxHcnhhN01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wYmIwYjUtODJjYy00MTZjLTkzYjUtYjYzNzY2MjNlNzYx
LzEvaGxpdnNyLWxIYmptVlZkZ1haSWxHcnhhN01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHjSmSrr
Gn0v2MQFbzBgQR2SzSEwux1fVHgZFLsFlbM0q1vxz7coA+//XcdYiBUGof+in1m5
eUNnep3FOSNUefSm+y9AZ9Jik/Z/ekTZ5Ieh2ppeAe2liH/TwZd13qPVgbGjo+Rr
+yBzGUcs2pSgpjoOQC5VyS6hOT9YyPb6uuppb7WXNK7QZRJEBQ3Kr0/QW+vzwlIn
Jb3BhdLCrGyi0Wz5Pyo6dAH4U2DK9dp5iX+1ug7a6dfDG6qqQLWrkH9TO2pJDGcs
VOn7uhTPZ1OyqjwDFN1XuqG6LIu1OOelM2Lwzq1A4N2WziRZAADTnoORjgwEs5k2
0AjF8UMZ4K9LOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:45 2026 by rpki-client