Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: 5R6TtZRFowbpoj15ixP8LoIyL8QuUjVTgCobZApiXfo=
Subject key identifier: CD:18:81:8F:AD:8A:4B:79:50:9D:57:5A:62:55:D8:24:31:D3:08:03
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019E333CAD3F289B93086632FA1CDF097316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 0CD9
Signing time: Sun 17 May 2026 00:01:14 +0000
Manifest this update: Sun 17 May 2026 00:01:14 +0000
Manifest next update: Mon 18 May 2026 00:01:14 +0000
Files and hashes: 1: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: kRe13X4X1E1nOoNLJusBDhlav1JEyd1UYeO6ONEDV5o=)
2: LTXISUxPHYR9FIoNK22-mMEgcIo.roa (hash: 5U15BoyOR1vbWtgd6weIYrRThFJ7bGLw/lOyq6iWyFA=)
3: yAHDJdh6TZDYQNe65Bbps1iPzTk.roa (hash: 5IpdbJAl2pBKTXogrAl7O2M9edHwJaiAiuSdMux7Juc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:3c:ad:3f:28:9b:93:08:66:32:fa:1c:df:09:73:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: May 17 00:01:14 2026 GMT
Not After : May 18 00:01:14 2026 GMT
Subject: CN=cd18818fad8a4b79509d575a6255d82431d30803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:4d:b3:47:b3:00:c8:9b:b3:3f:58:82:a1:
9b:b8:19:fd:2b:51:d6:17:4a:43:20:fe:47:a6:c6:
dc:ce:9f:96:94:33:2e:5d:6e:8a:34:c0:6e:2e:ab:
a4:c5:d5:73:37:d1:f5:18:9a:81:62:f4:de:ad:22:
fc:4e:8b:0e:63:62:22:8a:3a:0c:21:8d:eb:55:a1:
f2:b5:3f:93:8a:6c:5c:f1:16:a5:60:e0:2b:54:b2:
9d:fa:3f:b8:98:da:89:16:03:cb:05:ca:27:c8:83:
9a:69:cb:a0:3c:20:56:49:66:e3:90:b0:98:8c:83:
5b:b2:a1:46:5a:19:63:10:03:13:d1:3e:06:f7:60:
98:11:79:2a:a0:10:06:2f:04:5d:0d:02:0d:e6:e6:
01:58:c5:fe:48:23:81:ac:b6:6e:a8:50:e7:9c:e7:
0a:95:ef:4f:1b:33:1b:ec:08:ba:7c:9d:67:e2:0f:
68:a1:1c:ac:ec:b4:45:76:52:79:bf:3e:e6:72:62:
25:73:3b:ed:23:35:41:95:f3:e6:a3:a6:db:b0:a6:
dc:30:f5:22:18:da:de:89:32:5e:e6:2f:ca:33:06:
91:21:23:df:e9:90:e9:ba:e7:92:be:81:cd:9d:84:
6f:8a:ec:dd:0e:78:70:09:42:53:b6:5b:07:7d:cb:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:81:8F:AD:8A:4B:79:50:9D:57:5A:62:55:D8:24:31:D3:08:03
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:60:5e:9d:d5:46:f3:64:d3:1d:c0:33:41:4b:1c:71:8e:
8b:9a:98:20:66:e6:79:2c:9b:3e:32:bb:50:d5:b4:1f:c0:d3:
b8:7b:a8:73:12:a8:66:bc:11:b1:b1:06:5d:78:c6:20:7b:a4:
55:21:5d:a4:c7:81:d0:91:2a:b8:ac:e4:75:a5:6e:6a:2f:ad:
3b:90:f9:ac:91:75:f4:bb:e7:04:0d:cf:cd:12:77:be:fa:d7:
6a:2e:6e:a9:ed:47:a0:7e:fc:9a:da:1e:42:ed:10:4f:36:9a:
83:2a:33:95:cb:f7:a4:91:8b:45:21:ba:12:16:0c:a7:01:7c:
b0:44:3b:7d:18:e4:d9:a6:ad:df:d7:a5:ed:c2:db:02:c8:7c:
6b:83:ed:5c:ba:73:dd:2b:f3:3f:1b:95:ee:44:c7:d5:55:5e:
42:6f:7d:0b:1d:7b:28:1d:25:08:69:7f:f5:c7:ea:5c:e8:7e:
a2:e3:88:a7:9c:10:71:1e:17:16:3f:83:40:c9:0b:76:81:9d:
52:d4:68:78:8f:a5:b2:b0:8a:64:d4:72:d1:74:a2:39:df:ba:
3e:fb:5d:bf:28:a0:0c:84:ad:2c:44:2f:b9:ba:eb:f7:74:44:
eb:2a:60:74:f0:09:93:b9:f9:14:e9:3c:ac:94:2c:18:6b:dd:
d3:37:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:06 2026 by rpki-client