Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: q7FZVas83hBzzfhaqxCTMRQ3CwukfTa3Ms9ZHAlhdSw=
Subject key identifier: 03:CA:49:69:20:79:DC:17:D9:88:E5:8A:DC:16:38:4A:3B:68:4D:9F
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019F859F727A23FFED27FFD7699CF1A79FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 19C8
Signing time: Tue 21 Jul 2026 17:00:46 +0000
Manifest this update: Tue 21 Jul 2026 17:00:46 +0000
Manifest next update: Wed 22 Jul 2026 17:00:46 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: Y/0lpouhHb+2pFX0QVPAt/xmn2v8k7yOf0qHr5XHCtM=)
2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=)
3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=)
4: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (hash: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:72:7a:23:ff:ed:27:ff:d7:69:9c:f1:a7:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jul 21 17:00:46 2026 GMT
Not After : Jul 22 17:00:46 2026 GMT
Subject: CN=03ca49692079dc17d988e58adc16384a3b684d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:cd:88:cd:fa:38:25:39:22:5d:9b:1d:fe:
b9:a8:2b:79:75:37:6e:97:40:cd:7e:2e:27:e3:9b:
1f:5e:07:85:11:13:e4:70:a9:18:01:95:b8:55:f4:
d9:2c:8f:43:1d:47:8e:4a:55:00:ff:1f:ee:74:5f:
6c:6d:70:33:62:f2:eb:ec:e6:10:fc:10:de:fd:a4:
3f:c5:df:8f:78:bf:b8:1c:c0:b5:0e:8a:f6:87:79:
00:45:44:05:5d:ff:6e:19:f4:a3:91:4e:0e:80:7a:
39:a9:e3:bc:0a:fb:09:04:28:87:a8:bb:0b:f2:2c:
54:c7:b9:8d:3c:cd:4d:54:fe:db:e3:08:4c:5b:f7:
f6:f0:89:0c:0f:6d:90:ef:cc:af:4c:98:34:d5:95:
ed:08:f5:ff:eb:7b:eb:23:c7:2d:21:76:20:33:d7:
c3:08:3a:fa:2d:95:d6:d3:22:d4:c6:cd:8f:5b:28:
7d:70:f9:ac:37:bd:74:0d:3f:47:47:3e:77:e9:99:
c5:81:30:f9:9e:61:38:83:30:9f:03:ed:1e:7b:17:
f9:cb:28:c5:29:26:ba:98:65:3e:27:8a:8e:e5:28:
85:13:85:8e:50:5d:19:95:b6:59:24:03:b5:da:1d:
d4:d2:a3:83:a4:8a:9c:11:d5:70:fd:b0:46:2d:f4:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:49:69:20:79:DC:17:D9:88:E5:8A:DC:16:38:4A:3B:68:4D:9F
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3e:5a:91:7e:83:8d:da:fe:75:37:68:2a:50:77:47:5c:42:
11:1b:23:79:fd:27:6d:d9:44:47:e2:98:25:e2:90:c5:f5:14:
af:56:8b:d4:46:8b:e9:f9:5d:cc:05:0b:a2:5b:93:8f:d1:6b:
9c:b6:87:9a:f3:74:6b:18:6e:68:48:28:2c:cf:01:cf:3c:74:
b1:9f:3a:6b:d5:b6:d4:fc:6e:b9:89:7e:29:e4:c7:4a:79:11:
13:53:ca:8d:2a:e4:3d:06:e9:c9:31:78:35:3b:bc:17:a8:73:
8c:26:ac:36:b8:88:29:02:27:d6:4d:14:e4:1f:51:32:41:03:
ea:e0:3d:ac:d9:d9:3a:04:57:b1:8a:c6:8a:bd:8a:1f:26:91:
2e:a1:78:9c:08:bf:7f:ef:78:93:41:d9:8e:54:6f:aa:7f:d5:
82:8d:d1:9f:78:7b:14:97:69:bf:92:7a:a8:98:b6:4f:8d:cd:
ca:2c:1a:e2:60:f2:44:99:49:59:a0:8d:79:51:5f:d9:25:87:
e3:81:11:43:08:dd:c8:7b:55:ea:0c:b9:65:07:b7:da:e0:ae:
5d:8d:8d:20:05:b0:f6:a1:f2:37:aa:4a:f2:a5:f0:ed:e1:04:
f7:dd:f1:5f:7f:70:8e:1a:df:e6:de:f2:dc:9c:21:2c:ef:01:
f3:be:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:02 2026 by rpki-client