Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: +TUurEMWEhUhasXxxkAK7BrBUZcSuKmSq4w0dJdZJl8=
Subject key identifier: E3:90:BB:71:1B:C9:DC:A4:A2:42:3E:B8:B9:C6:53:DC:C6:35:83:4B
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019D37C0A95489B2C7DA8BF60F2D744A89CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 177F
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: 8KnhGdlG6hcEQtkKtAm6pflFx9uzMSOXUBdgNYvYnYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a9:54:89:b2:c7:da:8b:f6:0f:2d:74:4a:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=e390bb711bc9dca4a2423eb8b9c653dcc635834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:09:e9:5a:2d:12:0b:90:53:3a:40:8b:b3:
b9:04:d1:ec:ba:1f:4a:37:93:be:fe:cd:69:97:23:
63:bb:f1:81:6a:2d:3d:9d:14:49:dc:c6:97:72:54:
16:da:4c:4e:1b:f5:45:ff:d3:2c:60:ef:89:18:eb:
c2:7e:6a:39:d8:a7:07:a6:9d:9a:3c:28:5d:96:93:
2c:ba:18:ec:a3:df:d3:ea:28:20:c9:8d:16:4e:9c:
06:74:f5:03:b8:fa:e1:eb:62:dc:18:38:c7:7a:e9:
fe:5a:bd:9e:09:5c:32:a5:0a:20:81:f0:02:8c:6b:
fb:c1:cc:90:15:fb:52:bd:3f:ee:1f:af:a9:4e:85:
7b:5b:3c:64:0b:a4:dc:90:1b:71:cd:c7:b6:24:08:
f1:a6:8f:a0:49:74:81:7b:51:d5:c0:9b:92:b4:e7:
bc:52:63:0c:a3:b8:29:97:8c:44:09:52:16:c0:12:
18:11:39:28:58:2f:d5:4d:f2:ce:a2:58:15:58:27:
6a:c2:9c:3c:0d:32:4e:65:f2:15:e9:e0:a8:a5:68:
1c:42:82:04:6f:86:57:7d:19:42:9e:7d:22:52:64:
f9:93:8e:ec:26:b2:fd:f9:c9:f6:63:cd:d5:4a:06:
0c:73:87:97:c8:f7:34:d0:53:9b:e4:93:ba:b7:7b:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:BB:71:1B:C9:DC:A4:A2:42:3E:B8:B9:C6:53:DC:C6:35:83:4B
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:01:2f:83:c4:4d:c4:a3:71:a8:8e:c1:ef:8d:5c:b7:d6:
51:e9:73:72:cb:a8:06:6e:1e:91:1c:32:99:76:31:15:42:86:
f6:e5:c0:17:67:28:b4:5b:9b:f2:3e:ac:60:7e:5a:9c:84:4b:
1e:55:f5:73:30:a7:f4:8c:a5:02:24:ae:ba:27:b5:9c:53:eb:
81:d5:ed:a1:b5:8c:4f:36:38:c4:76:f9:a0:78:25:a9:1d:ac:
4b:98:c5:6f:6a:47:13:e8:66:ec:e9:b8:68:d0:69:df:93:9b:
6b:b4:53:34:df:e2:86:48:9b:bc:4f:56:33:cf:2d:1d:a7:68:
f6:ec:a1:3f:d2:35:4b:db:a5:b0:38:45:5e:e7:66:bd:cb:a3:
3d:20:1f:d1:a8:f5:b5:10:81:c2:06:76:7f:c9:a6:91:85:00:
04:f4:f4:3a:ab:81:38:4e:83:e3:83:a4:c7:c5:c6:f9:7f:90:
f6:f3:7c:8d:d1:1a:58:17:66:6f:63:a6:ee:ad:64:34:43:f5:
2f:da:0c:5d:2e:5a:de:85:bf:78:0a:e3:95:b1:d0:00:2f:20:
72:76:71:2d:51:50:47:ae:7e:fd:b1:4e:41:77:97:ef:07:9a:
27:4a:46:43:08:82:af:33:ca:d8:ac:b2:ba:4d:96:d6:d3:21:
c3:00:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client