Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: m3Qq5q8DhVJ7qxurvaajgAzVvJo3N0asKYXT/z31yl8=
Subject key identifier: E8:18:39:E0:6A:30:AD:C2:53:BE:1D:A2:47:02:03:EC:51:0D:6A:AF
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019E32CEF8AC8474EED37A5EC1F56FEF80DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 1801
Signing time: Sat 16 May 2026 22:01:25 +0000
Manifest this update: Sat 16 May 2026 22:01:25 +0000
Manifest next update: Sun 17 May 2026 22:01:25 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: KKUsSU+LIm9lwe9EWQmm8CtfS1jJhJGZ46ouSakBBbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:f8:ac:84:74:ee:d3:7a:5e:c1:f5:6f:ef:80:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: May 16 22:01:25 2026 GMT
Not After : May 17 22:01:25 2026 GMT
Subject: CN=e81839e06a30adc253be1da2470203ec510d6aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:f0:bb:19:13:18:c9:18:f3:5b:8c:d8:04:
5a:66:d4:f4:71:c3:cf:e6:61:3e:f3:61:d4:30:2e:
f0:f8:ce:58:77:b8:79:d2:1c:33:0b:fd:43:72:78:
0c:af:01:81:d0:68:3a:98:c6:1b:11:ea:82:8d:b6:
fd:f6:58:c3:3d:05:51:4d:a3:6c:5e:f7:e4:30:59:
a4:8a:b4:5d:a8:6b:a4:07:e3:17:3f:47:98:76:d0:
ad:e0:8a:73:6b:b2:26:a0:6f:c7:6b:9a:73:4a:06:
83:d7:12:6d:77:56:52:dd:09:6c:e5:67:53:18:1e:
d8:8a:c6:f6:01:26:2b:46:b9:a3:c6:ad:b2:c4:f0:
e2:61:7c:35:cb:8d:db:4f:97:3f:ad:01:da:20:de:
89:a9:44:92:7d:46:ca:42:b5:f6:f8:14:c7:21:b9:
77:ec:af:57:25:74:7e:7b:3a:68:02:3a:6c:e7:19:
70:c0:b0:31:51:61:1f:58:0d:15:8d:e4:e8:12:18:
17:c5:e7:6e:dd:1f:af:7e:1c:9b:7d:3b:bc:9f:22:
1f:cc:eb:6f:aa:c8:3a:07:a8:af:0f:f3:52:3f:42:
6f:29:14:52:91:92:dd:7f:1a:cb:5f:54:36:52:a5:
36:1c:ff:66:24:e6:f0:9b:8d:ab:bd:50:aa:55:7f:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:39:E0:6A:30:AD:C2:53:BE:1D:A2:47:02:03:EC:51:0D:6A:AF
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:01:67:4d:88:20:6c:df:bf:af:32:d3:53:cf:66:27:24:
61:10:bc:38:92:ef:d3:7b:2a:db:fc:73:c9:90:b5:4f:6b:57:
9e:2a:07:b1:fb:9c:e6:8f:5e:e6:c4:5f:14:d0:fa:40:d1:a0:
14:5c:bb:a2:bf:f1:4b:36:01:c2:0b:3d:3a:d5:40:dc:09:ab:
3d:8a:fa:b8:fe:f5:b7:d5:c7:07:bd:b8:78:c0:ae:2a:7a:31:
3b:69:72:75:8b:60:a0:53:54:2e:52:9a:2f:11:f0:6a:6a:df:
39:af:cc:b1:4c:70:59:1d:4f:85:98:65:ab:dc:31:76:aa:d1:
6b:52:e6:0f:94:e4:8c:52:53:69:5d:a8:c8:7d:f5:64:76:00:
9e:30:38:fb:0e:10:bf:26:63:e1:87:b2:ac:15:3a:f8:34:a2:
b5:1e:7d:b7:e6:bd:05:11:53:36:0e:89:c5:88:df:aa:b9:5a:
fb:ab:5a:7f:5b:db:05:ae:d5:0e:8b:11:9c:67:4e:c9:d7:77:
6a:ca:bf:71:50:d1:0d:7e:bc:73:1e:a3:04:82:cf:75:17:f6:
4a:e9:48:3a:91:47:1d:35:e2:55:11:c0:7f:e5:3e:9d:e2:70:
34:fa:9f:2a:1a:36:ce:e6:12:91:e2:ec:91:d9:bc:34:ef:6b:
49:62:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:54 2026 by rpki-client