Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: gsPpgxd7ETXNNnuBrrcECKStfyyZCH8EI9XHBJ0cVZ4=
Subject key identifier: 21:B2:8A:1A:93:EA:EB:DF:22:CF:7D:67:8C:64:A8:B8:87:C5:0D:18
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 01A0024B4DD51FE6039DBEAB8012AF5045F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 18F1
Signing time: Fri 14 Aug 2026 22:01:24 +0000
Manifest this update: Fri 14 Aug 2026 22:01:24 +0000
Manifest next update: Sat 15 Aug 2026 22:01:24 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: 4mADBnIuKK3WkIT1zVoMcgZKJY3Cec2FPw1uFXz+FQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:4d:d5:1f:e6:03:9d:be:ab:80:12:af:50:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Aug 14 22:01:24 2026 GMT
Not After : Aug 15 22:01:24 2026 GMT
Subject: CN=21b28a1a93eaebdf22cf7d678c64a8b887c50d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:90:15:76:db:5d:4f:2a:4b:19:f9:da:9f:
d6:67:a8:94:1b:a4:4c:a9:37:39:4f:ff:cd:bd:b8:
ed:0c:90:a7:51:1e:2e:2b:a7:6f:3b:92:c8:c2:d9:
fd:50:8e:5c:99:8e:5f:90:dd:fc:13:81:c8:16:b0:
e0:13:ae:85:db:3e:96:23:9a:91:7d:2d:34:a8:12:
2a:2c:78:8e:7e:86:36:51:38:50:a0:57:ec:f8:92:
fc:6c:27:3f:2f:5a:c8:8a:90:0c:99:d6:f5:4f:c8:
16:25:16:0f:59:62:06:4f:d4:0b:a0:9c:f2:7b:59:
aa:94:19:2e:cb:52:30:91:71:1c:0a:6d:c5:12:05:
ac:af:95:7f:82:54:44:d3:70:02:e1:26:6e:6c:16:
e6:3d:7f:68:88:f4:37:63:cd:46:12:8e:27:3e:a3:
65:fc:e9:70:a7:72:f6:50:76:e3:6e:12:3f:86:f6:
38:6c:76:2a:1d:98:49:79:ed:4d:2b:aa:c5:c9:dd:
59:fc:ea:b5:1a:92:3e:02:6e:2f:1c:69:3d:83:cf:
b2:27:e1:96:64:92:9e:92:f0:9a:f8:c3:2c:af:65:
f6:2b:24:4b:02:5d:54:f1:53:8b:6a:8c:f9:d5:68:
4d:1e:57:a8:6e:f0:b2:bd:ee:b8:ec:ff:71:e9:73:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:8A:1A:93:EA:EB:DF:22:CF:7D:67:8C:64:A8:B8:87:C5:0D:18
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b6:63:5e:e2:ef:73:e7:bf:d2:a9:81:e6:12:a9:4b:7f:6b:
a0:7c:a5:f5:79:95:af:35:b6:be:fa:64:b1:c0:93:85:e5:fe:
78:e8:36:36:30:f4:2e:48:6e:bf:2e:39:4a:d1:e2:ed:5a:e3:
15:1e:51:7e:ea:95:5f:43:20:ff:4b:11:b9:f4:fb:a9:10:50:
02:d9:44:df:a4:8c:d0:90:d6:7c:f9:fa:b4:ca:2e:e0:f0:65:
bc:17:38:91:38:1d:73:37:d0:67:67:a2:05:ae:dc:94:4d:9f:
1c:3d:63:a8:73:56:f9:ac:1d:0d:8a:18:bc:1f:82:a9:0b:b8:
37:f6:6e:dd:f3:74:30:7c:07:56:7f:84:3e:cf:f8:13:53:94:
96:14:cf:97:39:7f:79:20:d5:31:9b:17:1a:a5:26:b5:d3:00:
d6:dc:23:9e:4d:a2:e7:ef:ee:94:3d:41:2e:e1:9f:87:e0:d5:
fa:aa:f2:6a:2c:ad:0e:69:1a:12:f6:18:98:09:cb:21:dd:a7:
d3:59:f0:6a:e3:8d:43:d5:6f:eb:60:04:49:73:a8:7c:60:ba:
60:46:b7:cf:ca:a1:45:1a:33:31:42:6d:fc:39:b7:d6:10:5a:
04:60:b5:09:53:ee:33:eb:a8:79:99:3d:e2:55:e8:e7:6c:0f:
3e:6b:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:02 2026 by rpki-client