
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: yjNbC38hYcB/F2nNR8rDIdXgeZByHsr9Yx5jmKX3A+U=
Subject key identifier: 40:98:CF:58:E1:3F:69:18:06:E0:FA:45:E8:6D:29:71:1E:DD:1C:3E
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019F189EB13F3BC7FD5966BAE98E6CE76CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 13:01:20 +0000
Manifest this update: Tue 30 Jun 2026 13:01:20 +0000
Manifest next update: Wed 01 Jul 2026 13:01:20 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: VSDgGRDuP6kMWjEKdpFnVj4u++o2oE9WylaTZ62eOJc=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:b1:3f:3b:c7:fd:59:66:ba:e9:8e:6c:e7:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jun 30 13:01:20 2026 GMT
Not After : Jul 1 13:01:20 2026 GMT
Subject: CN=4098cf58e13f691806e0fa45e86d29711edd1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:11:35:02:89:0c:4b:a0:57:8d:3e:fa:2f:
5f:02:3d:18:fe:72:26:11:5d:6a:e3:a2:9d:88:22:
4f:c1:6d:e8:1d:94:f1:57:9c:e0:a3:6e:c1:96:fe:
fb:16:f0:bd:0e:c8:a0:f8:a1:26:9c:b9:62:16:06:
f0:82:8f:d7:6c:4a:c7:19:e5:80:9f:41:85:47:b5:
0e:dd:0f:8d:54:ab:e5:e0:71:94:51:31:d4:a4:31:
bb:fd:64:cf:a7:ba:41:ca:04:d7:e6:09:62:83:df:
59:1d:1f:6c:4b:85:9a:e0:57:b6:f6:1d:79:3c:63:
de:61:e3:13:c5:1a:80:dd:de:3e:e0:b2:cd:ee:77:
38:26:b8:22:e8:e1:04:2a:78:0e:fc:cc:d8:4e:c8:
fb:a7:c8:a4:d1:da:52:82:52:f5:87:dc:43:8a:dc:
8e:5f:d1:74:c1:db:58:11:33:3c:46:8a:35:f1:f2:
f9:7a:e0:90:bd:a6:89:a9:03:d6:10:61:2c:57:d6:
f8:e0:b1:be:cb:ed:ad:ea:72:4f:e8:6c:3b:0e:a2:
4f:c3:64:0a:c2:c5:28:e9:a6:0b:08:97:3f:d8:bf:
72:55:8a:0e:f8:70:f9:05:6f:1a:42:97:5d:1a:88:
ea:47:c8:1f:0d:1b:48:cf:fc:76:d1:18:32:bd:66:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:CF:58:E1:3F:69:18:06:E0:FA:45:E8:6D:29:71:1E:DD:1C:3E
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7f:47:40:66:37:85:e4:33:69:4f:76:6a:7c:0b:a0:fb:4d:
f2:a9:57:31:be:ba:9e:28:60:a8:18:ed:62:19:82:f0:99:16:
7b:44:39:2f:7f:33:34:81:a1:e4:25:d1:f6:27:cc:0a:04:f2:
b6:2e:de:88:50:39:d4:6c:0d:0d:75:50:96:76:2c:11:f8:32:
e7:fb:bd:e8:f3:a7:17:8c:d6:e2:da:ed:c1:dd:c9:3f:6a:82:
18:fa:ec:a5:e1:91:fe:b7:e1:15:d2:61:84:19:23:70:86:24:
24:53:c7:b1:d0:14:7c:d1:ae:76:55:a9:63:f1:f6:01:ea:1f:
cb:6b:08:7a:6d:a4:48:43:02:50:55:cc:71:0f:48:65:3a:6e:
95:f9:9d:f3:75:76:0a:2d:1a:71:09:c0:60:ba:78:20:ee:17:
0a:80:a7:4b:d9:b2:cc:f6:78:bc:68:86:ff:ff:9a:b7:b6:ac:
0c:8b:fc:8f:11:73:41:52:fe:35:b3:f1:5d:f1:8d:0d:9c:fa:
1d:14:34:f4:21:88:d2:6e:8f:b0:4e:1c:fd:90:8f:8c:f2:e9:
38:f4:a9:e3:9e:a5:37:c2:4f:55:5a:86:e8:0b:35:e4:72:a1:
80:20:8f:df:ba:3b:ff:38:8f:31:38:33:d6:2f:c9:f0:a3:b5:
e6:7b:c9:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnrE/O8f9WWa66Y5s52zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjYwNjMwMTMwMTIwWhcNMjYwNzAxMTMwMTIwWjAzMTEwLwYDVQQD
Eyg0MDk4Y2Y1OGUxM2Y2OTE4MDZlMGZhNDVlODZkMjk3MTFlZGQxYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoQRNQKJDEugV40++i9fAj0Y/nIm
EV1q46KdiCJPwW3oHZTxV5zgo27Blv77FvC9Dsig+KEmnLliFgbwgo/XbErHGeWA
n0GFR7UO3Q+NVKvl4HGUUTHUpDG7/WTPp7pBygTX5glig99ZHR9sS4Wa4Fe29h15
PGPeYeMTxRqA3d4+4LLN7nc4Jrgi6OEEKngO/MzYTsj7p8ik0dpSglL1h9xDityO
X9F0wdtYETM8Roo18fL5euCQvaaJqQPWEGEsV9b44LG+y+2t6nJP6Gw7DqJPw2QK
wsUo6aYLCJc/2L9yVYoO+HD5BW8aQpddGojqR8gfDRtIz/x20RgyvWZnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECYz1jhP2kYBuD6RehtKXEe3Rw+MB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn9HQGY3
heQzaU92anwLoPtN8qlXMb66nihgqBjtYhmC8JkWe0Q5L38zNIGh5CXR9ifMCgTy
ti7eiFA51GwNDXVQlnYsEfgy5/u96POnF4zW4trtwd3JP2qCGPrspeGR/rfhFdJh
hBkjcIYkJFPHsdAUfNGudlWpY/H2Aeofy2sIem2kSEMCUFXMcQ9IZTpulfmd83V2
Ci0acQnAYLp4IO4XCoCnS9myzPZ4vGiG//+at7asDIv8jxFzQVL+NbPxXfGNDZz6
HRQ09CGI0m6PsE4c/ZCPjPLpOPSp456lN8JPVVqG6As15HKhgCCP37o7/ziPMTgz
1i/J8KO15nvJmw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:43 2026 by rpki-client