Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: Qk4rI/u85cdtDF1FwdsokokoR6qLki7+NxcV13T4qbQ=
Subject key identifier: 2A:D4:61:0C:57:09:48:14:50:73:B6:2A:B4:D9:F4:C1:01:2D:66:C3
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019F1A8D52F19C5853E9254A7CFBA59782AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 191B
Signing time: Tue 30 Jun 2026 22:01:37 +0000
Manifest this update: Tue 30 Jun 2026 22:01:37 +0000
Manifest next update: Wed 01 Jul 2026 22:01:37 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: byG1gJuQU271c+wCx89xq2rnrKqIVkfKoik3W+TCgs0=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8d:52:f1:9c:58:53:e9:25:4a:7c:fb:a5:97:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jun 30 22:01:37 2026 GMT
Not After : Jul 1 22:01:37 2026 GMT
Subject: CN=2ad4610c570948145073b62ab4d9f4c1012d66c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:fd:30:4c:6a:fc:d0:d0:59:11:67:67:e0:
80:fd:e3:13:b5:aa:3d:6f:54:70:df:dd:f9:ee:62:
a6:76:c4:36:94:e8:04:09:60:ec:56:4d:84:ce:aa:
be:fb:3f:4b:46:fc:4b:fc:04:e9:d3:69:2f:21:46:
c7:a6:df:5f:3b:74:00:0e:04:2e:bb:1b:a0:c9:df:
65:e1:6b:ea:5c:08:90:e9:68:67:75:1e:ad:33:45:
8e:64:ef:b3:49:0c:83:e6:a2:6a:8c:ea:48:41:9f:
49:39:12:54:d1:72:31:2e:b9:53:95:dc:95:0a:73:
b6:27:3e:13:4c:e6:0c:f5:81:33:d5:ed:c1:34:b1:
33:09:d2:e3:10:9a:c0:10:87:68:26:a2:4b:75:d8:
6d:66:fa:8c:86:ca:ce:f4:13:f2:17:68:a3:cf:9e:
78:5d:e3:10:d9:40:a6:d3:c7:3a:d5:33:34:98:ae:
a5:db:9c:81:2f:5d:d7:e4:99:28:eb:c7:87:64:7f:
d9:30:5f:2c:3d:7d:13:38:7b:36:4f:41:e2:a6:2d:
f2:0d:d6:d3:d6:bb:b4:0e:39:b4:10:a7:17:1a:f9:
f8:c8:11:39:9a:f1:5a:b5:5b:f2:64:15:51:ca:97:
80:b9:2e:45:89:3f:49:eb:a1:aa:ff:45:c2:68:50:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:61:0C:57:09:48:14:50:73:B6:2A:B4:D9:F4:C1:01:2D:66:C3
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:54:bb:8e:4e:a3:bb:41:44:53:a6:d3:32:13:d1:85:22:8f:
2b:2d:6d:0c:ab:fb:71:5c:2e:66:63:bb:7e:71:85:b8:58:16:
3c:7a:f6:a9:90:65:2d:9a:88:f8:c4:5f:b1:1b:a1:b2:95:dc:
a8:d2:97:51:9a:84:5f:d5:7e:45:1a:4c:d5:f1:46:eb:e8:b3:
1b:83:e4:65:b8:03:02:59:cc:3c:c9:36:c9:2d:e9:cb:58:01:
8f:0c:7b:a9:91:f0:6e:b0:30:9d:4f:f9:8b:c1:1f:13:7b:e4:
ac:7c:dc:7b:20:79:9f:b2:8f:a2:26:89:34:85:76:f3:0c:c5:
42:d2:35:13:57:03:4b:d2:76:76:bd:e4:c4:46:03:83:fb:78:
a7:a0:06:8a:25:62:47:f8:30:a5:61:95:7d:0a:65:b5:97:7a:
12:b9:7c:ce:2c:79:51:0d:e6:42:e7:b3:9c:ca:47:50:54:2f:
4b:0f:91:a3:ba:c9:32:13:91:05:b4:46:8b:17:74:f6:9c:34:
84:02:84:45:af:c9:82:82:97:1d:94:0e:c8:54:d8:bf:3e:45:
ac:0d:17:b8:8c:8c:40:2d:44:aa:d1:77:ed:1d:e5:2c:65:81:
09:2e:ed:89:2c:e5:43:1b:28:c0:47:af:4c:b3:07:bd:f9:10:
45:51:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:37:23 2026 by rpki-client