Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: Zaf2Fi1rrzvNdVk4NRrr5Bp4N0nHV4KR9gaze86FsMY=
Subject key identifier: 30:07:E7:7E:D5:A0:05:5A:58:6F:38:A1:6C:82:9D:71:EA:9F:40:23
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019D37BFF10DFD3869ABF9582DB4EEDF7622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 8O5YRxyhPj7Uw88eYAmNWY1Uky6XlZ34riaz1hZoO1M=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f1:0d:fd:38:69:ab:f9:58:2d:b4:ee:df:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=3007e77ed5a0055a586f38a16c829d71ea9f4023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:bd:3e:be:5a:71:a7:65:ef:8a:aa:79:b0:
e6:3a:ee:07:95:58:87:76:6d:43:c1:88:ba:0b:b1:
22:8d:57:10:57:6a:d4:38:a2:6e:31:3f:11:4d:68:
8b:c2:07:d9:ae:7d:9d:e6:70:07:f4:08:68:18:98:
e6:5a:8a:8e:2b:92:9d:1c:a9:da:c3:6f:a1:e9:4a:
40:5c:36:b9:8d:08:0e:1f:e3:f7:48:5d:db:b8:54:
c3:92:0f:e1:9c:6f:27:97:5a:e9:b4:60:73:83:35:
cd:e9:3f:36:7a:9b:d5:2a:16:42:fd:6a:1d:a4:5a:
da:bb:96:66:e8:82:59:bb:77:36:58:02:35:aa:44:
80:1f:80:27:c1:58:d6:ec:55:cb:f0:c1:df:b5:ba:
ce:00:7f:2e:76:96:3e:c6:8b:97:79:f4:c3:99:8e:
de:9a:7b:00:50:69:67:10:da:de:cc:fd:69:1d:35:
da:91:9e:14:cf:43:21:71:f8:c2:9d:bb:db:0f:ea:
03:31:7e:f4:5b:b6:d0:cb:c1:00:5b:d3:d0:00:5e:
20:e9:08:89:2c:27:38:ce:00:69:be:9f:2a:ac:84:
67:23:2a:c2:e4:f0:b9:11:e7:64:60:2d:8f:97:a9:
e4:13:90:06:f7:41:47:a3:d0:4d:28:82:89:4d:ce:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:E7:7E:D5:A0:05:5A:58:6F:38:A1:6C:82:9D:71:EA:9F:40:23
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:96:92:07:95:2c:51:45:82:da:08:7a:f4:be:12:0a:60:
e0:18:14:a9:c7:ca:36:59:81:5b:2e:b1:98:1e:6a:06:e1:57:
10:66:d5:f4:e1:7a:8e:09:70:84:58:f5:66:b5:36:99:78:3b:
67:e6:ce:d1:15:9a:a4:66:55:57:15:35:94:a2:8f:71:9d:a7:
67:e3:17:b1:b1:c4:ff:87:7c:db:6a:f4:a2:4a:2e:48:9c:fe:
16:1c:ba:9f:dd:7a:9f:f6:43:8a:c3:12:c6:dc:bd:b4:94:04:
7b:85:8c:0c:c7:92:0a:c5:2e:24:60:f5:3c:1e:cd:74:34:d6:
d8:57:5b:b8:4b:f8:73:c6:e5:24:a5:fd:84:db:f0:31:29:cf:
35:91:22:d3:ff:85:7d:54:83:cd:12:1a:13:f8:50:c4:39:82:
45:ac:a8:cc:c4:3c:92:ca:96:c0:4d:eb:c3:95:4a:22:c5:45:
0b:2f:cf:0c:58:89:26:96:fb:dd:a0:98:ba:01:90:72:20:59:
6c:d9:24:d7:5b:b4:a9:b9:aa:28:37:a9:fb:67:37:33:45:da:
de:71:96:d0:68:3d:df:32:dc:af:c2:56:1d:d4:93:18:34:9b:
83:58:49:67:50:71:91:ec:51:ac:a2:96:6f:1e:9a:2f:11:3a:
f2:20:f4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/EN/Thpq/lYLbTu33YiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjYwMzI5MDQwMDE5WhcNMjYwMzMwMDQwMDE5WjAzMTEwLwYDVQQD
EygzMDA3ZTc3ZWQ1YTAwNTVhNTg2ZjM4YTE2YzgyOWQ3MWVhOWY0MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMO9Pr5acadl74qqebDmOu4HlViH
dm1DwYi6C7EijVcQV2rUOKJuMT8RTWiLwgfZrn2d5nAH9AhoGJjmWoqOK5KdHKna
w2+h6UpAXDa5jQgOH+P3SF3buFTDkg/hnG8nl1rptGBzgzXN6T82epvVKhZC/Wod
pFrau5Zm6IJZu3c2WAI1qkSAH4AnwVjW7FXL8MHftbrOAH8udpY+xouXefTDmY7e
mnsAUGlnENrezP1pHTXakZ4Uz0MhcfjCnbvbD+oDMX70W7bQy8EAW9PQAF4g6QiJ
LCc4zgBpvp8qrIRnIyrC5PC5EedkYC2Pl6nkE5AG90FHo9BNKIKJTc5+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAH537VoAVaWG84oWyCnXHqn0AjMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqmWkgeV
LFFFgtoIevS+Egpg4BgUqcfKNlmBWy6xmB5qBuFXEGbV9OF6jglwhFj1ZrU2mXg7
Z+bO0RWapGZVVxU1lKKPcZ2nZ+MXsbHE/4d822r0okouSJz+Fhy6n916n/ZDisMS
xty9tJQEe4WMDMeSCsUuJGD1PB7NdDTW2FdbuEv4c8blJKX9hNvwMSnPNZEi0/+F
fVSDzRIaE/hQxDmCRayozMQ8ksqWwE3rw5VKIsVFCy/PDFiJJpb73aCYugGQciBZ
bNkk11u0qbmqKDep+2c3M0Xa3nGW0Gg93zLcr8JWHdSTGDSbg1hJZ1BxkexRrKKW
bx6aLxE68iD0bw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client