
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: HBzKk5oraWtVACNYEv21XtJc80rYc9FKYcwKRr9Uhvg=
Subject key identifier: 7B:AB:FE:D3:2F:AA:D6:0A:22:2C:74:24:FF:4D:42:74:3B:BE:84:AB
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 01A0024B290F26C0F3A9CC4519CC51809665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 22:01:15 +0000
Manifest this update: Fri 14 Aug 2026 22:01:15 +0000
Manifest next update: Sat 15 Aug 2026 22:01:15 +0000
Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: jW2rKO9ZkMxVXt/x2C9EiaUvlBQoyyazM+MgOCQuRQE=)
2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:29:0f:26:c0:f3:a9:cc:45:19:cc:51:80:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Aug 14 22:01:15 2026 GMT
Not After : Aug 15 22:01:15 2026 GMT
Subject: CN=7babfed32faad60a222c7424ff4d42743bbe84ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:97:08:b7:44:08:30:9c:e3:91:20:e8:d2:
38:3e:22:42:8c:38:3e:b8:0b:76:c4:af:8c:c0:ab:
0e:1d:17:e1:e1:84:1e:6e:d8:89:3c:a2:1f:d3:7a:
bd:63:30:97:0b:fc:8d:af:13:ed:7a:8e:02:d9:5a:
35:fc:11:97:bb:70:5a:78:11:06:d1:89:5d:75:91:
4c:d3:3e:ca:91:56:75:2c:0f:11:ba:0f:77:fa:58:
da:7c:8b:fa:3f:4f:fc:af:60:a2:9e:19:c8:a1:35:
a8:e0:98:d1:db:c2:a9:f3:75:00:a2:6a:de:a3:88:
f2:9b:e1:62:41:97:6e:82:7b:3f:08:4e:bf:58:67:
53:de:7d:15:da:18:00:08:b2:ec:c6:66:57:5f:dc:
4e:0e:20:91:c7:2d:c9:e1:e4:77:9f:01:24:8d:84:
8e:5e:01:be:75:c3:11:bd:5e:0d:ba:96:75:dd:ff:
84:9a:66:59:9f:1b:de:f3:ff:63:ab:6a:e2:b5:a2:
1e:a5:e4:c4:68:95:11:ce:c5:b1:ec:c5:2b:7a:9e:
eb:73:ae:2f:2f:15:ab:18:e4:4a:8f:76:3b:e2:27:
12:21:11:cc:dc:cc:58:61:43:d3:37:73:94:16:a7:
8f:49:31:62:df:4b:70:72:0a:9e:1f:21:82:e1:3f:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:FE:D3:2F:AA:D6:0A:22:2C:74:24:FF:4D:42:74:3B:BE:84:AB
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:c2:94:26:0e:a1:ae:7b:a8:f9:fd:4a:a8:4a:c6:d5:72:
99:e9:63:9d:93:b5:88:7e:60:61:21:cb:06:27:9e:8d:5b:bc:
ad:c1:56:a2:44:ab:91:c9:dd:c5:3e:73:7a:70:31:b9:e6:2c:
55:8f:c7:08:17:66:6e:5c:fd:e0:02:a0:73:27:a6:99:cf:51:
ff:dd:6f:c3:da:18:b9:d6:b4:21:ee:c0:b3:51:f2:9f:22:93:
2a:cb:71:a5:9e:34:6a:fb:e8:6e:93:a4:3e:e6:1e:7a:c7:cf:
52:49:23:d7:5b:37:18:39:a8:17:1b:49:9e:27:bd:15:7b:79:
a6:82:bb:7c:fb:4f:07:f0:98:e5:be:be:77:d3:94:66:6c:9f:
ad:ef:d2:95:b4:c5:20:04:59:75:83:2e:bb:f7:f6:76:29:8b:
10:f9:e1:86:a6:2d:0d:82:13:ae:4d:a9:c7:0d:20:12:97:b1:
c9:d9:d4:80:40:a5:12:26:f8:1b:f8:87:e0:66:4c:83:85:06:
05:88:1c:96:73:5e:c8:53:79:97:45:ef:d0:64:50:56:72:32:
62:f6:e1:f5:d3:23:a4:9b:6a:32:e3:14:a7:9d:c9:fc:29:73:
01:ea:2c:01:60:86:0e:c9:f6:a8:5b:32:3c:b2:91:53:db:37:
0f:90:e0:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSykPJsDzqcxFGcxRgJZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjYwODE0MjIwMTE1WhcNMjYwODE1MjIwMTE1WjAzMTEwLwYDVQQD
Eyg3YmFiZmVkMzJmYWFkNjBhMjIyYzc0MjRmZjRkNDI3NDNiYmU4NGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkmXCLdECDCc45Eg6NI4PiJCjDg+
uAt2xK+MwKsOHRfh4YQebtiJPKIf03q9YzCXC/yNrxPteo4C2Vo1/BGXu3BaeBEG
0YlddZFM0z7KkVZ1LA8Rug93+ljafIv6P0/8r2CinhnIoTWo4JjR28Kp83UAomre
o4jym+FiQZdugns/CE6/WGdT3n0V2hgACLLsxmZXX9xODiCRxy3J4eR3nwEkjYSO
XgG+dcMRvV4NupZ13f+EmmZZnxve8/9jq2ritaIepeTEaJURzsWx7MUrep7rc64v
LxWrGORKj3Y74icSIRHM3MxYYUPTN3OUFqePSTFi30twcgqeHyGC4T/vuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHur/tMvqtYKIix0JP9NQnQ7voSrMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYXClCYO
oa57qPn9SqhKxtVymeljnZO1iH5gYSHLBieejVu8rcFWokSrkcndxT5zenAxueYs
VY/HCBdmblz94AKgcyemmc9R/91vw9oYuda0Ie7As1HynyKTKstxpZ40avvobpOk
PuYeesfPUkkj11s3GDmoFxtJnie9FXt5poK7fPtPB/CY5b6+d9OUZmyfre/SlbTF
IARZdYMuu/f2dimLEPnhhqYtDYITrk2pxw0gEpexydnUgEClEib4G/iH4GZMg4UG
BYgclnNeyFN5l0Xv0GRQVnIyYvbh9dMjpJtqMuMUp53J/ClzAeosAWCGDsn2qFsy
PLKRU9s3D5DglA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:09 2026 by rpki-client