Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: vb/LmhlCP+xfp0eA/EbJYRCuZm0j2a3gm+0ZkzRc2Ks=
Subject key identifier: 07:5D:26:9E:18:C4:0E:FF:A3:C4:F3:B2:DE:2A:79:32:6E:87:D0:54
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019D9BF5AFC87CE4BBA3FC73000D9FD908C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 023D
Signing time: Fri 17 Apr 2026 15:01:02 +0000
Manifest this update: Fri 17 Apr 2026 15:01:02 +0000
Manifest next update: Sat 18 Apr 2026 15:01:02 +0000
Files and hashes: 1: CkU6YuZWJuqKMJWsC4OETRJk9K8.asa (hash: Xp66M/ItxfpMp+sHD2CrNdaSo56kOJ5bY26gQ5XjdMM=)
2: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: eXg7n5svdwSKnhRZhyiL83CnfQTWExsF/vKIchyTV8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:af:c8:7c:e4:bb:a3:fc:73:00:0d:9f:d9:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: Apr 17 15:01:02 2026 GMT
Not After : Apr 18 15:01:02 2026 GMT
Subject: CN=075d269e18c40effa3c4f3b2de2a79326e87d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:32:2e:69:a1:d3:bd:15:42:18:5e:86:4a:
eb:9e:ae:f3:21:e8:68:04:9b:47:98:d5:04:66:6b:
86:cf:d3:bb:0f:7f:cf:85:57:0a:94:3a:01:43:59:
0d:be:02:08:bb:8c:c7:96:f0:86:22:1e:22:ca:ae:
69:da:b6:15:d2:98:12:b0:d7:92:11:1c:48:31:b9:
99:c3:37:1d:1a:4f:1a:48:c5:78:48:9b:b3:f7:c5:
68:bb:aa:a6:4b:d9:2f:e2:3e:73:09:6c:7f:7d:33:
71:e6:ea:72:db:20:85:a5:08:96:40:42:82:91:1b:
56:33:1c:aa:e5:05:ee:b9:f9:ed:b3:6a:f5:05:51:
c5:77:d7:99:5c:e0:17:1f:58:33:79:02:a1:26:0c:
aa:dc:f9:0f:5f:20:e5:e2:5c:ae:2c:fd:d0:b5:17:
61:99:e0:b2:c5:22:a6:6f:f5:38:04:e5:47:04:6c:
ed:32:87:4b:16:8c:3b:dc:07:26:6e:32:0a:b3:d9:
bb:a0:c5:29:fc:a0:45:da:fd:15:16:39:38:85:b1:
77:9c:11:2f:1d:74:13:1b:fd:d5:54:3d:67:de:8f:
67:b6:12:36:89:29:00:3b:04:2f:f2:58:b4:d4:80:
0f:37:46:de:ce:9b:7f:76:d1:5b:39:28:04:26:47:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:26:9E:18:C4:0E:FF:A3:C4:F3:B2:DE:2A:79:32:6E:87:D0:54
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:cc:cd:43:0a:ca:79:f4:15:44:b9:d6:a0:43:1e:e4:dc:
81:e4:f7:a8:11:b1:de:e0:3c:5e:1e:72:e3:7d:cc:7f:97:ed:
5d:80:4c:71:e7:87:0b:a5:b4:f5:5b:af:7b:32:88:c4:b9:dd:
5c:26:d3:7f:f6:4b:9a:11:09:8d:65:90:83:ce:ec:e6:66:ac:
f0:07:44:30:31:ad:bc:94:dc:9a:d1:18:2a:9c:bd:2e:d3:83:
50:ed:90:b0:05:00:be:cf:cc:b6:55:9e:e9:11:be:53:69:4c:
01:1d:da:3f:df:43:2c:48:d9:ce:67:4e:99:d1:dd:61:7a:5d:
4b:9d:55:4f:da:8b:8f:91:ef:57:e3:4b:43:af:f6:8d:68:72:
ad:ad:8a:18:63:8f:cb:f2:a5:a0:28:08:f0:44:3a:f6:4b:5a:
7c:b5:5a:6b:1d:77:24:5f:69:5e:13:89:ad:93:81:af:d0:a1:
66:24:bb:67:e8:60:c0:a0:84:ef:bf:6f:e0:87:e2:f8:6f:0a:
e1:63:70:47:58:53:3b:64:72:43:8a:e9:24:ee:c7:1b:a0:86:
a3:9c:46:c8:a7:d2:a7:8a:19:e3:3d:59:d6:d7:80:ef:ba:3f:
04:fa:50:42:d5:26:37:66:2f:99:69:60:6b:b4:11:a6:a5:ed:
27:12:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:27 2026 by rpki-client