Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
File: HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft (raw, json)
Hash identifier: bq6oOMiS7R7tzIjaNugYiJzRZMxGtQVn6A32Pu0W/ww=
Subject key identifier: FB:0C:DA:04:4B:78:00:CF:79:0B:1E:32:DA:15:0F:D2:61:9C:86:D5
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 019FA8D07602A9B3FE3F213BC039801BA55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 13:01:01 +0000
Manifest this update: Tue 28 Jul 2026 13:01:01 +0000
Manifest next update: Wed 29 Jul 2026 13:01:01 +0000
Files and hashes: 1: HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl (hash: 993Ic95iS19CEvCT9YmFGSw+M9R4+xouNE6kmCQ+3yU=)
2: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (hash: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:76:02:a9:b3:fe:3f:21:3b:c0:39:80:1b:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Jul 28 13:01:01 2026 GMT
Not After : Jul 29 13:01:01 2026 GMT
Subject: CN=fb0cda044b7800cf790b1e32da150fd2619c86d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:c5:ae:a9:df:27:0e:1a:e1:a8:5f:14:d8:
ba:5c:74:7c:be:fb:5c:c7:dd:6d:8b:3c:9a:dc:3f:
a0:da:57:82:a1:7e:58:70:cc:73:36:13:46:b9:c0:
e6:b5:f4:65:ea:c9:e7:82:64:15:46:7f:f5:6f:6e:
f3:ec:a3:43:01:e7:7e:e9:f0:e3:86:47:ce:90:a7:
98:0f:f4:43:73:cc:33:59:aa:42:9b:b8:4d:a0:2d:
3a:9e:fc:3b:98:8a:a0:35:7e:cc:e1:e1:f4:ef:be:
79:5d:47:ef:3b:10:11:97:a4:de:a5:69:b6:39:10:
ac:86:63:78:cd:2b:06:37:f9:c3:b0:e5:98:dd:04:
1c:1e:bc:f7:a3:ec:55:12:87:bc:a5:1a:d9:86:7b:
2a:a4:d1:63:e1:bc:e8:98:06:f8:ed:5d:ce:cc:bf:
97:f8:d4:62:65:48:ff:07:f5:27:11:54:0e:db:cd:
c9:c9:dc:19:3c:59:b7:d1:75:e8:46:25:15:33:f9:
22:77:54:d0:aa:36:c1:8e:1f:99:db:74:18:b6:f2:
10:51:c0:90:b2:62:15:d5:e3:40:d4:f9:24:f7:53:
23:74:d8:ac:9e:2f:35:65:b9:45:43:f8:a0:4f:fe:
bc:6b:52:3f:24:7c:ea:bd:cc:e9:ba:52:98:4b:07:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:DA:04:4B:78:00:CF:79:0B:1E:32:DA:15:0F:D2:61:9C:86:D5
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:d9:48:1e:44:2f:c4:92:3f:02:fc:d6:fd:81:f0:31:48:
f3:e7:04:67:ea:95:5b:aa:5e:ad:aa:3f:f3:f9:e9:f8:49:a5:
a7:9f:96:c9:6d:9d:c1:da:94:87:60:55:9d:6a:29:81:d0:06:
b5:24:ed:2d:2f:0e:a4:ad:0a:98:99:af:e3:82:e8:e5:af:d4:
6a:d6:a3:b7:e9:0d:d9:dc:a3:a7:53:67:14:e2:9f:46:18:24:
e3:74:01:d5:22:96:92:0b:2a:da:6a:cc:7c:33:00:29:f5:54:
05:65:17:db:8a:ef:d8:89:3f:dc:d0:ff:71:d8:2f:87:3d:75:
8b:e0:a4:e9:5f:4f:22:57:35:b0:f3:e6:2c:31:8b:aa:2f:b7:
28:40:97:0a:1a:46:07:e4:39:4f:1e:c9:b8:93:82:e8:cd:24:
d1:74:5d:3d:8d:41:06:e6:5f:64:1e:f5:65:61:34:b9:57:b7:
b4:49:99:a3:02:48:8c:08:76:be:59:70:0b:dc:d9:11:e3:3c:
b0:a8:77:8d:55:ff:40:fd:39:96:a5:a1:76:2f:9e:29:eb:2f:
97:b5:28:5a:2a:86:23:ae:a8:e8:3f:29:df:26:cb:93:03:28:
bf:43:cf:63:66:e1:73:07:92:9e:98:bc:f8:c8:67:ef:cb:cb:
c7:58:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:08 2026 by rpki-client