Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: 4j4PFjYX8kkJzu2AIKQGFtiSyqgOMvbVzjgzQO/FhO8=
Subject key identifier: 31:E0:4B:10:AE:6A:FE:E6:75:2D:35:AF:CD:B0:0B:97:61:DD:6B:DE
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019CABD916F7E8BF3D21D578FF485214B414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0DF3
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: s7QCCcqNObBiTABFQYfehdIYW9q5HqdJIDiLJI6Yk1c=)
4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
5: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
6: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
7: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:16:f7:e8:bf:3d:21:d5:78:ff:48:52:14:b4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=31e04b10ae6afee6752d35afcdb00b9761dd6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:20:d8:22:90:9a:c6:0d:1b:7e:f3:d4:c3:
e1:64:6f:df:f9:88:8d:15:74:f4:98:f4:ed:aa:fd:
fc:6f:1f:1f:60:de:53:59:88:20:8c:f0:85:45:77:
c8:c4:e9:40:d6:93:13:07:2b:31:7b:f0:76:f9:15:
e8:15:6a:01:e7:61:2d:93:7c:5f:62:8e:07:a0:9d:
23:e3:75:a2:4e:9c:fc:10:b9:2e:9b:00:1f:0e:49:
58:3d:f7:a1:ea:02:eb:2a:00:d6:23:ab:ac:92:92:
91:33:79:a4:03:15:21:40:66:99:14:10:8e:bf:d1:
21:64:bf:ec:2f:b7:ff:7e:25:46:e7:af:73:47:72:
d4:19:37:fa:e4:d7:e1:8d:8a:6f:a3:9e:b2:aa:90:
03:20:fd:ec:fe:1c:67:80:d8:9e:c4:8d:7c:a6:55:
68:2c:35:13:65:f1:35:1c:e1:7c:75:4a:b9:fa:f4:
0b:00:66:69:f2:6c:40:5e:88:78:1c:d2:04:16:0d:
1e:a9:06:09:ab:7e:e4:16:52:4e:c5:b6:72:6f:ad:
bf:ec:00:ce:18:f0:1c:b3:8e:f4:24:be:9d:ab:c9:
3a:da:20:6d:1d:ca:a4:79:03:72:f3:0a:86:90:9d:
93:07:25:b7:9f:5e:26:6f:52:e4:c1:89:12:16:b9:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:4B:10:AE:6A:FE:E6:75:2D:35:AF:CD:B0:0B:97:61:DD:6B:DE
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:39:7b:a9:2e:ae:e8:c2:6a:14:96:7b:f7:f2:c1:78:d0:1d:
55:51:e2:9d:6f:6c:71:3a:e1:7b:c4:0e:a8:1b:b9:68:3a:2f:
5f:7d:6d:17:e0:ef:76:4b:d9:13:23:19:85:f7:b3:cd:83:52:
6b:50:46:ec:cb:df:7b:db:bc:32:6c:1b:33:e2:a6:a9:3a:ce:
e5:f6:5a:ed:bd:5b:a7:89:84:e8:82:cc:f3:48:99:aa:58:63:
b3:e0:f5:1c:09:df:6a:9d:7d:e0:20:74:b6:31:e3:2a:b1:6a:
9b:37:ce:45:f0:1f:26:62:6a:59:ef:f9:03:1b:6b:1a:ef:c0:
32:ff:c7:e7:5a:7b:4e:ac:4b:23:32:94:f6:e7:ea:62:a0:8e:
39:12:9e:34:d6:79:b3:ea:3d:63:3b:7a:53:53:a1:a2:9a:17:
01:0d:12:1d:8a:62:11:cb:4c:6a:9a:1f:f8:5f:fa:41:8c:a7:
42:59:76:39:6e:b2:37:f5:1d:a8:4e:a5:7e:19:c9:e1:52:66:
c7:5e:26:a3:01:19:27:07:77:16:50:42:d5:66:b8:ea:65:15:
10:88:4e:3c:3c:23:4b:4d:59:cb:07:61:fe:80:4f:19:9f:c3:
3c:9a:0e:bd:ad:3b:71:a6:34:4e:31:37:87:05:3a:76:73:ac:
09:6d:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:14 2026 by rpki-client