Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: AZJx+dJP5yM9BjOrL3qwl/s8NcmHyDL6y8XW1wa7pA8=
Subject key identifier: 9D:96:C2:D3:CA:B0:77:81:71:5E:74:77:4A:DE:4C:58:89:F7:38:3C
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019D9962383F08B5ECB561018F166195F71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0E6E
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: QIa9Mjal5nCHs3DlB2mJretDZhA8R5jeK6Iwi6boBIY=)
4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
5: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
6: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
7: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:38:3f:08:b5:ec:b5:61:01:8f:16:61:95:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=9d96c2d3cab07781715e74774ade4c5889f7383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:ef:f3:4c:71:c1:8f:49:f9:71:0d:6b:38:
2d:8e:3a:6e:36:38:ff:c6:6e:3a:9e:43:14:7d:e0:
09:8b:7a:a1:64:2a:e7:f3:e8:27:4d:2b:c8:5c:21:
94:7e:f2:10:50:f0:2c:c7:8a:12:b6:60:e1:6b:82:
0e:d5:c4:27:e0:51:2a:e4:99:55:93:e0:63:bd:43:
3e:b7:2f:cb:7a:cd:3e:60:19:a1:6a:06:d0:c1:dd:
fe:e2:5b:7a:ff:21:c8:3b:08:cc:de:cb:06:2e:74:
56:81:3d:2a:1b:23:98:99:74:9f:d5:4f:2a:cd:03:
c5:23:f9:75:ae:7a:41:8e:c4:71:77:54:ba:2b:40:
b3:7c:15:b0:5b:05:ce:16:c7:8a:25:ba:3b:48:b6:
57:f6:73:4c:d1:c7:85:df:1b:51:1c:86:54:e0:ea:
2f:57:16:70:bb:0c:d7:33:b3:11:ac:21:4c:7a:fe:
01:33:66:75:2d:79:c4:ff:4a:53:cb:9c:7b:2e:94:
97:03:e5:7e:1a:3b:cf:23:ff:15:49:c3:80:59:e9:
4d:74:16:fa:ae:37:63:8a:fc:b7:f4:6c:1e:44:89:
3c:1b:b5:99:18:0b:7b:d8:09:5c:7b:e8:1c:a9:6a:
3f:3b:90:43:95:a7:6d:9e:13:67:cb:80:b1:d9:1e:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:C2:D3:CA:B0:77:81:71:5E:74:77:4A:DE:4C:58:89:F7:38:3C
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7a:a8:79:c0:4c:d8:4f:81:c0:3c:a2:ed:28:6a:49:fe:65:
95:4f:18:57:65:9d:14:ca:26:4f:07:fd:fe:83:5a:5b:e3:c5:
c5:96:26:48:80:07:00:45:df:70:06:6c:c3:6c:00:ab:19:a1:
68:1f:31:a3:ea:d6:74:4c:f7:fe:8d:2e:2b:4f:3e:7d:5a:af:
58:b0:fc:bc:64:5f:b0:61:c4:3d:5c:94:7d:72:73:7b:ed:53:
e6:2f:98:d2:78:87:e4:4a:87:91:c2:7a:01:58:c6:18:e1:8b:
b2:55:76:87:77:e9:f4:48:87:15:dd:4e:fe:17:58:12:6d:f0:
25:28:1e:f5:94:ec:ec:a2:1d:19:bf:ed:37:5a:3d:5a:90:17:
71:9c:cc:c3:44:9b:03:c3:0e:20:a9:c9:5a:62:f1:dc:95:12:
ea:60:8f:eb:aa:80:e0:07:10:ce:40:55:1e:e9:2d:a0:8d:3f:
9d:0b:ad:79:61:bb:8d:3a:f2:83:9d:7b:26:51:9e:99:f8:4f:
f4:aa:19:5c:b6:d8:e5:17:c0:e3:d2:71:97:a5:53:b6:09:bb:
b9:ec:33:bb:7a:c9:a0:21:6e:c3:32:cf:31:82:13:7c:d1:5b:
6b:d5:c5:97:d5:9a:a3:c7:fa:0e:e3:9c:a5:e3:07:eb:b3:ed:
cc:1a:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:13 2026 by rpki-client