Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: Yo+WOQPxis7UtdwyPiyLxgXRLtEarakYsBXV7xZH50s=
Subject key identifier: F9:6A:9E:66:E1:23:2C:E6:DF:50:CC:9F:5B:E5:23:5B:EB:6C:F4:37
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019FAA50BBFB0C202CA25ADAC4382F41982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0F83
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: qyWH6d9VpPjMb/yVS86LluCoJhJ5VkFAfMLJZ2mNAdg=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bb:fb:0c:20:2c:a2:5a:da:c4:38:2f:41:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=f96a9e66e1232ce6df50cc9f5be5235beb6cf437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:31:25:98:eb:ca:ce:a7:48:90:a0:32:8b:
fe:10:88:84:e4:c0:15:6f:c6:e1:06:5a:96:d2:95:
84:5f:01:3e:df:85:4a:28:0f:6c:47:6b:9e:c1:e6:
51:51:6c:60:41:5b:aa:df:81:09:5e:40:e0:2b:7f:
87:a3:60:00:ed:59:09:53:85:0f:22:90:cd:9f:35:
f7:89:ef:14:6a:ff:ed:60:23:37:79:2b:06:89:77:
28:7d:13:a4:5d:f5:5d:a0:d3:7c:20:cc:7f:86:26:
fa:a2:6a:8a:af:f8:c2:e9:4f:45:39:de:f9:19:b2:
9d:e6:61:0c:28:c1:6f:65:d3:d7:26:77:c0:8a:39:
f8:47:12:f7:dc:4f:a4:53:02:75:40:72:61:b8:64:
19:26:40:03:28:9f:2d:45:12:0c:0f:ca:a0:ea:f0:
2c:d8:ec:b2:f6:f1:b2:e7:65:0d:80:7e:20:5d:db:
5c:1f:e6:35:7b:a4:4e:7d:5e:85:69:8a:1f:83:37:
61:45:a2:a3:61:38:20:7c:6e:3f:f8:92:86:6f:52:
18:7e:50:bc:e2:d1:ad:08:ef:03:43:23:11:93:a2:
47:b4:bf:ca:34:bf:bb:e9:15:0e:6d:69:24:3b:67:
79:09:e1:13:56:3d:89:42:98:e1:b6:b6:78:9d:2d:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:9E:66:E1:23:2C:E6:DF:50:CC:9F:5B:E5:23:5B:EB:6C:F4:37
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:d8:87:af:bc:7b:93:e8:09:40:a6:4f:86:38:75:2e:53:
d8:bd:16:7f:1a:63:f3:a4:22:8a:17:03:a8:fb:db:21:04:83:
e4:5d:32:5e:04:7a:fb:ca:50:46:44:64:31:e6:88:23:ff:33:
ef:b1:2e:de:a0:0b:3a:10:5d:1a:e2:c1:91:5f:fc:5d:f4:c0:
92:2c:28:32:bd:a9:84:f7:f2:36:cd:6a:38:85:be:5c:c8:ea:
bd:49:a9:a9:00:be:8a:67:ee:52:9f:76:96:12:5f:b1:75:01:
a7:bc:d7:b6:e7:41:b5:dc:2b:f9:cf:0e:a1:14:5d:84:81:ff:
c9:c2:02:b6:10:cc:b2:f6:09:04:98:f1:2b:a2:6a:02:0b:97:
6f:48:c0:b9:79:58:4d:d2:28:53:90:0d:13:42:fe:e7:03:ee:
78:a8:84:14:a0:77:e8:ea:d4:da:50:88:92:16:56:0f:d5:f8:
fb:e5:54:d2:7e:d2:1b:e6:e1:7a:40:12:6c:26:75:63:d4:35:
02:12:58:cd:5e:71:5d:3c:b0:da:82:ae:d2:b2:b7:3e:7d:42:
e0:2e:24:7b:51:dd:e8:39:a4:d6:6d:ab:c5:22:49:9b:5d:14:
74:fa:b2:bd:8b:f2:d2:88:70:c0:dd:0c:fa:7d:b4:bc:0f:82:
73:bc:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:26 2026 by rpki-client