Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: p7tAVksy58Kp1m39V1x13xTfGYs+ZtLz1wB8m2TQnH8=
Subject key identifier: A7:F8:62:72:3E:87:CA:B7:36:92:33:A3:ED:35:76:E3:16:D3:E8:AE
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 019FA8D08AF2799E6CC846B641F5E3000F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 01CB
Signing time: Tue 28 Jul 2026 13:01:07 +0000
Manifest this update: Tue 28 Jul 2026 13:01:07 +0000
Manifest next update: Wed 29 Jul 2026 13:01:07 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: WSjKvbGoTuJObp0NXexWhw8GdDfT8v33ct/yY5GsUx0=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:8a:f2:79:9e:6c:c8:46:b6:41:f5:e3:00:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Jul 28 13:01:07 2026 GMT
Not After : Jul 29 13:01:07 2026 GMT
Subject: CN=a7f862723e87cab7369233a3ed3576e316d3e8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:34:b3:17:b5:6d:d2:65:4e:1f:8f:cd:15:
f2:af:70:74:b7:48:6a:45:4e:65:0d:c5:15:c9:ed:
0c:9f:9e:5c:a4:38:c8:c9:05:a0:36:f1:0c:fd:4b:
d7:e4:68:55:dd:97:25:3f:32:71:5f:4c:63:13:35:
49:e4:3e:78:7b:b3:fa:4d:c8:38:ac:4d:d8:57:a1:
10:56:06:b3:39:46:57:6f:99:20:a4:77:55:7a:32:
a5:fa:97:b5:99:03:be:be:b0:6d:d5:1e:54:24:77:
9b:fc:00:40:73:cb:ea:ee:50:1c:04:82:30:86:8e:
b0:7e:f9:ba:72:0d:9b:13:92:53:bf:38:0c:b0:9b:
ba:dc:73:8a:08:2e:67:b1:d5:81:83:b0:3f:45:7e:
8a:11:4d:a0:5c:47:48:54:4f:c7:dc:b0:1b:29:84:
88:00:72:c9:cc:72:61:5c:a4:f2:bd:15:f9:4a:2a:
af:20:44:23:89:5a:86:8c:80:ad:60:3c:68:9d:c3:
de:e8:7c:b0:8b:f8:c4:b9:3d:21:bc:cd:39:25:dc:
5e:fa:70:9b:03:5d:e8:06:ee:52:36:7e:11:ed:e2:
fb:fa:21:a5:75:fa:93:f1:3f:ce:66:84:cb:6c:b5:
3a:96:41:1d:49:9c:70:f8:15:64:9e:6a:97:05:d7:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:62:72:3E:87:CA:B7:36:92:33:A3:ED:35:76:E3:16:D3:E8:AE
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:de:a3:05:3d:3f:3e:80:19:a6:9f:16:dc:1e:6a:53:79:6c:
e5:8c:0b:d7:39:1a:6f:2d:9e:38:be:6b:f3:72:ae:d9:69:83:
fa:0f:c5:e6:2b:c1:0e:69:c4:b8:9a:02:4d:ed:8d:38:27:7c:
f6:0f:b0:76:b8:15:2a:d4:db:7e:c3:c6:f7:ed:db:99:2f:b8:
bf:58:fb:bf:51:63:92:4b:b1:42:40:2b:c3:8a:16:1c:58:08:
90:41:72:05:7e:66:b5:e9:84:b7:58:47:3f:37:3b:e9:9b:28:
f5:ba:38:dc:de:70:db:98:f7:1c:ed:97:1e:50:64:af:20:98:
da:1e:94:22:e3:8e:71:f8:9f:3c:7d:17:21:c1:32:3d:e5:a0:
2e:b9:1f:21:9a:e6:39:af:b3:9b:2e:9d:dd:45:a5:4b:31:ef:
ec:f2:a2:f6:d8:94:84:14:d6:b8:19:6f:92:32:a2:b4:d2:ff:
4b:e3:a0:61:10:d3:a1:0a:f4:22:45:8b:6e:fb:17:8f:5f:60:
1e:d2:bf:3a:f4:21:b5:92:06:ca:2f:67:f3:ec:74:11:94:0c:
2c:a1:30:3c:49:44:77:6e:93:33:7c:66:5f:2f:89:f2:f4:7d:
e2:b9:d3:68:8e:21:97:68:7c:8b:d1:db:c3:49:38:9b:24:67:
63:d2:a0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:32 2026 by rpki-client