Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: HCMhBGYR3EUwt6C8+OxU+SsHgPftPNzf/4bPi6N3aJA=
Subject key identifier: 41:99:7C:9F:42:F6:18:6B:49:80:0C:EE:EA:A5:CD:E4:B2:6A:6B:F5
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 01A0BEE72B22D3F466CF36A7CD42C60EDACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 025B
Signing time: Sun 20 Sep 2026 13:00:15 +0000
Manifest this update: Sun 20 Sep 2026 13:00:15 +0000
Manifest next update: Mon 21 Sep 2026 13:00:15 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: RdWquEx/hey1xqDC7a+HRVF8Io5bgtkKhYd71YU8vQg=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:2b:22:d3:f4:66:cf:36:a7:cd:42:c6:0e:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Sep 20 13:00:15 2026 GMT
Not After : Sep 21 13:00:15 2026 GMT
Subject: CN=41997c9f42f6186b49800ceeeaa5cde4b26a6bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:b9:74:8d:81:1e:b3:53:53:91:a1:01:99:
6f:43:20:a5:60:ee:f1:1d:21:56:f5:74:c1:58:a5:
e5:60:ac:5d:c7:9c:3d:11:59:d0:ef:ce:3f:a6:9d:
f5:a7:5b:4f:eb:c9:a3:40:26:25:76:e4:17:3e:92:
72:89:21:d7:89:fd:d4:c8:87:de:74:cb:69:f2:62:
d0:88:3e:b3:c2:3c:87:8a:62:e6:27:7a:1b:ce:fd:
86:30:35:84:89:74:99:80:77:04:48:1c:e1:c0:44:
9b:d8:4f:26:7c:47:d7:b0:01:f1:a5:1f:98:83:d5:
38:aa:a6:55:cf:ad:d2:7a:2c:21:ec:46:05:83:fc:
c1:a0:a4:87:c6:c1:ac:2a:d6:69:e4:90:37:ff:8c:
2b:8d:e6:68:4d:d9:b9:06:f0:41:73:66:f1:79:ac:
14:c0:ad:a7:1f:ff:53:fc:0a:6b:21:16:ff:81:78:
37:e8:f3:1b:6f:9d:3e:f4:56:2f:a2:4d:8c:dd:4c:
21:13:1a:3b:7e:b1:46:33:84:9d:f3:be:ab:23:cc:
92:af:32:85:4b:16:11:e5:b1:38:dc:b5:fc:c5:07:
ce:91:fd:90:7e:b1:3a:07:91:6e:f1:e3:b8:21:c0:
50:ce:dc:88:64:84:8a:f8:2e:02:c6:65:bd:ba:77:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:7C:9F:42:F6:18:6B:49:80:0C:EE:EA:A5:CD:E4:B2:6A:6B:F5
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:86:f7:ad:3d:49:fd:3b:90:fa:a4:2f:6c:20:95:5c:70:ff:
d2:ea:7f:ab:92:c0:a3:2a:2d:a4:66:56:a9:bf:bd:3d:37:62:
26:72:b2:68:49:79:06:a2:c1:2a:6c:f7:f6:c2:06:fd:cc:54:
67:83:1a:87:27:9f:41:44:58:df:67:97:9f:cc:70:98:d0:24:
c3:8d:27:ce:98:ea:78:d4:0f:20:e5:a8:2f:6d:ac:57:58:a2:
06:c4:31:97:83:f0:61:62:77:91:36:3d:60:d7:27:9e:aa:27:
1f:7c:36:cc:24:7e:7f:3b:65:37:19:5a:fc:d3:4c:78:63:af:
89:22:d7:66:50:97:e5:93:e3:c0:b4:40:b7:1b:b9:1a:e6:c0:
25:f6:ec:8c:3c:c3:c1:db:e1:b9:b5:ed:bb:87:e2:f9:03:dc:
47:0d:37:ef:c2:62:7f:07:ce:71:da:04:0e:71:0a:f2:c0:70:
38:9d:f6:ba:29:60:18:8c:e1:2d:4d:2d:a4:fb:69:22:da:a8:
1c:fe:9d:bb:f5:9f:e7:25:a4:39:13:e6:d9:1b:f2:a9:32:9f:
bb:56:ba:8e:d8:57:8c:47:cd:80:b6:cd:d3:20:12:53:de:ed:
95:35:6c:7e:12:d1:dd:b7:69:c3:14:53:70:c6:fd:0e:37:f8:
a6:26:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:25:16 2026 by rpki-client