Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: fBi9sJZodi0Qxb+ikW1oTK0POfq3GA8qDVALcZZKcQQ=
Subject key identifier: 2C:7E:3D:A7:11:AF:6F:54:BE:9B:9D:C1:EE:3C:11:31:FE:76:6C:3B
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019EC1EE24E033D39D211573204375ECE5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 1081
Signing time: Sat 13 Jun 2026 17:01:10 +0000
Manifest this update: Sat 13 Jun 2026 17:01:10 +0000
Manifest next update: Sun 14 Jun 2026 17:01:10 +0000
Files and hashes: 1: Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa (hash: QSO9mmv4K2NyhZinj8I/GzIYb/RrAcM6Y8mv7blhZ40=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: tlo2NEM5VLRR5yPxpqoFOlolAqCB/AxJHc6FsLu7d7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:24:e0:33:d3:9d:21:15:73:20:43:75:ec:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jun 13 17:01:10 2026 GMT
Not After : Jun 14 17:01:10 2026 GMT
Subject: CN=2c7e3da711af6f54be9b9dc1ee3c1131fe766c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:6f:9f:6d:a1:5b:a8:2c:f2:ae:40:91:03:
7f:38:19:b5:6c:34:76:cc:2e:26:cc:f8:8a:12:d7:
c0:bb:c6:4e:ea:97:d4:44:e3:41:f7:59:44:6f:6a:
78:58:76:d3:44:c4:b1:5e:f0:43:c4:6b:d1:db:ee:
14:fb:d7:85:6c:fb:b7:12:b5:41:86:99:fd:fb:dd:
57:3d:e8:f9:78:d6:c8:34:a6:ef:4e:38:9c:ad:7f:
54:be:8e:25:2f:3c:4f:14:16:4f:aa:81:40:1e:98:
f3:6c:3b:7c:b7:bd:99:50:b1:e2:4f:69:3e:56:c5:
b3:ec:7b:0b:a4:45:02:14:84:62:d7:59:b8:0a:60:
d6:a7:fb:5e:d1:95:0c:e1:a2:de:10:15:0e:d4:a5:
21:da:66:fd:69:03:8b:7a:d2:18:2c:20:75:20:b1:
24:5c:dc:2a:10:92:13:63:a7:14:47:96:e4:cc:42:
6d:b5:27:53:c0:14:30:b3:46:9d:60:70:29:f1:6e:
83:01:38:1d:0b:f5:e1:74:7e:3c:49:61:d4:c1:a5:
02:1e:c1:41:6a:5b:02:0d:64:c6:f7:65:e8:d0:28:
72:9e:87:8e:5e:df:a6:ef:39:af:69:b3:77:de:7e:
a5:27:78:c9:dd:86:b1:d1:41:e5:f0:2e:0f:b8:60:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:3D:A7:11:AF:6F:54:BE:9B:9D:C1:EE:3C:11:31:FE:76:6C:3B
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:ed:0d:15:35:49:55:4b:f6:46:8b:88:97:37:1f:a5:04:
b6:dc:ff:89:19:02:05:66:ae:36:53:65:29:b6:c0:e6:90:b1:
72:27:d0:2c:b7:5d:93:82:03:6e:bb:44:4a:b0:85:4c:18:c1:
f8:b1:b8:4b:a4:bd:02:eb:71:0e:22:e2:92:b2:fc:24:dc:27:
5a:2b:df:54:52:17:87:30:0f:2f:92:07:18:47:2f:06:37:9f:
4f:c2:bc:a2:c3:60:6d:03:5c:09:d8:57:41:d4:8c:ba:1d:bb:
8c:d2:f8:34:87:25:54:2f:3f:5e:a5:9f:5e:d3:2c:b6:0b:6c:
84:a3:5f:39:02:bb:7a:8f:f0:60:2d:c2:90:65:ab:34:38:07:
e1:ce:70:ae:21:7f:36:4a:8b:86:b0:7a:06:80:aa:29:e2:78:
ee:77:01:dc:58:68:a1:f6:7d:8c:ac:6f:14:d2:cc:e7:25:45:
f5:68:be:d6:b8:36:14:47:c1:3b:b5:86:47:72:17:aa:83:f6:
0c:af:21:0b:e9:5f:30:06:55:e6:1d:b0:5e:1d:57:ed:5f:fc:
ab:f8:80:f3:ec:46:d9:41:90:54:e9:e5:b1:51:51:5f:53:f4:
f7:82:03:7f:a0:e2:4d:4e:f4:43:ca:b3:f4:a0:82:bb:39:1c:
6a:3e:74:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7iTgM9OdIRVzIEN17OXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2
N2MwODQwHhcNMjYwNjEzMTcwMTEwWhcNMjYwNjE0MTcwMTEwWjAzMTEwLwYDVQQD
EygyYzdlM2RhNzExYWY2ZjU0YmU5YjlkYzFlZTNjMTEzMWZlNzY2YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/9vn22hW6gs8q5AkQN/OBm1bDR2
zC4mzPiKEtfAu8ZO6pfURONB91lEb2p4WHbTRMSxXvBDxGvR2+4U+9eFbPu3ErVB
hpn9+91XPej5eNbINKbvTjicrX9Uvo4lLzxPFBZPqoFAHpjzbDt8t72ZULHiT2k+
VsWz7HsLpEUCFIRi11m4CmDWp/te0ZUM4aLeEBUO1KUh2mb9aQOLetIYLCB1ILEk
XNwqEJITY6cUR5bkzEJttSdTwBQws0adYHAp8W6DATgdC/XhdH48SWHUwaUCHsFB
alsCDWTG92Xo0ChynoeOXt+m7zmvabN33n6lJ3jJ3Yax0UHl8C4PuGBDrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx+PacRr29Uvpudwe48ETH+dmw7MB8GA1UdIwQY
MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt
NDdjOTUwMzM2ZTJmLzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm
LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarbtDRU1
SVVL9kaLiJc3H6UEttz/iRkCBWauNlNlKbbA5pCxcifQLLddk4IDbrtESrCFTBjB
+LG4S6S9AutxDiLikrL8JNwnWivfVFIXhzAPL5IHGEcvBjefT8K8osNgbQNcCdhX
QdSMuh27jNL4NIclVC8/XqWfXtMstgtshKNfOQK7eo/wYC3CkGWrNDgH4c5wriF/
NkqLhrB6BoCqKeJ47ncB3FhoofZ9jKxvFNLM5yVF9Wi+1rg2FEfBO7WGR3IXqoP2
DK8hC+lfMAZV5h2wXh1X7V/8q/iA8+xG2UGQVOnlsVFRX1P094IDf6DiTU70Q8qz
9KCCuzkcaj50Pg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:11 2026 by rpki-client