Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: egFphQCfA7RY8dfME25XrsaAMn/IAYH+pbD8knuBp5g=
Subject key identifier: 7F:10:4D:E4:68:24:E8:92:19:65:2C:AA:BF:AD:16:24:32:FC:3C:76
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 01A18C415958C1CDD62522DF80A603CA8F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 13DB
Signing time: Fri 30 Oct 2026 10:00:55 +0000
Manifest this update: Fri 30 Oct 2026 10:00:55 +0000
Manifest next update: Sat 31 Oct 2026 10:00:55 +0000
Files and hashes: 1: Hh7KFktywM-1-107eqrB5yEmn-8.roa (hash: QGn4U4QC+cKt83SkTXHhg4z++P/aykfUDnj2eiXvebY=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: 3eLAkJXYMwgVy2Ys8vt0ltTJyr/Xf3IS7eJmokbfgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:59:58:c1:cd:d6:25:22:df:80:a6:03:ca:8f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Oct 30 10:00:55 2026 GMT
Not After : Oct 31 10:00:55 2026 GMT
Subject: CN=7f104de46824e89219652caabfad162432fc3c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:57:76:7e:e7:06:80:7f:71:24:a6:7b:7a:
46:93:83:91:51:af:48:3d:8d:94:54:d0:c6:74:81:
72:f4:44:df:2a:93:76:e4:22:2c:4f:08:02:ba:9c:
6d:7e:a3:d2:f6:ba:12:54:c8:28:0b:9d:d1:39:12:
a4:98:2e:ed:3b:bf:23:ea:46:6d:14:a1:93:a8:e3:
fa:77:7a:c9:37:45:a7:60:9f:31:b8:3a:30:71:14:
5a:29:ed:c2:47:50:6f:b4:8c:d8:01:9a:45:40:7d:
81:db:8b:d3:6c:23:71:23:33:f4:6b:a3:e9:6d:16:
69:3a:5c:6c:41:ec:29:cc:75:8c:a0:7b:0d:f7:40:
94:a0:27:17:31:20:7e:f5:23:de:8c:d8:5b:82:2b:
b6:68:91:1f:1c:b4:e1:de:fa:76:eb:c1:5a:39:de:
72:9a:04:8a:76:5f:0c:df:9e:2a:52:25:e9:07:76:
af:f8:5d:46:30:b9:62:03:21:8d:52:82:1b:42:42:
52:16:cd:a6:41:16:c5:82:ad:d6:08:71:bc:94:08:
4b:76:4d:e1:24:11:b8:ed:cc:d5:17:d9:62:ad:84:
e6:b4:8d:f1:61:ca:18:79:11:db:ec:fb:f4:cc:b6:
d5:79:7e:94:b3:f2:0d:22:b3:4b:82:61:8f:58:e5:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:4D:E4:68:24:E8:92:19:65:2C:AA:BF:AD:16:24:32:FC:3C:76
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:07:a7:11:42:c4:e5:36:7a:0f:10:aa:2a:af:d0:df:04:
87:ba:29:2e:74:b8:25:9f:77:59:d7:44:00:13:91:ee:28:dc:
ad:cf:7d:50:50:2b:b5:9f:e9:f2:69:69:2a:e7:70:42:01:02:
58:94:3f:36:69:34:08:00:d6:be:66:08:da:2c:a7:bf:ac:25:
98:b8:6d:f8:ac:1e:a5:34:e1:a6:49:fd:aa:25:9e:0a:6b:af:
eb:51:bc:b3:32:19:39:a0:d7:61:d4:24:c0:bb:c4:92:6a:5f:
16:68:da:4d:a2:62:a8:57:32:cc:45:25:7b:a3:07:55:9c:45:
a7:8c:64:44:bb:f8:0c:f5:39:89:bf:41:09:bc:91:82:eb:dc:
95:e2:11:17:c3:78:56:2f:43:90:89:da:66:b5:81:e8:6b:93:
f7:fc:2f:7c:27:c0:eb:40:6f:d4:49:9c:e7:81:af:b0:5a:45:
dc:77:a7:66:24:98:55:c6:18:15:49:8b:a8:33:54:09:54:16:
5c:61:a6:95:6f:9a:81:5c:df:a7:bd:65:e7:5e:99:8a:e3:89:
cb:e4:47:d9:89:2a:fa:65:f7:00:1a:a5:c6:29:2f:e5:db:5e:
ea:0c:41:d0:78:ef:75:02:b5:de:e5:87:7f:16:0d:32:d9:5f:
09:46:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:38:25 2026 by rpki-client