Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft (raw, json)
Hash identifier: ucbsGhDN25qKVsW1M8b2SFjDxveiJwsAui8yWWrsRZU=
Subject key identifier: 66:FA:D4:5B:48:CD:43:02:48:B7:27:19:E3:53:7C:B8:6C:91:0F:3C
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 019F85D705471FF49BF7ADAAD48F49623196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:28 +0000
Manifest this update: Tue 21 Jul 2026 18:01:28 +0000
Manifest next update: Wed 22 Jul 2026 18:01:28 +0000
Files and hashes: 1: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (hash: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=)
2: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl (hash: o7+MyARxXiXtwdmoEsIFZSZCP+O3KG82Y2vHY0eMyhw=)
3: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (hash: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:05:47:1f:f4:9b:f7:ad:aa:d4:8f:49:62:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Jul 21 18:01:28 2026 GMT
Not After : Jul 22 18:01:28 2026 GMT
Subject: CN=66fad45b48cd430248b72719e3537cb86c910f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:aa:9c:08:b8:a6:b7:b3:e2:ec:ed:f3:bd:
07:93:62:cc:a2:8f:87:bc:89:ad:97:88:89:71:87:
f6:c9:37:33:89:0f:6a:ea:ff:fa:5c:3f:0a:b9:86:
be:cb:47:93:97:23:60:2f:b3:2b:d6:62:51:75:c1:
d8:18:c9:4d:c0:db:b3:b8:de:9f:3b:11:ce:ef:20:
3c:88:8a:d9:7c:61:e4:ca:9d:72:73:07:29:03:d9:
58:07:7f:40:bd:7d:f5:37:c1:60:cd:72:73:e2:8f:
1f:2f:b5:90:29:9b:cc:db:2d:85:c3:33:c7:cd:41:
52:5a:d8:10:70:8c:f4:bc:c5:52:ea:23:2a:7d:4b:
f1:2d:b9:1e:69:db:8b:37:75:a7:c3:0a:58:70:ae:
c9:42:a3:55:e6:b0:96:a0:f9:55:de:ad:04:51:d7:
1e:39:9e:4a:a7:3b:14:ea:ae:64:c2:0a:6f:e7:08:
02:23:d6:6b:29:9a:9d:01:94:cc:2c:62:6b:ce:2d:
c8:2f:2b:c2:af:b6:f6:19:5e:a5:cb:4f:9c:f0:a1:
76:1d:68:37:a9:dd:6d:2c:a6:3c:85:c5:1f:20:4a:
02:ca:fd:db:9f:6a:dd:2d:01:4d:75:c5:0f:58:5c:
0c:6b:37:63:04:04:cd:d1:7b:53:ca:13:7f:9b:19:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:D4:5B:48:CD:43:02:48:B7:27:19:E3:53:7C:B8:6C:91:0F:3C
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:18:9d:0a:e9:ea:74:bf:79:39:d8:72:d7:79:0f:14:f5:76:
2a:40:0f:51:2a:29:7f:69:7d:ba:df:0e:f8:e8:6e:88:98:a4:
e7:3f:44:4e:05:9d:f8:6e:bb:df:d2:e9:7a:4b:9a:5d:b8:95:
20:3d:24:3d:6f:3c:42:4c:fc:b2:fd:5e:a6:37:22:92:30:d2:
0f:2e:5e:1b:40:3b:ea:16:3f:82:f6:bc:8f:dd:bf:63:d3:a0:
8d:91:74:98:a1:e9:41:67:65:67:5b:c3:40:ec:d7:2d:9f:32:
b1:00:53:f5:ad:b9:3a:b0:b4:60:5c:ce:47:94:6f:ba:e2:09:
ee:19:26:ed:bb:5f:ed:ec:01:bd:0e:d1:9e:e5:14:ce:67:64:
8b:9d:63:96:32:de:92:9f:dc:47:1d:cc:61:ac:07:9d:79:4c:
e5:05:fb:03:52:3f:2a:b1:41:06:eb:82:f6:be:46:4f:71:db:
53:46:28:09:b1:a3:92:5d:72:34:c2:7e:f6:28:a9:48:4a:c6:
f7:9e:00:3c:46:ba:4b:7d:a5:5a:91:63:ee:6f:29:81:8a:29:
c7:f4:08:fb:34:d6:e1:c5:00:dc:88:2c:ae:8d:6c:ed:3f:8f:
4b:df:d1:41:e4:94:1e:8a:1c:c9:8c:6b:25:7b:95:ac:0e:c9:
8a:71:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:38:44 2026 by rpki-client