Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
File: heSsHuWPsBZEjd0bp6W6mkizPsw.mft (raw, json)
Hash identifier: W8xZYW/VzsUqcjO0Dik82DayXw+cd2RxKSdWqlnvVo4=
Subject key identifier: 7D:D6:F1:AB:BF:19:38:F7:74:0F:37:F5:2B:E2:E5:66:4F:9A:78:E1
Authority key identifier: 85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
Certificate issuer: /CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Certificate serial: 019FF9B64BE61A398C99BA501D9CC7502BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:41 +0000
Manifest this update: Thu 13 Aug 2026 06:01:41 +0000
Manifest next update: Fri 14 Aug 2026 06:01:41 +0000
Files and hashes: 1: 4s1KFc_pThYjGBdUJLs2Nl1upLE.roa (hash: 4dYHQlFuSRkjK7GHEQ+aA58N3FDz6pXVboUirj4ugs0=)
2: WprdfNGgmVJxl7pKSMorRSpkqxg.asa (hash: 47wTCptNF3CDuUj1JZbNAy/veEaKtcD7HJ1oodwJlcg=)
3: heSsHuWPsBZEjd0bp6W6mkizPsw.crl (hash: IrZq4yEUivAneZl4+ovjW6qkmZ3zFn0H9BftvMO85oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:4b:e6:1a:39:8c:99:ba:50:1d:9c:c7:50:2b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Validity
Not Before: Aug 13 06:01:41 2026 GMT
Not After : Aug 14 06:01:41 2026 GMT
Subject: CN=7dd6f1abbf1938f7740f37f52be2e5664f9a78e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:02:de:76:29:fc:51:2a:82:39:0a:48:1c:
d6:14:2d:d9:3b:06:33:d2:a5:66:36:a1:71:3e:d8:
3e:a6:d8:af:8b:7c:2d:1a:e6:ee:62:ba:12:86:99:
5a:df:1a:71:43:21:2c:71:c9:23:3f:cc:f9:6f:37:
e6:ee:60:10:ea:d1:b2:f3:05:5c:11:5f:83:c0:5f:
cb:d8:97:76:da:0e:e0:8a:e6:d6:5a:b8:4c:b4:de:
ec:c7:10:80:be:28:4e:da:88:8a:31:dd:b0:8d:e2:
2d:ec:dd:e2:f0:cb:ec:60:39:e2:d5:73:f2:04:ec:
8b:ff:25:90:2b:76:37:80:12:38:51:9d:2a:14:50:
ef:89:5c:ac:9f:a4:d1:1d:01:c3:a8:18:a2:48:b7:
8b:1e:cb:91:da:96:3f:35:34:16:66:30:3f:7b:04:
c2:5e:37:17:5f:b4:98:9a:4c:db:9e:b9:08:22:65:
96:9e:ec:c2:8e:a9:94:1e:6d:82:ce:8b:a9:41:90:
bd:0b:e2:fe:d2:f6:98:ec:74:21:03:8c:bd:cc:2c:
cc:83:34:bb:43:29:7b:48:ad:53:16:53:f8:77:07:
fc:5c:f2:a9:3f:b8:44:1a:e9:eb:8f:db:cb:2a:fd:
71:fc:4b:e0:e4:b0:0d:ac:41:b8:6c:73:bb:f7:29:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:F1:AB:BF:19:38:F7:74:0F:37:F5:2B:E2:E5:66:4F:9A:78:E1
X509v3 Authority Key Identifier:
keyid:85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:be:9d:69:75:2b:94:73:a0:9b:50:e7:0b:64:fa:55:46:
cb:05:aa:d9:c7:c9:20:c4:ce:c4:1a:b2:3d:03:74:55:c3:e6:
35:6e:a9:59:02:72:49:64:3b:f9:ab:c9:d4:74:11:49:16:c2:
7b:6d:d8:cb:2c:db:71:4b:78:95:fb:f6:b7:be:27:c2:74:84:
c2:8d:77:a6:3d:7a:61:91:e1:57:bb:8e:4b:cd:9d:a0:13:e6:
72:b8:0c:69:7c:85:77:9c:c7:4e:a8:42:19:86:46:c8:6f:f6:
29:53:e2:7f:26:31:46:f2:dc:5f:c7:51:f7:89:4b:6b:e5:92:
d4:df:b9:26:86:f4:e9:a3:41:5f:46:57:ca:95:2f:a4:57:2a:
c7:86:fd:d9:04:18:01:9b:c2:03:dd:10:cc:7c:a4:17:99:9c:
fe:07:ec:6d:91:36:c7:9d:fb:88:0e:8c:17:04:9b:79:ec:6f:
6c:58:1b:78:fa:4d:ff:39:21:a9:97:fd:87:b0:d8:ee:37:d3:
fa:3a:c8:c3:b0:2b:f7:f7:0f:cc:b4:3f:6d:2a:a8:7e:e9:62:
49:94:bb:39:31:14:ba:71:c0:f9:9f:70:66:fa:a6:a9:54:20:
8c:a9:19:81:e1:57:e0:c4:3e:86:9a:f2:f8:f3:b8:da:c2:19:
e2:16:4c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5tkvmGjmMmbpQHZzHUCvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTRhYzFlZTU4ZmIwMTY0NDhkZGQxYmE3YTViYTlhNDhi
MzNlY2MwHhcNMjYwODEzMDYwMTQxWhcNMjYwODE0MDYwMTQxWjAzMTEwLwYDVQQD
Eyg3ZGQ2ZjFhYmJmMTkzOGY3NzQwZjM3ZjUyYmUyZTU2NjRmOWE3OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wEC3nYp/FEqgjkKSBzWFC3ZOwYz
0qVmNqFxPtg+ptivi3wtGubuYroShpla3xpxQyEscckjP8z5bzfm7mAQ6tGy8wVc
EV+DwF/L2Jd22g7giubWWrhMtN7sxxCAvihO2oiKMd2wjeIt7N3i8MvsYDni1XPy
BOyL/yWQK3Y3gBI4UZ0qFFDviVysn6TRHQHDqBiiSLeLHsuR2pY/NTQWZjA/ewTC
XjcXX7SYmkzbnrkIImWWnuzCjqmUHm2CzoupQZC9C+L+0vaY7HQhA4y9zCzMgzS7
Qyl7SK1TFlP4dwf8XPKpP7hEGunrj9vLKv1x/Evg5LANrEG4bHO79yn2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3W8au/GTj3dA839Svi5WZPmnjhMB8GA1UdIwQY
MBaAFIXkrB7lj7AWRI3dG6eluppIsz7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdK+nWl1
K5RzoJtQ5wtk+lVGywWq2cfJIMTOxBqyPQN0VcPmNW6pWQJySWQ7+avJ1HQRSRbC
e23YyyzbcUt4lfv2t74nwnSEwo13pj16YZHhV7uOS82doBPmcrgMaXyFd5zHTqhC
GYZGyG/2KVPifyYxRvLcX8dR94lLa+WS1N+5Job06aNBX0ZXypUvpFcqx4b92QQY
AZvCA90QzHykF5mc/gfsbZE2x537iA6MFwSbeexvbFgbePpN/zkhqZf9h7DY7jfT
+jrIw7Ar9/cPzLQ/bSqofuliSZS7OTEUunHA+Z9wZvqmqVQgjKkZgeFX4MQ+hpry
+PO42sIZ4hZM/Q==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:37 2026 by rpki-client