Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: YTAvyrrxmlJFQvpEYjQxUS7TrfhnIeR7JjObaLjWKtk=
Subject key identifier: ED:E3:F4:35:C7:61:31:1E:22:AF:88:C8:86:76:AD:75:A9:C5:26:22
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 019FA3A9CD0613C1311C81B732EA77F5ED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 12DE
Signing time: Mon 27 Jul 2026 13:00:42 +0000
Manifest this update: Mon 27 Jul 2026 13:00:42 +0000
Manifest next update: Tue 28 Jul 2026 13:00:42 +0000
Files and hashes: 1: Hh7KFktywM-1-107eqrB5yEmn-8.roa (hash: QGn4U4QC+cKt83SkTXHhg4z++P/aykfUDnj2eiXvebY=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: 6HF1QSGp3vMLyUUmJ+fh8DKHEKwsQJKeObw6KUYjPZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:cd:06:13:c1:31:1c:81:b7:32:ea:77:f5:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Jul 27 13:00:42 2026 GMT
Not After : Jul 28 13:00:42 2026 GMT
Subject: CN=ede3f435c761311e22af88c88676ad75a9c52622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:21:3b:5e:ad:d5:29:45:bc:b1:56:fd:37:
92:58:9b:6d:3d:fe:f8:5c:34:c8:5c:68:bf:57:ab:
47:e0:96:03:13:af:f0:e7:9a:e4:04:d3:87:e2:05:
6a:cf:16:08:35:d9:94:07:59:67:f8:d1:60:d6:f5:
f8:5c:d5:c8:9a:7c:f2:8a:d2:21:25:09:25:46:2e:
69:50:c6:f5:ee:86:fc:0b:ea:dc:36:fd:87:ea:1c:
04:b3:c1:92:95:f7:dc:25:76:18:23:1d:82:97:01:
40:f2:dd:b3:ac:02:a8:7f:9a:4b:e7:af:20:2c:d0:
36:81:a0:18:27:30:97:5e:3e:df:1d:3c:e8:f7:23:
24:7b:29:56:35:03:84:45:1e:ea:60:a6:19:07:ab:
28:ca:6f:9a:29:ed:c4:9f:33:9f:f3:1c:7a:7d:75:
31:73:41:3b:a9:6d:7e:03:b4:85:ff:8b:14:1a:a4:
6b:e3:cc:62:21:f3:db:53:65:e8:14:c3:3f:2c:0e:
2a:79:13:61:50:b1:c2:21:0f:59:86:a8:b1:b2:71:
1c:1a:b5:82:d5:d2:02:46:7f:a3:76:7e:3d:30:85:
66:19:fd:6b:57:7e:1a:f7:80:85:82:e2:0c:c4:62:
0c:3d:79:64:f4:06:29:d5:89:64:9e:d5:df:4c:93:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:F4:35:C7:61:31:1E:22:AF:88:C8:86:76:AD:75:A9:C5:26:22
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5c:0c:98:2b:91:24:a8:61:9c:88:38:28:b9:e3:a7:2b:74:
4e:89:fa:3c:1a:72:0d:bb:a8:e4:63:ea:7c:95:a5:0c:07:0c:
83:c8:d3:9e:10:34:f0:76:fe:e9:2a:03:6e:cd:81:f8:06:05:
b6:75:a1:f6:17:48:5f:d6:49:93:a6:71:aa:14:fc:3f:5c:f1:
b8:7b:08:c5:7f:43:de:b1:ee:e7:42:34:c2:3f:12:fa:da:a1:
6c:3c:f5:6f:86:ae:b6:d4:1f:2d:0b:53:b2:e0:75:bd:2b:b0:
b6:f6:92:d0:36:c3:98:21:bd:ff:41:72:c5:37:19:3e:f2:52:
e7:43:da:51:4c:38:7c:94:d7:d7:42:7a:0c:71:bb:db:89:2b:
fe:32:f1:ad:74:ac:54:8a:eb:fd:e0:31:76:d5:66:82:d9:16:
6d:26:1b:81:84:de:96:79:e9:0b:94:41:2f:15:0d:a8:3a:71:
08:42:df:cc:54:41:2a:33:6e:c3:dc:ac:87:44:f7:25:32:15:
31:a2:1e:d6:81:e7:e5:be:e8:f9:fe:61:ee:45:54:c9:02:bf:
15:53:db:e2:83:3c:cb:b4:d0:62:37:46:e0:b0:21:9d:dd:3e:
5f:f4:20:45:cd:b3:98:86:cf:2f:c8:c4:06:f3:c6:f9:9d:3b:
90:ab:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:51:45 2026 by rpki-client