Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: sLxQL8bKMnuURyZm1lgGyl09FauIFmZNnffPwIWLSgg=
Subject key identifier: 2B:37:4B:5A:D7:77:DE:94:75:18:4C:E3:FD:50:35:E9:8B:11:B3:5A
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 01A08D56888141C2EE58E8482D9DD48B1103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 1357
Signing time: Thu 10 Sep 2026 22:00:53 +0000
Manifest this update: Thu 10 Sep 2026 22:00:53 +0000
Manifest next update: Fri 11 Sep 2026 22:00:53 +0000
Files and hashes: 1: Hh7KFktywM-1-107eqrB5yEmn-8.roa (hash: QGn4U4QC+cKt83SkTXHhg4z++P/aykfUDnj2eiXvebY=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: 96etDUwT+m1eSFt2wC/yQMnMAmkF5awzfwXUeGAcjkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:88:81:41:c2:ee:58:e8:48:2d:9d:d4:8b:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Sep 10 22:00:53 2026 GMT
Not After : Sep 11 22:00:53 2026 GMT
Subject: CN=2b374b5ad777de9475184ce3fd5035e98b11b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:c4:46:da:50:2c:42:ab:06:20:6a:89:3e:
bb:56:90:f1:fc:e6:ea:18:fc:6c:0d:c9:1b:97:37:
ba:5e:ac:05:ef:59:bb:7c:5f:2b:cd:7f:6b:2d:61:
6c:83:1f:30:a0:a8:74:af:fb:12:41:1d:e0:c9:97:
7f:a4:00:b8:3b:f7:e5:6e:b9:ed:7a:a8:54:4f:e4:
59:e0:98:4c:f8:77:3d:0b:85:e0:e6:b3:d9:2d:f9:
f9:04:46:dd:97:35:94:c1:77:a1:91:5a:2b:6b:dc:
04:cf:2f:26:6c:74:23:66:c4:67:33:1b:35:b8:df:
36:d4:f7:7b:cb:11:42:83:11:a3:21:b7:7e:da:4f:
2e:f6:db:a0:36:44:86:dc:14:76:7c:3d:12:0c:9c:
53:67:f1:f2:82:e6:d1:67:9f:70:88:7e:49:5d:7e:
c5:b7:b0:12:32:cd:8d:18:e1:a9:03:5f:b3:f0:00:
da:b3:07:82:86:e1:8f:14:a1:2f:2f:d0:12:8a:79:
4e:cd:07:0c:b0:49:b9:d1:37:f6:65:74:34:55:4e:
23:fc:6d:ea:bd:93:67:38:a5:a8:57:bf:b8:4c:03:
d2:9c:ae:e9:2d:9d:5d:0b:0b:ce:fc:ff:d2:4d:ee:
58:e8:b9:8e:c7:b7:41:30:1c:06:1a:43:10:26:2e:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:4B:5A:D7:77:DE:94:75:18:4C:E3:FD:50:35:E9:8B:11:B3:5A
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:50:4b:a1:6b:ba:0e:ab:a6:60:67:97:8f:25:54:71:38:
61:a3:db:28:49:b0:bc:64:31:66:f9:02:7c:13:7c:27:db:6b:
5e:e4:fd:f2:b2:15:88:e8:49:05:80:43:24:cb:3e:11:3f:e4:
d8:19:1c:8a:b3:7e:58:54:d5:1c:2f:09:fc:ea:1b:7f:1c:65:
f3:d6:ee:16:4c:69:e8:c2:4c:29:bc:11:6a:c3:db:4d:7c:d0:
ad:ad:86:8d:23:44:b3:55:77:3a:d8:5a:6a:b3:98:1f:ff:45:
21:89:0e:39:26:1a:f7:c7:34:2e:58:d0:5e:d5:7e:ef:ca:0a:
f9:87:fe:58:03:c4:25:7d:0b:46:8a:6a:0c:bd:69:9c:f0:7e:
32:90:69:e6:97:9d:ea:9c:98:93:6b:8e:aa:32:59:db:72:e3:
80:0b:e3:86:ce:52:5e:4e:e0:e2:d6:33:6e:d6:06:f9:6f:40:
a2:b6:3f:5a:b9:d7:ee:bc:b1:cd:cf:95:27:e5:cc:ac:d6:18:
ae:dd:a2:c2:fe:8e:77:63:fc:62:e3:c5:5e:d8:b9:6f:0d:a2:
9d:4f:7a:f6:79:f4:68:ea:47:40:7f:78:ec:b4:ea:b1:93:18:
de:13:df:eb:f5:0c:24:cf:d1:78:7a:08:bf:ea:e5:56:d3:0c:
82:50:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:09:27 2026 by rpki-client