Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: BC/1afhAJGdscGnU1uKqimmUsK6z6TWfAEVlIU5Uzv4=
Subject key identifier: EC:1B:96:A5:F1:B3:76:50:52:F0:4A:71:83:50:09:A8:A9:86:07:03
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019F85682A89EDFEEDFCDAE5B0B3628A9E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 090F
Signing time: Tue 21 Jul 2026 16:00:24 +0000
Manifest this update: Tue 21 Jul 2026 16:00:24 +0000
Manifest next update: Wed 22 Jul 2026 16:00:24 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: b2K4zYbNJbH8zWedgB/s46E4aUX1aU3V4lVlGAsyBkw=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:2a:89:ed:fe:ed:fc:da:e5:b0:b3:62:8a:9e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Jul 21 16:00:24 2026 GMT
Not After : Jul 22 16:00:24 2026 GMT
Subject: CN=ec1b96a5f1b3765052f04a71835009a8a9860703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:39:d4:b0:bc:a7:00:af:78:f0:dc:f2:d8:
7b:c1:72:f1:2d:31:67:4f:03:f8:77:99:54:64:db:
c8:15:05:2f:d1:fb:18:1b:f5:68:06:53:98:1d:a8:
0e:4d:d4:06:9e:0a:7e:aa:61:f4:f8:ef:ba:95:b1:
5a:2b:ed:8a:f0:97:83:19:54:63:c3:9d:3c:e1:d0:
7e:a2:4c:2f:3c:bc:74:11:66:b2:8a:c6:44:d0:81:
2c:ae:b7:7f:15:ff:d4:89:78:85:e0:47:3a:76:08:
33:00:f4:85:32:bd:26:c3:8d:f9:6f:66:2c:a6:65:
3f:80:80:48:74:d9:f5:a7:31:70:df:99:06:6c:35:
3f:d9:b5:fd:29:de:66:7f:fa:13:1b:1d:3b:cf:e7:
19:66:0f:23:df:16:d5:13:32:2d:09:83:7f:13:62:
f3:01:20:c6:47:65:f9:4b:8d:40:1a:3e:57:d3:21:
79:7f:6e:9c:f5:82:06:22:49:7b:72:c3:6f:ce:d0:
37:e1:77:ed:17:fd:11:9e:86:d0:bc:a6:ca:1d:b7:
4f:bb:3a:3e:c7:9c:18:97:46:d8:e4:fa:5c:73:eb:
6b:21:b0:ca:c1:58:5e:a8:43:77:7c:0f:05:1b:86:
e9:6d:fa:55:f6:09:0e:f9:22:59:d0:58:fc:6a:4f:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:96:A5:F1:B3:76:50:52:F0:4A:71:83:50:09:A8:A9:86:07:03
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:3c:9a:0b:b9:2e:03:bc:ab:09:0f:87:ee:24:aa:3b:6a:
01:b9:83:ae:0d:b0:e9:b2:ee:22:49:de:24:af:56:bd:03:2f:
85:22:f0:cc:66:b7:82:57:19:60:71:12:a3:56:34:75:1d:f0:
e7:fc:8f:f5:0a:83:d8:1d:c5:19:9c:ee:26:ae:cf:d0:e6:15:
41:a4:5a:a2:d1:34:7a:eb:2f:0a:b4:28:15:e3:47:9f:da:8a:
4b:4e:50:c6:9c:d0:84:ed:b4:f9:5e:f2:af:7f:94:02:07:0a:
29:cf:0b:c6:d7:32:c1:70:c0:40:d2:ab:17:47:23:68:1f:23:
b4:20:dc:20:db:cb:a0:97:53:6a:69:32:1a:43:5c:a3:38:f3:
a2:c7:fe:44:8b:46:ea:d8:b9:94:f3:fa:60:7c:64:84:ef:1f:
25:95:fb:4b:d7:d1:06:1f:80:60:f6:05:f0:ca:05:aa:01:ed:
18:d5:ed:0a:fc:da:84:bd:d3:db:7c:48:a9:6e:fc:01:cd:c4:
d9:e8:fd:e4:6c:18:6a:1d:91:ab:f4:5b:0e:69:22:4e:95:3f:
6f:68:de:a1:26:eb:57:71:94:ba:2e:2c:53:58:f5:40:3c:25:
9a:f9:df:27:b5:c8:1d:ac:e7:9e:a3:a8:fd:11:68:80:45:e0:
1a:18:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:25 2026 by rpki-client