Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft (raw, json)
Hash identifier: 5nwl8QIVpFx9nRp4tkpXMkJ4YOKycevV+oyLKXT8kHc=
Subject key identifier: 4E:8D:DC:3E:57:94:C9:D6:1C:B9:4D:4F:EB:9E:70:7B:3D:EE:21:63
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 01A08C7AA00D2647FE6618031FA7A59791AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:41 +0000
Manifest this update: Thu 10 Sep 2026 18:00:41 +0000
Manifest next update: Fri 11 Sep 2026 18:00:41 +0000
Files and hashes: 1: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (hash: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=)
2: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl (hash: Pw8KSDN/5jCelS3ZBKskGVEErcCYTnDyNZHHOdnqnrk=)
3: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (hash: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:a0:0d:26:47:fe:66:18:03:1f:a7:a5:97:91:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Sep 10 18:00:41 2026 GMT
Not After : Sep 11 18:00:41 2026 GMT
Subject: CN=4e8ddc3e5794c9d61cb94d4feb9e707b3dee2163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:59:be:c8:5c:22:46:f7:70:b6:c1:e0:7c:
5b:fe:be:6f:56:0f:aa:f4:e4:98:ab:ab:d6:66:d1:
9b:d9:40:36:67:7a:3f:26:6c:bb:fc:74:d9:01:e9:
fd:ba:9a:17:45:5e:d5:16:f7:1b:fd:95:f5:ff:17:
95:71:82:ee:58:01:aa:32:21:5d:60:73:d3:83:ce:
3f:27:a7:a1:11:bb:c0:53:2a:0a:65:50:9b:e9:ef:
25:59:23:71:60:57:b2:ea:25:00:a3:0a:81:a7:75:
83:26:f0:45:67:56:48:1d:b7:7d:d3:f6:f8:1a:37:
30:1f:00:bd:62:e5:8b:7e:ea:6e:18:94:57:63:51:
b8:58:76:e2:75:4e:1d:fe:f2:f7:f1:81:cc:ff:8a:
91:3f:ba:a0:eb:86:27:e0:82:42:4f:38:bf:01:b0:
8f:01:4b:b1:c9:a9:6b:a1:5c:fc:cd:f9:45:87:e5:
47:ae:29:f9:9e:c5:77:79:db:b5:e3:18:f0:d2:e0:
15:f6:40:79:03:af:31:4d:fe:a2:81:7c:80:55:71:
ef:b0:81:d5:fa:57:b2:8d:41:ea:66:05:35:83:50:
c6:47:15:d4:52:be:57:12:c6:40:cc:e3:b3:b0:63:
15:8b:29:e2:84:6b:53:89:c6:cc:ed:ca:d7:6f:c0:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:DC:3E:57:94:C9:D6:1C:B9:4D:4F:EB:9E:70:7B:3D:EE:21:63
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:26:a8:8f:cb:c3:01:39:ad:37:b7:27:66:32:a4:27:a1:70:
11:a4:4a:a4:d5:a4:ce:88:d0:61:54:b1:85:45:14:24:51:51:
e7:18:f1:f3:ff:37:c2:73:c6:b3:33:05:b1:9c:e2:79:8c:5b:
4d:c0:9a:5e:bb:24:53:d7:f1:33:8b:ac:ac:54:90:56:b6:53:
80:8b:44:a0:c8:20:83:33:9b:22:50:b0:e2:5f:18:be:26:6c:
83:4f:75:d8:e8:b3:e0:d7:43:60:3e:5a:1d:40:d8:da:d1:c6:
a1:d3:1f:37:00:11:b7:31:33:23:ec:d7:6a:39:0a:53:29:e2:
3b:c2:e5:e9:cb:25:67:a8:c6:61:9d:13:fd:58:b3:a8:bd:47:
a7:d4:64:cf:a6:41:7a:1b:52:df:36:45:41:b9:0b:c1:74:9e:
1f:77:88:c3:f5:83:9f:8f:1b:00:12:32:8b:fe:0b:71:24:d6:
da:65:09:0c:d0:88:3c:90:03:b6:2c:99:5b:90:dc:48:94:48:
dc:6f:b0:ad:38:3e:68:04:34:56:12:be:f4:ab:27:37:ad:8b:
c4:fd:b2:a6:b8:aa:cc:e3:f0:d7:7f:b2:77:9a:60:e8:1b:76:
51:6a:d1:05:ae:da:da:ab:85:2d:fb:f0:18:4c:25:0f:fc:33:
32:84:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:16 2026 by rpki-client