Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft (raw, json)
Hash identifier: CYkggHtipzAt/FQl08uVgzFqoamAe+algFHEHYpjvnQ=
Subject key identifier: C7:CD:CE:54:72:FD:1B:3F:97:CB:DB:67:1E:25:AC:0C:DB:64:4C:F3
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 01A17FD05F981F9F59B10EB0FEE51E64674C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:02:04 +0000
Manifest this update: Wed 28 Oct 2026 00:02:04 +0000
Manifest next update: Thu 29 Oct 2026 00:02:04 +0000
Files and hashes: 1: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (hash: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=)
2: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl (hash: SPaen34ZdR3yRz/G+jG72tA1RsSrTcUYwjeeR0lXrnc=)
3: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (hash: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:5f:98:1f:9f:59:b1:0e:b0:fe:e5:1e:64:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Oct 28 00:02:04 2026 GMT
Not After : Oct 29 00:02:04 2026 GMT
Subject: CN=c7cdce5472fd1b3f97cbdb671e25ac0cdb644cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:7b:e6:08:8d:23:61:95:1e:2e:9a:a0:e2:
bf:48:15:fe:69:9d:f3:2f:de:be:7e:01:f2:11:e8:
61:36:aa:32:86:76:ec:5e:f9:ef:c8:86:29:89:8d:
05:72:cc:f1:9a:bd:8a:5e:55:72:fe:2f:ed:43:ae:
f0:5c:41:fe:bd:da:9d:37:9a:c1:19:f1:fb:eb:66:
53:f9:ec:e1:7f:6b:d3:e4:0a:3f:29:f8:e7:1f:74:
51:45:aa:2c:82:e1:1d:00:bf:53:27:a3:ca:60:c7:
78:3a:b3:2b:ee:ad:09:8e:99:b8:cc:92:ec:b6:4a:
6d:a9:48:85:cf:42:0b:be:de:dd:36:d0:01:fe:ec:
16:70:f1:06:d2:92:82:47:38:ec:6a:6e:4b:9e:ce:
bb:41:4c:b0:4d:66:c0:9a:d8:06:c4:7e:98:c6:cb:
8e:e2:d9:a2:64:dc:a7:d8:df:a1:0b:a0:a7:6d:e1:
b6:54:34:e3:4c:c8:27:0c:d2:46:3b:3b:fd:5f:2e:
7c:ec:61:37:cb:55:70:53:87:cc:7a:58:f3:ee:b1:
e1:c1:5a:f1:4b:c0:55:5e:02:1f:41:b4:0a:2a:7d:
fd:48:09:99:6f:d1:7a:28:b3:35:5b:f4:bb:79:56:
65:dd:9d:d5:15:1e:92:0c:8e:97:57:14:1b:e4:17:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:CE:54:72:FD:1B:3F:97:CB:DB:67:1E:25:AC:0C:DB:64:4C:F3
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:b3:65:39:33:70:5d:3e:e4:fd:3d:4a:f2:87:74:b8:b1:
a6:24:17:51:ce:e9:a7:2c:26:fc:1e:b9:61:26:cd:79:ac:38:
52:79:f8:c7:a5:dc:3b:ee:a7:13:30:7b:01:64:b1:3f:2b:d4:
fb:db:ff:1c:6a:ea:36:49:a1:80:8b:07:34:bb:4f:3b:cc:65:
c8:91:79:42:31:5c:f5:6b:95:a4:1b:6b:33:ab:c0:6e:cb:54:
e9:c0:e2:00:bd:64:a8:83:03:db:30:de:52:57:a7:58:be:b2:
ef:4f:96:d0:75:8a:28:ff:23:6b:73:e9:7f:59:37:8d:20:7f:
9a:9f:9e:71:91:4d:fe:1c:d3:d2:f4:21:bf:fc:d6:04:fa:32:
48:29:14:1c:30:b2:7d:f1:6d:94:bc:d3:a4:2c:03:1b:4a:2b:
a8:c3:de:ea:35:cf:ec:91:8a:2e:1e:1c:f5:41:20:4b:66:db:
87:b2:dd:cf:64:26:63:2b:7a:c4:4a:b5:94:10:0a:38:30:45:
65:aa:3b:d6:d9:16:12:42:ab:fc:46:4d:b6:6a:56:21:0a:89:
80:8e:3e:ed:c8:dc:d5:ae:8c:54:2f:f1:1a:ec:5f:94:f5:43:
bb:ac:5d:11:02:d0:8e:3a:45:f4:a1:83:54:3d:23:ae:39:c9:
1f:ab:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:58 2026 by rpki-client