Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: 6QTWVe/B7iZc3RJhYwf30WoFrM3xgUK6vhJml42KRik=
Subject key identifier: 68:0E:AC:C6:7B:20:3D:24:70:4D:14:39:BE:E7:7C:65:02:87:6D:69
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019EFACC4A32B1D0A97893418ECA5C374639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 02F3
Signing time: Wed 24 Jun 2026 18:02:32 +0000
Manifest this update: Wed 24 Jun 2026 18:02:32 +0000
Manifest next update: Thu 25 Jun 2026 18:02:32 +0000
Files and hashes: 1: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: 7/l0wsY73Odp1bXsqukj4hxSDhPtxke7b5LkK6GX3Lk=)
2: zj42VqHXAHeZD-aQh282IC0Wa4E.asa (hash: k5/yCPHuauShTA5Y9+JwkWv2aEcgloD9LxkHT8lsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 18:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cc:4a:32:b1:d0:a9:78:93:41:8e:ca:5c:37:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: Jun 24 18:02:32 2026 GMT
Not After : Jun 25 18:02:32 2026 GMT
Subject: CN=680eacc67b203d24704d1439bee77c6502876d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:f6:4b:cb:e0:a2:a6:91:f5:8b:90:74:59:
7c:8c:38:59:44:07:fd:f6:e5:15:38:09:8b:5f:9e:
c4:17:a6:ac:65:1b:64:2b:d5:70:6f:00:bc:d4:1b:
66:f8:d3:9b:5f:86:70:e1:13:b0:5a:f2:e4:21:b9:
05:8a:07:52:88:dd:fb:75:60:d4:9d:e9:6f:3d:ce:
e4:7b:f3:26:05:f0:06:c8:7a:ae:e9:d3:8a:9d:60:
99:7b:35:fd:59:f0:b4:e5:87:1d:c0:db:87:0b:f4:
6e:d6:84:d9:dd:33:55:6e:4c:7c:b7:fa:61:2f:03:
ad:a6:f1:a0:0f:7d:3a:f0:af:f4:43:94:e5:fc:98:
85:4f:4d:d9:3c:45:dd:54:51:b0:e9:80:29:58:ac:
fa:ba:f2:e4:34:4d:6c:9f:2f:f2:7a:4b:ed:10:cc:
f8:4d:5b:10:ba:59:f3:15:b0:3e:c3:e1:76:7d:11:
06:01:d9:16:2e:c5:8c:66:3f:c4:6b:cc:1a:15:c1:
1a:05:2f:98:ab:4d:aa:ee:7f:36:67:dd:0b:8b:f9:
9c:3d:8c:58:6a:75:1a:ac:64:26:f6:66:f6:ea:ea:
97:30:c2:92:b1:b8:9c:98:a0:86:4c:4b:94:65:a8:
2d:8c:08:cd:6a:3c:e9:93:ae:9b:8d:f2:80:90:fa:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:AC:C6:7B:20:3D:24:70:4D:14:39:BE:E7:7C:65:02:87:6D:69
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7c:0c:72:09:75:79:5a:e4:fe:a0:f5:bd:04:a1:61:24:0d:
f4:cc:de:06:27:36:da:ee:ca:6f:74:4c:35:8a:78:b2:9f:8a:
17:6e:ed:aa:17:c8:4f:f3:a0:e5:6a:3f:dc:79:3e:59:98:13:
a4:82:59:b1:96:99:b4:7d:44:63:70:0f:1f:38:1e:4d:86:66:
f4:c0:72:f8:36:24:ad:e2:f5:2b:d8:ff:3d:5b:a0:1f:e6:8d:
29:fe:36:c3:ec:b0:6b:9c:c5:fe:ea:79:20:9e:9b:bb:79:fc:
e9:48:f9:1a:bc:6b:28:fd:2b:23:fd:6a:cd:b2:a2:6d:01:71:
af:d3:c1:9e:8b:d3:60:4f:de:6d:76:cc:9c:86:51:ce:9d:48:
05:eb:80:06:13:29:f7:21:e7:bd:93:6d:01:bd:38:ec:17:df:
04:e5:00:4d:7a:a7:40:ed:7c:f1:a7:df:c1:81:38:14:5a:32:
8d:45:38:da:68:d2:fe:20:cc:82:f7:8b:38:36:79:29:11:62:
f4:0e:e1:32:07:1f:52:c4:5e:36:ac:65:1f:08:0e:77:d9:09:
d3:69:c0:7e:fc:ce:13:4c:e6:24:02:cc:a8:0e:8f:f1:01:54:
78:64:b3:d4:0b:d4:94:cf:6f:f7:47:83:7a:26:25:8c:25:19:
64:87:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:59:26 2026 by rpki-client