Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: umow4IbPPaZWRqpjwNdThnOpPBz3sjcAIjn5kW9cwSo=
Subject key identifier: E8:5E:28:C7:15:E6:24:73:EA:9D:56:99:5F:03:43:64:EB:12:87:FE
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019CF3F28824EE3A2EEE80D98D5F24F8F603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 01E6
Signing time: Mon 16 Mar 2026 00:01:23 +0000
Manifest this update: Mon 16 Mar 2026 00:01:23 +0000
Manifest next update: Tue 17 Mar 2026 00:01:23 +0000
Files and hashes: 1: CkU6YuZWJuqKMJWsC4OETRJk9K8.asa (hash: Xp66M/ItxfpMp+sHD2CrNdaSo56kOJ5bY26gQ5XjdMM=)
2: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: yNMbAslGjkg3q7AC0higPSpsT9y6weL3Ua4O4mY5IOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:88:24:ee:3a:2e:ee:80:d9:8d:5f:24:f8:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: Mar 16 00:01:23 2026 GMT
Not After : Mar 17 00:01:23 2026 GMT
Subject: CN=e85e28c715e62473ea9d56995f034364eb1287fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:fc:c4:a2:8b:ba:61:fe:5a:70:3a:c1:f2:
05:19:33:ff:8a:12:e1:1d:bc:19:b8:22:ad:33:5a:
0a:db:c7:fe:b5:5a:19:81:67:f8:65:6a:80:28:25:
27:c0:78:18:b0:ef:a6:30:fb:40:fe:e8:f8:45:f9:
41:21:b9:ac:e6:f6:db:5a:99:52:af:02:72:5a:00:
8e:ee:d1:03:d4:b8:3f:1b:e3:1a:e5:20:11:11:f9:
85:f5:06:ff:17:62:6e:a0:fa:3a:a8:85:38:2e:df:
b0:1e:db:4b:15:09:91:9c:39:dd:df:f2:c9:dd:08:
46:2e:ee:06:36:f3:64:16:56:d5:88:7f:5a:55:86:
83:dd:a8:df:11:1b:75:d6:ae:05:88:3d:08:17:61:
eb:95:e9:ae:26:39:3e:b1:24:21:13:88:42:af:25:
1a:8d:48:dc:3f:0d:a8:da:f9:c0:e7:66:fe:8e:91:
cb:23:74:87:55:fe:ad:ba:09:12:f0:b1:9b:2a:b2:
e3:5a:51:c7:8f:2d:97:d0:d8:6c:6c:7c:1f:21:c3:
47:b0:5a:cd:9c:6e:0b:b5:4d:f5:be:45:1c:50:f4:
9c:aa:e6:45:b2:b4:f4:0f:72:94:13:c8:8d:ed:a2:
e6:86:99:00:c1:bd:d0:86:af:e3:60:f6:dc:38:df:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:28:C7:15:E6:24:73:EA:9D:56:99:5F:03:43:64:EB:12:87:FE
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:9f:ae:0b:0b:7c:93:cf:b4:0a:3d:cb:f6:e3:09:27:d7:
09:b7:e1:91:71:ce:98:0e:88:e4:2f:f9:25:7b:9c:e6:aa:9c:
f1:f2:9e:1c:0a:f5:33:d4:38:27:af:90:b8:a2:da:af:10:f1:
e2:98:8c:84:65:fc:04:1d:39:eb:d3:03:29:0d:a6:7a:3b:6d:
9a:ad:9c:94:66:6e:f6:7b:ec:fd:bc:29:d4:51:94:e0:d2:ab:
06:b8:fb:ef:21:a2:7b:96:6e:f7:35:32:71:9f:78:e2:8d:86:
04:f1:5b:b3:54:2a:41:40:5d:cc:48:07:b2:f6:dc:16:54:a9:
8e:5a:93:2f:3a:3c:99:31:b1:8d:2f:81:5a:68:a0:33:94:23:
76:d8:c0:a5:ae:e9:62:fe:6d:7c:93:7a:36:60:f2:8f:f0:75:
56:a9:d8:29:2d:fd:99:b8:cc:44:c9:46:a6:58:60:2e:2f:ff:
b4:23:74:f0:ed:de:ca:a5:a5:8c:6e:66:b3:67:25:ee:37:3e:
56:d1:5e:38:67:e7:5b:7e:8f:cd:5f:9d:2e:bf:cb:1d:1d:97:
52:ca:f6:06:56:fc:79:da:8c:63:4c:08:8c:fe:d8:1b:e2:67:
19:3f:93:a7:f4:48:6c:ea:29:55:72:8b:80:80:23:b9:f7:01:
a1:8f:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:04 2026 by rpki-client