Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: 1fkDozA3OYEohQWDYDNsRFRxRPAhcJI1Rrtb1FL8Kmk=
Subject key identifier: B7:92:E2:04:33:92:CC:71:EB:E9:15:6A:4C:93:5D:3D:57:22:12:78
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019E0DE6B9E7A053D3F425BEE27D723AC78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 0278
Signing time: Sat 09 May 2026 18:01:25 +0000
Manifest this update: Sat 09 May 2026 18:01:25 +0000
Manifest next update: Sun 10 May 2026 18:01:25 +0000
Files and hashes: 1: CkU6YuZWJuqKMJWsC4OETRJk9K8.asa (hash: Xp66M/ItxfpMp+sHD2CrNdaSo56kOJ5bY26gQ5XjdMM=)
2: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: N9zFkVZ/ZxSRR1nARlkhMz4gSvXypSgkCo/t7qhJ2rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:e6:b9:e7:a0:53:d3:f4:25:be:e2:7d:72:3a:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: May 9 18:01:25 2026 GMT
Not After : May 10 18:01:25 2026 GMT
Subject: CN=b792e2043392cc71ebe9156a4c935d3d57221278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:2c:d5:19:d9:61:51:19:bf:bc:94:b7:6a:
3c:49:e2:2e:02:1a:91:4f:de:79:17:a1:da:1d:b2:
c5:99:d8:5d:b2:32:bf:b2:fa:6a:15:b4:c5:71:84:
8f:a3:f1:d7:c0:da:a3:58:de:6e:9e:8e:55:a4:88:
ab:b6:3c:43:a3:e7:d4:9f:30:c6:23:a1:c9:f8:25:
c8:75:4b:cf:6e:18:b4:50:98:98:0a:a2:26:8a:a7:
8c:75:72:91:42:4b:df:86:12:05:13:cf:94:d9:00:
c4:e8:91:b8:fb:91:78:e3:38:db:e6:aa:ed:62:af:
35:0a:ca:32:5e:80:82:b6:99:ff:9f:bf:a1:8a:d5:
5c:d0:50:93:e8:e0:02:3e:af:85:b4:d8:0a:4c:91:
e9:17:3b:a3:d1:2a:8e:19:14:53:34:5a:52:1b:59:
d3:29:19:40:94:8b:ed:9b:b7:c9:f5:08:cf:b8:63:
39:ac:e5:69:f9:12:2b:ad:3e:84:ba:a1:a0:32:2f:
8d:fb:eb:28:1a:28:77:db:c3:7d:08:c8:b1:9b:b1:
45:ee:06:30:21:37:13:b6:5e:19:eb:a1:b9:4b:d8:
73:2e:e5:32:b6:19:a7:0a:f3:f4:e6:6e:10:b6:c4:
b7:84:31:2a:aa:83:24:d9:34:04:15:d8:26:ae:82:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:E2:04:33:92:CC:71:EB:E9:15:6A:4C:93:5D:3D:57:22:12:78
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:44:a8:5a:8c:e2:ff:f2:da:f3:78:1a:ca:1b:54:90:9e:7d:
f3:ca:f4:52:ed:ae:7e:b3:2f:a7:49:69:e9:fc:3c:f6:a6:8d:
ce:a0:a8:0a:f1:b8:fe:88:27:03:cf:17:62:ae:f9:d2:f1:8e:
5f:c1:7b:d2:e8:75:13:ed:3c:09:ae:8f:ba:28:ae:74:b8:6f:
1e:6a:2f:f7:b7:b0:98:aa:b4:60:65:7e:bb:e0:45:3a:ba:14:
a6:98:28:1f:3e:6c:37:96:b1:7c:d5:9e:e3:71:5c:82:e8:87:
de:6e:e7:12:bb:0c:8a:fa:ae:89:48:4e:74:8b:5a:c9:d6:b6:
70:6d:54:01:e0:28:24:b2:66:13:86:c8:81:46:13:fb:ae:be:
6c:8a:53:9c:d8:23:3c:f3:81:f4:5a:c7:39:a0:4c:8e:14:69:
84:a5:a2:f6:3f:f5:de:11:b7:6a:65:82:57:71:3a:e9:1d:03:
0a:3b:e2:53:3f:09:ac:4e:86:0d:32:b0:bb:1e:06:a1:e1:ce:
11:6e:53:8a:3c:a4:49:40:9c:72:c4:d2:ff:44:f0:56:44:b9:
48:95:4b:38:cc:b7:5e:b3:d7:8e:82:a9:37:82:f9:5c:6a:9a:
00:09:4f:a2:8e:f7:f0:67:0c:53:16:72:33:c8:f3:19:54:96:
4b:42:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 01:14:58 2026 by rpki-client