Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier: lxXOcRw7BeuetnVehEX5ADYKQaPvLna2dgVnAPQSJug=
Subject key identifier: E1:7A:3A:32:92:5A:97:37:97:1C:2C:57:BE:3F:05:40:84:21:23:11
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 019FA116D1AF15E434BB40A63F03C30B7255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number: 0F29
Signing time: Mon 27 Jul 2026 01:00:54 +0000
Manifest this update: Mon 27 Jul 2026 01:00:54 +0000
Manifest next update: Tue 28 Jul 2026 01:00:54 +0000
Files and hashes: 1: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: ovBUVODWJvYgPKBvcG/OsTtHfZ95C7kSTSjiIJ1QmOQ=)
2: oyf7mCDs6nxYq530jF1So73y6Ek.roa (hash: R1PvPZnB5AcZTpEKxOJHt9NkPCciXrOR+mSbYRi5v5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:d1:af:15:e4:34:bb:40:a6:3f:03:c3:0b:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: Jul 27 01:00:54 2026 GMT
Not After : Jul 28 01:00:54 2026 GMT
Subject: CN=e17a3a32925a9737971c2c57be3f054084212311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:98:4c:43:7d:79:47:f3:1a:f5:fb:8a:39:
7f:d4:31:0a:c8:70:b3:7b:f6:9f:de:ad:89:62:38:
24:b5:32:21:6d:8e:d7:06:1b:09:e5:7e:40:f4:63:
89:1c:cc:71:72:a1:c6:5a:62:da:82:b1:58:ef:96:
69:c4:48:82:31:e2:97:91:3e:77:05:60:ca:22:9c:
4a:d9:3d:a3:07:f5:78:a3:bb:56:e0:7d:47:34:27:
44:8c:f9:cf:e2:69:0f:e4:64:1b:21:a9:d9:0d:a3:
65:e1:93:09:89:ad:04:9c:ad:f4:fe:ed:33:e9:1c:
60:2e:8f:b0:75:69:2d:88:c5:4d:21:04:2d:ee:8c:
91:55:75:5c:42:7c:f2:f4:1f:93:89:c1:db:34:6a:
8d:5f:d7:b1:66:2d:e8:4a:96:97:c7:35:18:50:a5:
1f:b3:d5:60:0c:57:bf:f5:d4:3b:cc:c9:31:da:67:
70:1b:7e:32:eb:5a:63:31:3f:83:c0:f9:41:e3:56:
45:f1:10:26:c3:32:bb:99:ca:24:0e:52:25:f1:f8:
88:c0:cc:07:0d:2c:2a:3d:91:26:75:33:82:da:c5:
6f:12:20:21:5e:11:d3:b9:e6:8d:9a:b1:0a:22:0b:
e9:c6:d9:4f:01:40:1f:d6:19:96:a9:1a:da:34:46:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:3A:32:92:5A:97:37:97:1C:2C:57:BE:3F:05:40:84:21:23:11
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:ba:76:97:a1:fa:3c:b6:c1:2c:1b:be:11:80:ef:f7:3d:
2a:b3:12:23:6f:86:88:62:86:55:7f:26:96:26:cc:57:45:49:
75:28:f0:fe:6a:ce:0c:61:9f:e5:70:51:3c:ec:83:a1:46:6a:
79:46:67:0c:2f:9d:7c:a8:c3:4d:05:c0:ef:0f:a8:3e:b4:34:
f3:e4:f1:eb:4b:66:bf:49:e6:04:88:50:4c:ed:ce:57:b8:ce:
77:11:6d:e0:e2:fc:42:c8:8b:19:6a:cc:f4:fb:43:ea:5a:25:
b0:20:25:e8:67:32:72:b2:f8:a3:97:f3:88:85:aa:ee:d1:27:
8d:62:99:b7:7b:ea:0f:2e:94:88:d9:74:a4:2c:d1:4d:f9:be:
0e:d4:ce:77:d7:32:28:64:e2:b6:91:3b:28:3c:19:93:19:86:
0e:cf:70:79:93:00:f2:71:d5:0c:42:e1:4b:de:97:d0:15:0d:
3b:1e:80:73:6e:b7:99:b2:ea:ed:31:98:e4:55:0d:ef:6a:53:
54:67:3e:95:05:e4:af:17:f0:66:42:59:dc:88:6d:4c:77:31:
8b:2e:10:ca:3a:8f:f3:9e:63:4a:aa:4f:13:07:e5:21:9d:de:
ce:8b:c9:96:2d:29:d4:de:de:d1:2d:be:37:d5:21:db:9b:4b:
3a:1f:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:41:19 2026 by rpki-client