Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File: hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier: aPZvYsdOrtmQUb70QJ+qSw+D/C4LndGfX09pwGDZIo4=
Subject key identifier: D6:42:09:09:C8:5C:3B:4E:ED:B1:B5:4F:E0:DA:76:40:A5:C4:59:50
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 019FA0DFC4A1E35BFBAB504175ACCE709DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number: 14D8
Signing time: Mon 27 Jul 2026 00:00:47 +0000
Manifest this update: Mon 27 Jul 2026 00:00:47 +0000
Manifest next update: Tue 28 Jul 2026 00:00:47 +0000
Files and hashes: 1: UVK-TwFECyBo493Ak51MrNfcaQE.roa (hash: /fbHkbD7KPDuOT91DBKV1keIzbve2wMN0Nea8980swA=)
2: cAfMugWdxXFLBCx7sw2-yd61uKY.roa (hash: orwX8b0RS0lYztkvgn66c9x9TZlFdD7WNVOTBejxj/Y=)
3: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: bfBgOFIyZeJtOoCXnEBn6v8Z02LawkThJiIklH9xPho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:c4:a1:e3:5b:fb:ab:50:41:75:ac:ce:70:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jul 27 00:00:47 2026 GMT
Not After : Jul 28 00:00:47 2026 GMT
Subject: CN=d6420909c85c3b4eedb1b54fe0da7640a5c45950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:26:74:29:5e:8c:28:0b:53:e4:d3:f1:bd:
2c:5d:b0:64:50:cb:12:d0:c5:8d:69:60:d6:5b:e0:
ea:98:39:fd:0f:0c:48:f5:8c:e9:ee:5b:73:a7:43:
41:bb:e1:75:b2:87:74:44:0c:4d:3f:90:79:70:35:
88:c1:9e:f0:28:27:2c:8d:3f:3f:7b:7c:0f:c7:f5:
e8:79:2a:77:5e:aa:bb:94:cf:15:2e:48:f4:5c:86:
01:cc:a8:48:aa:1b:24:dc:2f:6a:1f:a1:21:5b:98:
f7:6e:f4:2b:0f:e2:74:87:35:46:bd:31:4d:5a:28:
28:b4:74:ea:12:8b:9f:60:51:c2:27:2c:48:2c:a6:
23:42:c7:61:8b:43:c9:47:51:e0:3e:b7:3e:2c:c6:
1c:7a:80:36:cd:f4:4c:e8:b1:8e:21:59:67:05:fb:
2d:8a:e9:20:89:00:6e:e6:37:9e:38:85:f1:5b:14:
e1:20:02:a2:79:e9:91:e6:e7:ce:e3:2a:1d:bf:be:
66:b2:3f:78:ab:63:b4:bf:f3:e6:30:a3:f2:65:32:
5f:82:0d:2d:e9:cf:42:4a:35:93:0f:48:15:54:02:
1d:30:5b:54:04:5b:f8:f8:8a:3e:f6:e3:05:ff:40:
ee:ce:f9:73:61:21:cd:2f:9c:32:63:a6:2b:8c:15:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:09:09:C8:5C:3B:4E:ED:B1:B5:4F:E0:DA:76:40:A5:C4:59:50
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0f:77:75:4b:95:ac:6a:6a:05:8f:ad:c1:08:16:b9:22:87:
d6:1c:ea:9f:e3:a3:d8:59:a6:e5:05:fe:05:dc:dd:43:06:9f:
ce:ea:74:35:ef:7e:f1:83:d0:33:a9:fe:2c:05:34:cc:a9:f7:
ee:c6:36:2e:01:3d:0a:fa:9d:ab:35:5e:f1:46:15:cf:3e:9a:
e2:11:0c:63:57:ee:cd:46:fb:68:14:8f:11:1b:61:38:52:f9:
9b:68:6c:c8:81:82:66:6a:30:4f:3b:14:1b:89:18:a8:9d:5b:
ef:b0:e9:e2:87:20:48:a9:f1:a2:c5:58:33:93:b1:b4:97:8d:
eb:93:ad:27:0f:92:c3:15:ee:7e:ed:8f:60:c6:2f:41:92:b1:
31:e7:92:c0:db:da:d9:6e:8d:eb:ce:69:e1:70:e7:9b:4a:65:
a3:35:3a:2e:e1:ac:f6:ba:6a:69:32:4f:a4:8f:ac:a2:d2:be:
bc:ce:30:7e:c5:b2:6b:99:b2:d1:23:1b:07:c6:6c:11:f9:61:
58:07:60:1f:af:26:f0:51:4c:13:8a:e1:79:08:12:d6:68:c2:
3c:1c:25:15:61:e4:d9:16:54:19:a9:e4:41:70:f0:9f:46:6d:
a3:bf:48:f5:5a:b6:28:e9:d5:73:7f:53:f2:fe:a8:0a:9c:96:
ea:0e:eb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g38Sh41v7q1BBdazOcJ3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjYxMWEwYjdkNDMzNGI3YTIzOTVlOGNjZTdiMGUzYzli
ODM4ZTgwHhcNMjYwNzI3MDAwMDQ3WhcNMjYwNzI4MDAwMDQ3WjAzMTEwLwYDVQQD
EyhkNjQyMDkwOWM4NWMzYjRlZWRiMWI1NGZlMGRhNzY0MGE1YzQ1OTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnYmdClejCgLU+TT8b0sXbBkUMsS
0MWNaWDWW+DqmDn9DwxI9Yzp7ltzp0NBu+F1sod0RAxNP5B5cDWIwZ7wKCcsjT8/
e3wPx/XoeSp3Xqq7lM8VLkj0XIYBzKhIqhsk3C9qH6EhW5j3bvQrD+J0hzVGvTFN
WigotHTqEoufYFHCJyxILKYjQsdhi0PJR1HgPrc+LMYceoA2zfRM6LGOIVlnBfst
iukgiQBu5jeeOIXxWxThIAKieemR5ufO4yodv75msj94q2O0v/PmMKPyZTJfgg0t
6c9CSjWTD0gVVAIdMFtUBFv4+Io+9uMF/0DuzvlzYSHNL5wyY6YrjBV75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZCCQnIXDtO7bG1T+DadkClxFlQMB8GA1UdIwQY
MBaAFIW2EaC31DNLeiOV6MznsOPJuDjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmIt
ODhjYjRlNzEwNmVhLzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmItODhjYjRlNzEwNmVh
LzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ93dUuV
rGpqBY+twQgWuSKH1hzqn+Oj2Fmm5QX+BdzdQwafzup0Ne9+8YPQM6n+LAU0zKn3
7sY2LgE9CvqdqzVe8UYVzz6a4hEMY1fuzUb7aBSPERthOFL5m2hsyIGCZmowTzsU
G4kYqJ1b77Dp4ocgSKnxosVYM5OxtJeN65OtJw+SwxXufu2PYMYvQZKxMeeSwNva
2W6N685p4XDnm0plozU6LuGs9rpqaTJPpI+sotK+vM4wfsWya5my0SMbB8ZsEflh
WAdgH68m8FFME4rheQgS1mjCPBwlFWHk2RZUGankQXDwn0Zto79I9Vq2KOnVc39T
8v6oCpyW6g7rIg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 01:58:10 2026 by rpki-client