Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: dv5hrb4/89dq6g8P1ZJzTjrjzOlR6fhai/gqo/0WATA=
Subject key identifier: A6:DC:25:08:03:82:4B:DB:44:59:67:03:F6:B2:30:D4:A1:A5:74:66
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01A08C4409662F232D3B1C088A319797510D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0FF8
Signing time: Thu 10 Sep 2026 17:01:04 +0000
Manifest this update: Thu 10 Sep 2026 17:01:04 +0000
Manifest next update: Fri 11 Sep 2026 17:01:04 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: kK3b0PQ1/h6fvA+hz0T8X4sFsYdDBZ1H1hDHLT06siw=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:09:66:2f:23:2d:3b:1c:08:8a:31:97:97:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Sep 10 17:01:04 2026 GMT
Not After : Sep 11 17:01:04 2026 GMT
Subject: CN=a6dc250803824bdb44596703f6b230d4a1a57466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:b3:3d:24:ec:2d:6b:b7:76:5d:6d:74:d4:
bd:d3:db:40:49:cf:0d:c7:54:b9:18:8f:10:86:54:
67:ca:32:7b:81:57:08:00:8c:9d:58:3a:7d:de:8a:
63:8a:7a:b9:49:16:2a:7c:66:1c:2a:dc:e6:09:bb:
72:36:bf:d6:03:1b:59:f3:f0:57:eb:6d:e2:f6:88:
9a:7b:54:23:b2:37:35:0b:c1:09:12:b1:e5:8f:64:
59:a0:30:6f:ef:3b:40:4c:ee:88:52:16:8a:cb:12:
0e:c4:69:aa:7e:63:26:94:bc:29:75:46:97:83:b4:
3a:70:c1:42:60:60:a4:9a:67:4e:27:91:9e:22:1f:
8a:82:7b:7c:88:5f:a3:ac:87:c9:a1:12:70:82:a3:
af:0c:61:65:3f:60:2b:f7:7e:0e:88:09:17:1f:82:
6c:1d:f4:ea:56:88:73:8c:1d:ba:30:c3:d1:38:ae:
41:f2:d4:73:43:19:78:17:ab:a6:f2:5d:8f:a4:81:
a5:df:06:fb:6c:e9:ee:4d:50:7f:48:c5:a2:b5:6e:
7f:cb:76:91:89:f0:c1:6c:3a:98:25:a4:9d:8f:2a:
cf:42:2e:d7:ba:f5:71:ef:61:d0:36:9a:b6:67:bb:
8a:25:8c:1a:4f:72:0d:18:f8:3e:02:09:c4:2b:14:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:25:08:03:82:4B:DB:44:59:67:03:F6:B2:30:D4:A1:A5:74:66
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f2:b2:6b:70:17:18:84:e7:47:0b:8f:37:4c:e8:17:b7:2d:
93:b9:44:6e:5c:b5:c3:26:1d:5b:c9:43:45:3b:8d:db:f8:8c:
2e:ee:8d:06:e5:08:06:7f:16:d2:7d:03:76:33:00:7c:5c:a3:
44:6a:da:f8:24:5a:b0:b3:0f:f3:91:44:6b:ed:39:00:40:86:
df:ba:b3:56:99:5d:9e:f6:fd:c8:f8:61:ee:d0:c0:bb:1b:4f:
5d:79:a5:6d:92:61:18:82:97:6e:49:b4:d4:82:db:4b:f0:62:
49:96:0b:85:df:33:df:d9:d9:15:aa:b7:d9:14:55:0c:5a:ef:
71:3b:a1:a9:4b:b1:fa:7e:2c:4c:61:4a:16:24:33:7a:d1:ff:
6b:f1:85:cc:30:43:bf:f3:0a:ae:ea:85:09:6b:46:40:f3:12:
71:4d:fd:50:f0:f1:d9:6e:b0:98:02:0a:c8:07:f1:ac:1a:e8:
64:6f:46:58:16:a9:2e:3c:14:e7:87:54:85:ab:a5:32:93:32:
56:13:22:4f:88:6c:53:d8:11:dc:63:80:89:a2:7c:ae:79:a0:
1a:73:50:52:61:2f:03:23:b7:16:9c:7e:6b:6f:d1:6d:fe:d5:
4a:8c:91:5e:f4:a7:53:65:22:18:08:4f:5d:11:2a:4f:eb:ee:
62:f5:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:16 2026 by rpki-client