Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: zGlnWYUVv+DPkVl+gpzUZbsSsH+qmuqNVTGoj9QTXfc=
Subject key identifier: 60:AC:3E:52:A4:C3:DF:BE:80:D1:3E:46:43:D0:D0:8C:AD:58:00:22
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019DCD87557F66F739B564C8EC2E236F60FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0E89
Signing time: Mon 27 Apr 2026 06:01:31 +0000
Manifest this update: Mon 27 Apr 2026 06:01:31 +0000
Manifest next update: Tue 28 Apr 2026 06:01:31 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: ieYm0yp5m8/zqp3+jvTUKG/WTob5BGnvCDCs6Waq0f8=)
4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
5: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
6: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
7: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:55:7f:66:f7:39:b5:64:c8:ec:2e:23:6f:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Apr 27 06:01:31 2026 GMT
Not After : Apr 28 06:01:31 2026 GMT
Subject: CN=60ac3e52a4c3dfbe80d13e4643d0d08cad580022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:c8:1f:a2:33:45:01:4f:6d:31:af:c9:d3:
ba:b7:d9:0b:10:db:ab:5b:2c:97:55:58:29:cb:0c:
f4:ab:bc:dc:8a:74:92:5b:9f:40:6c:49:a3:6b:84:
87:de:4b:80:3d:b2:8c:b6:89:d8:9b:19:1c:e0:a6:
e2:a5:61:86:30:d8:6c:2b:40:62:66:7a:73:a2:02:
0b:d7:c2:13:b6:47:29:44:1f:15:f8:df:b8:7a:5c:
64:03:02:c4:45:27:1d:60:c5:3e:4c:a4:77:44:d0:
e8:39:fc:f0:dd:ab:9f:64:03:f2:0e:56:c1:18:f5:
04:ca:70:fa:72:71:f0:46:89:c9:91:9a:67:bc:3d:
5a:1d:32:20:0c:8e:82:3c:a8:ad:f2:02:b2:f9:28:
86:b3:19:e0:ed:49:54:03:d9:5d:6d:61:e3:67:ed:
cc:13:11:29:44:4f:f2:d4:65:39:4b:0c:5e:98:7c:
65:53:19:86:c9:de:e3:74:b2:ae:04:b0:44:97:da:
bc:1a:9e:ea:5d:16:ff:80:8f:6c:6a:48:7d:a3:11:
4e:43:4f:8e:ff:93:63:da:c7:d4:f8:e5:e7:3b:02:
17:64:93:f5:72:d3:71:ce:54:4c:5c:8d:da:f5:c1:
b5:61:dc:37:6a:ab:72:a3:a9:7f:ab:60:6e:4d:f2:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:3E:52:A4:C3:DF:BE:80:D1:3E:46:43:D0:D0:8C:AD:58:00:22
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:94:fc:ca:b9:e4:fe:3f:6f:b9:79:61:13:a3:89:a9:c7:
c5:2d:ed:6f:21:90:2c:dd:e3:0b:6e:f4:43:72:54:34:8e:ab:
4d:45:3b:b0:82:dd:b5:05:1f:4e:42:45:2b:31:54:76:ee:5b:
a2:fb:d1:3c:9b:89:12:0f:03:3a:85:e2:f1:2d:dd:f8:94:7b:
2c:21:a3:d1:32:d8:aa:d1:76:b6:30:eb:ad:51:ae:fc:45:c8:
5b:5a:83:c2:83:3c:3b:0f:b0:d4:6b:64:95:4f:c4:28:d6:c9:
4d:09:03:53:c1:b5:f6:e4:5b:a0:f2:d8:29:53:6d:06:9b:c0:
5b:ea:f0:de:db:02:46:85:a4:05:8b:ca:d8:5b:9b:4b:a5:47:
09:ec:6d:eb:c3:bf:26:5b:d6:68:7c:a2:3d:d7:e5:36:b5:d8:
dd:d3:23:58:87:e7:0c:99:3e:ff:c0:1f:cc:04:1a:09:17:e1:
7d:12:17:53:18:85:e8:0d:e4:ed:9d:ab:36:c1:0d:c9:55:0b:
59:7a:f3:0c:92:ca:0c:7e:16:74:01:5c:a1:74:91:5c:1f:d9:
dd:63:0d:14:40:63:ee:b1:bf:e3:bc:bf:a7:53:23:ad:f8:db:
26:0c:30:68:4e:cf:25:f1:08:2c:62:83:d9:15:1b:e8:aa:c0:
f2:2d:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:52 2026 by rpki-client