Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: 3Iy5tPJ0igZP2FMlednVncR2oQK+5IpK8MHJ8jW4hxQ=
Subject key identifier: FD:A1:E9:45:1E:4F:F7:2B:9F:E0:92:12:12:F1:8C:31:54:22:DC:67
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019FA0A8B8AB62269456C7FAC3EC54890C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0F7E
Signing time: Sun 26 Jul 2026 23:00:39 +0000
Manifest this update: Sun 26 Jul 2026 23:00:39 +0000
Manifest next update: Mon 27 Jul 2026 23:00:39 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: j0MfGFYUuGZnhyQosy7NAIw1YxIz2X7+2Zfw2wp2+zI=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:b8:ab:62:26:94:56:c7:fa:c3:ec:54:89:0c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jul 26 23:00:39 2026 GMT
Not After : Jul 27 23:00:39 2026 GMT
Subject: CN=fda1e9451e4ff72b9fe0921212f18c315422dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:48:13:7f:67:16:c7:f5:95:a5:1e:09:03:
52:55:24:53:61:a5:2b:75:b4:2b:b0:24:aa:86:51:
de:78:f8:38:43:01:dd:61:2d:d4:0e:1c:d6:48:1e:
c2:24:f7:c5:10:ae:94:32:27:1f:9f:25:0b:39:53:
4d:1a:22:89:46:da:0f:6d:79:cb:26:e3:16:15:e4:
75:a1:27:89:3a:28:b1:35:77:71:84:f3:c6:d9:cd:
52:1e:5a:f2:62:3a:d3:4f:f4:ef:aa:ee:dd:22:b6:
a4:3e:a6:37:55:b4:97:ce:dd:a8:41:53:1a:1a:33:
71:42:e5:d3:60:95:92:38:5e:92:59:fe:ec:3e:f8:
bd:6b:6f:f9:83:31:d7:cd:a6:0e:fb:ca:4a:f1:90:
b0:a9:90:a2:9e:7e:62:f1:c7:0b:58:32:db:61:7b:
fc:fd:4a:9d:fd:3d:11:51:07:08:93:24:83:ff:85:
7c:ba:14:b1:d8:e5:e3:c1:4c:c4:4f:ad:f9:bf:f3:
1c:17:ff:dc:ca:d5:cc:91:d5:bd:e5:78:94:ee:85:
fd:57:74:02:8a:49:6d:2e:e8:e5:ff:ce:42:33:aa:
67:b8:91:9c:9f:d1:74:a7:48:71:e3:f0:d8:ef:88:
c2:ad:7e:6c:b3:fa:6d:5a:45:33:34:b6:fe:f9:3f:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:E9:45:1E:4F:F7:2B:9F:E0:92:12:12:F1:8C:31:54:22:DC:67
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3b:a8:32:54:a0:90:3e:eb:06:0e:2b:1e:6d:92:46:d2:15:
6a:95:31:f9:50:da:b1:f7:87:5c:a0:1e:46:9d:e6:2f:6f:79:
d9:3f:5e:49:d3:d9:2d:ef:c9:c3:ef:d1:b9:47:5b:6d:aa:18:
c8:79:33:8b:89:5f:fd:69:e5:55:30:05:6a:34:1b:e2:0e:e1:
4d:f5:53:23:00:8f:9d:43:02:f8:17:56:a5:a9:e6:1a:e9:ff:
38:ab:8a:e9:79:5d:4a:c4:48:6a:cf:ad:1c:9b:49:ad:f2:8f:
84:7c:2d:80:14:96:b2:4b:04:a4:ff:e1:ba:3b:8a:a9:a4:a2:
43:97:88:96:05:13:bc:67:61:ea:01:ab:80:37:b3:17:06:a5:
85:33:f5:b1:7c:fd:61:06:45:f4:8a:2d:2c:b7:02:b9:36:08:
23:71:6d:7e:58:11:2e:01:ec:c5:be:d8:70:e6:29:76:a3:6a:
0d:17:06:73:1d:75:cf:7d:cf:97:0b:84:45:33:8b:46:4b:12:
1c:5e:52:27:fd:90:01:95:ce:ed:7f:4e:bb:48:28:6b:27:a5:
a5:16:e9:ee:c4:87:de:16:d3:39:7c:ac:3a:4e:10:c4:82:2d:
25:90:c3:52:5d:bb:c1:42:bc:ac:f7:1e:65:0a:14:0f:9d:8f:
f8:a7:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:18 2026 by rpki-client