Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: ZUa3JFQdLAUQV2mZHPvuuBK5CatuNKVIIlkRPptxyuo=
Subject key identifier: 59:FC:B3:65:59:E4:DC:56:D8:3D:C3:5C:F3:EF:56:C2:E8:F0:A0:0D
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019CE1EBCCC6E9E391B1F9A0CC35CB8945D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0E0F
Signing time: Thu 12 Mar 2026 12:00:52 +0000
Manifest this update: Thu 12 Mar 2026 12:00:52 +0000
Manifest next update: Fri 13 Mar 2026 12:00:52 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: O8f4lpDpKsboBe5aY5fbZnJh/C6e1WUSmDxuxBjtrbI=)
4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
5: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
6: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
7: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:cc:c6:e9:e3:91:b1:f9:a0:cc:35:cb:89:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Mar 12 12:00:52 2026 GMT
Not After : Mar 13 12:00:52 2026 GMT
Subject: CN=59fcb36559e4dc56d83dc35cf3ef56c2e8f0a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:49:ff:67:fe:3a:7c:50:b9:b1:c8:60:81:
11:2f:98:b1:0e:b0:f3:da:05:f7:5c:86:a2:a1:23:
c6:bb:19:c5:aa:14:66:31:01:3e:b9:d7:b0:e8:fb:
07:ca:f0:0b:82:89:7a:03:ea:65:ba:bf:20:fe:81:
a0:d9:c3:00:a6:32:ba:a7:8d:ce:0b:d9:84:ad:01:
b4:7e:77:cf:af:7f:95:1b:3e:a8:62:ef:16:ef:11:
2e:ca:b3:e1:f7:98:ef:d2:82:48:e8:f2:4a:7f:12:
f0:54:6f:17:18:8b:ab:1f:3d:ad:97:6b:ff:53:8d:
47:94:58:d5:0b:54:a8:3c:f2:23:a3:dd:ee:dd:32:
05:df:18:db:94:28:ff:5f:80:0e:ce:e1:05:c3:4a:
1a:8e:fd:a3:70:92:41:be:7c:b3:da:e1:3d:90:67:
ca:42:8e:43:ac:bc:74:64:17:24:46:e0:45:cc:a7:
43:d3:54:76:02:9e:1b:6b:8e:c3:18:24:2e:b7:02:
6b:82:77:c7:bc:1d:50:7f:1e:ab:91:e4:04:70:18:
9b:07:dc:17:6c:e0:8b:50:16:01:78:90:d8:24:90:
82:30:02:4c:72:4f:eb:65:38:ee:e0:fa:c3:26:1c:
5a:6b:03:9e:f0:5e:ea:51:44:c4:6c:3f:d1:cd:7f:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:B3:65:59:E4:DC:56:D8:3D:C3:5C:F3:EF:56:C2:E8:F0:A0:0D
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:61:3c:e5:b5:82:86:5c:e7:4e:cc:09:c1:09:cf:fa:01:
34:83:85:72:c7:93:1d:ae:9c:2f:16:60:af:29:18:49:a9:04:
19:48:79:c8:63:14:7f:3b:8d:7a:c7:4d:2f:27:73:cf:54:9b:
8b:ed:63:a9:bf:b2:39:db:f6:99:94:3b:e3:26:72:18:32:c1:
2c:96:38:9a:bc:24:a2:4b:fd:d7:db:ab:7c:3a:95:40:5a:17:
65:55:82:7d:16:a9:11:2e:32:d0:93:3c:d5:4b:8d:a0:50:dc:
52:8b:c2:86:2d:ab:1d:9e:eb:26:0c:03:60:86:66:a6:ca:07:
1f:0b:87:7d:50:d2:98:9b:d6:27:a6:31:c2:a9:c7:ab:b9:03:
e6:0c:ca:c6:47:7c:ef:fe:cc:35:9f:a2:bf:34:3f:da:0a:57:
8b:bd:b6:54:9e:c6:87:e2:70:5f:90:4f:da:e4:31:8e:e2:10:
db:21:47:6b:6e:4e:a4:de:4d:4a:30:c1:c2:a6:ae:57:8e:6f:
c2:29:4e:2d:73:7e:a5:e2:e9:8a:73:64:e6:83:06:69:e9:af:
06:86:8e:75:0d:4c:fc:de:44:e4:0e:5d:7c:73:a2:c9:5b:ae:
0d:44:0f:31:57:48:b8:75:5d:d1:9d:7f:90:fb:78:7f:46:1e:
19:1b:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:18:14 2026 by rpki-client