Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: cBXCI+Bfkr83qeEfbj7amo/TyL/UZv+Tdj6Zulcto8Y=
Subject key identifier: 59:65:4B:68:71:D0:E9:59:2D:8D:89:99:B1:83:C1:A1:17:5C:A6:7A
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019EB8B3A9123C24B214E76FD8578C1A664B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0F04
Signing time: Thu 11 Jun 2026 22:00:42 +0000
Manifest this update: Thu 11 Jun 2026 22:00:42 +0000
Manifest next update: Fri 12 Jun 2026 22:00:42 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: w6fAGxeu7Oc1aaQ8qZtIMIm3Yl/7sd+8bg0W5XoFStE=)
4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
5: NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa (hash: f6+Uh14KUYXnW7P9IoilQ4rcGTPzTyNRQ6v1ZlIA1QU=)
6: NyVt7USxMdVWumVZIuI6fFoU-nM.roa (hash: JrTDs0Alcy6xh02FG8/osf7yxdPgrgUMAPjrFSJhhv0=)
7: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
8: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
9: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:a9:12:3c:24:b2:14:e7:6f:d8:57:8c:1a:66:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 11 22:00:42 2026 GMT
Not After : Jun 12 22:00:42 2026 GMT
Subject: CN=59654b6871d0e9592d8d8999b183c1a1175ca67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:71:f6:49:0a:4c:4c:99:42:42:6c:b9:af:
6e:0b:0a:fb:eb:fa:7e:55:72:51:2b:04:ee:b2:c0:
69:9f:8d:74:d4:b2:a0:55:c6:ce:e0:25:7c:c3:31:
47:d5:f6:03:e2:25:0b:55:f9:99:b9:96:a8:98:91:
a6:a9:60:2f:d5:e3:f2:6d:65:d9:ec:89:9b:6d:7d:
c3:9c:1b:10:57:54:fb:c3:fb:36:f7:1e:3f:8f:c8:
8c:30:bb:d3:ab:df:09:64:a3:37:a6:9d:7f:1d:8c:
3b:7f:10:0a:e3:ec:6c:a6:8f:33:e3:4d:c2:23:07:
62:26:b9:42:d5:dc:17:57:9e:10:f4:f2:39:82:59:
ca:c6:5c:d4:a8:6a:c8:2e:72:3f:ab:de:07:b9:86:
1a:88:d5:dc:76:02:05:73:90:f3:8c:f0:d9:c9:de:
3d:a4:9f:5b:cc:11:32:7f:8c:bf:49:f8:0b:af:a4:
3f:cf:c0:1b:18:7d:59:5e:c5:c5:7b:39:31:5c:f7:
d5:14:08:d8:b8:d8:0d:ad:34:ad:3f:28:4f:bc:79:
74:eb:00:5a:d2:c8:06:6a:e0:5a:e4:dd:25:54:3e:
74:ea:ee:54:5d:2e:6c:6f:d7:84:44:35:9b:7b:88:
e2:fa:6d:7e:61:5a:c4:24:a9:be:67:f7:d6:78:db:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:4B:68:71:D0:E9:59:2D:8D:89:99:B1:83:C1:A1:17:5C:A6:7A
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:42:66:86:20:08:1a:ee:db:69:a7:44:7f:b8:f9:47:4b:
25:ed:6f:35:b3:64:40:c8:0b:12:a7:e0:a0:9c:3b:89:19:51:
47:9d:a0:12:32:44:4f:29:38:0e:56:b6:7e:20:ec:8c:f0:52:
94:56:42:18:48:37:66:b8:d0:b0:7b:1f:d8:6b:4e:0a:51:af:
11:6e:58:59:81:0f:f8:09:ba:97:ab:0e:68:dd:fe:33:0a:21:
55:ba:36:58:ae:de:78:a5:e6:28:a6:57:b8:8f:65:d8:65:5c:
c2:fd:04:33:7f:85:5a:1b:ae:f6:42:d1:cc:e3:d3:9c:04:9c:
b0:1a:a1:25:62:49:9f:b4:10:39:c3:5e:5b:e6:c5:8a:44:44:
2c:6d:ac:d6:7d:17:bd:82:02:db:75:ce:09:a8:94:aa:75:56:
7b:e7:5d:54:82:c4:11:c7:c8:94:6b:61:fd:61:9e:c2:90:a0:
06:73:e2:9a:a6:0a:3b:af:8a:3d:4b:a6:bb:5e:a3:ef:e6:31:
a8:5e:9f:e8:dc:2d:4a:c0:95:d3:8d:c9:d5:69:30:01:7d:12:
a6:b8:e5:4e:e7:5b:4a:0b:9f:05:19:63:10:36:6e:af:c4:f7:
0b:e7:4c:0f:2d:63:c4:6f:d2:1c:a6:ac:31:92:cc:18:91:06:
f8:26:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:52:54 2026 by rpki-client