Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: 8+h4CGjjLuoEpCQAvZateCQvaTZj3QnenBainIraaIU=
Subject key identifier: 78:AD:03:31:D4:79:EE:F5:50:A6:C1:82:60:4B:3D:41:99:9B:7C:28
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 019F82301B0A69706671CBE4BEA62E67C7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 01B7
Signing time: Tue 21 Jul 2026 01:00:18 +0000
Manifest this update: Tue 21 Jul 2026 01:00:18 +0000
Manifest next update: Wed 22 Jul 2026 01:00:18 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: n5CcsFbHYrbN9Zopqq87eaDXLpngIEAKvOx749MDjOk=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:1b:0a:69:70:66:71:cb:e4:be:a6:2e:67:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Jul 21 01:00:18 2026 GMT
Not After : Jul 22 01:00:18 2026 GMT
Subject: CN=78ad0331d479eef550a6c182604b3d41999b7c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:51:d7:65:7c:cc:a3:b2:2a:fd:36:87:c3:
93:49:19:88:7b:82:d2:3c:0e:99:27:0a:bf:30:29:
74:0f:9b:5b:b7:73:ac:5f:10:0c:d2:ac:1d:2a:10:
d4:c6:ad:32:5e:03:eb:95:da:a0:71:cd:ed:3a:ca:
f7:ce:53:69:a2:ad:1b:58:b1:1e:34:1d:2d:ea:9c:
bd:b5:06:62:c4:46:a9:c6:34:a2:c7:ae:71:d0:22:
39:54:30:29:e2:39:ab:3b:65:59:76:fd:31:6f:2c:
f3:5c:78:99:b6:9b:19:f1:f1:97:c4:c8:67:51:61:
46:76:d5:9f:06:74:a6:af:f4:31:70:ae:5d:dd:b3:
1a:8a:ca:e0:2b:c3:30:8d:e8:21:a5:4a:7d:89:63:
50:6d:32:08:0c:1c:60:56:9f:a7:7b:82:aa:05:06:
ae:b1:f7:fe:0e:f2:94:44:c2:ff:d8:3f:0f:95:66:
5b:3e:f3:69:a0:24:5e:7a:5e:5c:78:71:e1:a1:51:
0f:87:53:2d:f8:e0:7c:9e:0d:86:53:96:b6:40:d4:
a2:20:9b:eb:04:f1:19:b2:81:0f:91:34:f0:4f:17:
b8:65:6c:30:e0:3f:06:94:55:f0:96:9f:5f:c9:70:
29:6a:ed:c2:51:30:0a:c2:23:43:5c:29:ad:32:04:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:03:31:D4:79:EE:F5:50:A6:C1:82:60:4B:3D:41:99:9B:7C:28
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7f:c0:e6:27:b3:ac:e1:b4:e6:c0:f2:a9:03:2f:6d:65:8f:
45:32:24:3c:72:ef:01:b1:37:02:28:60:ec:e8:f5:1e:7a:76:
9c:a8:a4:f0:19:bc:7b:16:4e:16:12:ba:7a:53:a7:6c:72:ed:
48:2e:8b:f4:9c:a0:2b:68:25:6f:53:64:16:78:f3:2f:a7:5d:
80:0c:e2:ba:72:fd:60:d0:23:2c:1e:03:26:3a:fa:a3:7c:26:
80:2e:f0:ef:48:2b:e6:b6:0a:b7:a9:e9:84:c2:79:20:53:63:
d0:92:d2:6b:97:9c:5a:ad:2b:d8:b2:1a:e6:65:13:e8:c2:3e:
55:65:d1:cd:78:77:7c:84:91:d3:24:6e:96:c8:49:ef:26:44:
61:7f:fa:2e:c6:22:63:08:6a:58:5a:b9:59:98:bc:89:b5:89:
c9:d2:65:c6:87:35:3a:9b:8a:69:4d:0f:bf:d1:ae:58:04:4b:
c9:20:b2:b3:5c:d5:80:ec:30:c4:31:f7:8f:fc:d4:a6:30:af:
32:d5:79:be:7d:e8:fc:de:9f:6e:b3:f8:29:9f:03:43:a9:42:
c8:1c:84:e9:93:0d:60:17:cd:f4:83:5c:58:cb:2a:74:a9:6d:
d2:09:78:2f:57:ea:58:d9:02:33:6c:c1:eb:93:74:a4:fe:0f:
ba:58:e6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CMBsKaXBmccvkvqYuZ8e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjRmODc1ZTk5ZDM1YjE0MjA0NjkzZWVlMTFjYTliNmFh
ZmU0YWUwHhcNMjYwNzIxMDEwMDE4WhcNMjYwNzIyMDEwMDE4WjAzMTEwLwYDVQQD
Eyg3OGFkMDMzMWQ0NzllZWY1NTBhNmMxODI2MDRiM2Q0MTk5OWI3YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WdR12V8zKOyKv02h8OTSRmIe4LS
PA6ZJwq/MCl0D5tbt3OsXxAM0qwdKhDUxq0yXgPrldqgcc3tOsr3zlNpoq0bWLEe
NB0t6py9tQZixEapxjSix65x0CI5VDAp4jmrO2VZdv0xbyzzXHiZtpsZ8fGXxMhn
UWFGdtWfBnSmr/QxcK5d3bMaisrgK8MwjeghpUp9iWNQbTIIDBxgVp+ne4KqBQau
sff+DvKURML/2D8PlWZbPvNpoCReel5ceHHhoVEPh1Mt+OB8ng2GU5a2QNSiIJvr
BPEZsoEPkTTwTxe4ZWww4D8GlFXwlp9fyXApau3CUTAKwiNDXCmtMgTlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHitAzHUee71UKbBgmBLPUGZm3woMB8GA1UdIwQY
MBaAFIW0+HXpnTWxQgRpPu4Ryptqr+SuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMt
OTM4YTczYjZmN2MyLzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMtOTM4YTczYjZmN2My
LzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX/A5iez
rOG05sDyqQMvbWWPRTIkPHLvAbE3Aihg7Oj1Hnp2nKik8Bm8exZOFhK6elOnbHLt
SC6L9JygK2glb1NkFnjzL6ddgAziunL9YNAjLB4DJjr6o3wmgC7w70gr5rYKt6np
hMJ5IFNj0JLSa5ecWq0r2LIa5mUT6MI+VWXRzXh3fISR0yRulshJ7yZEYX/6LsYi
YwhqWFq5WZi8ibWJydJlxoc1OpuKaU0Pv9GuWARLySCys1zVgOwwxDH3j/zUpjCv
MtV5vn3o/N6fbrP4KZ8DQ6lCyByE6ZMNYBfN9INcWMsqdKlt0gl4L1fqWNkCM2zB
65N0pP4PuljmfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:16:19 2026 by rpki-client