Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: Myq9WjZY7yqy23u0dLTzxPjtF4sQtOnJdF7p+8hUe6I=
Subject key identifier: E6:7C:29:DF:2B:40:F6:A5:83:AC:61:5D:E2:88:CD:98:B8:4F:E3:61
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 01A17093763002940DBB3771E23DFAD31715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 02B7
Signing time: Sun 25 Oct 2026 01:01:14 +0000
Manifest this update: Sun 25 Oct 2026 01:01:14 +0000
Manifest next update: Mon 26 Oct 2026 01:01:14 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: WlJyQ81U+h+4c4N/XSki2c98VmUNFKpAp1xbRzfRS4w=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:93:76:30:02:94:0d:bb:37:71:e2:3d:fa:d3:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Oct 25 01:01:14 2026 GMT
Not After : Oct 26 01:01:14 2026 GMT
Subject: CN=e67c29df2b40f6a583ac615de288cd98b84fe361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:c0:1c:ca:79:03:e1:f5:53:e2:47:c4:aa:
98:f3:78:9a:cf:c8:9f:fa:a2:48:01:9b:b4:44:c4:
94:b6:8f:51:c6:8c:14:48:66:2a:a9:47:2c:dc:ab:
e0:88:24:e8:61:53:9e:58:ec:91:ef:6a:ea:a2:cf:
54:0d:14:9f:9f:5d:a1:eb:b1:fc:30:e0:96:4e:0d:
a8:7a:18:4c:42:85:c1:f0:32:94:5e:3a:fc:d3:d1:
d8:36:7e:cc:84:22:a9:03:8b:30:c5:f1:59:22:2a:
55:b9:c4:64:f3:ae:ea:0a:84:8f:95:43:18:18:f5:
2e:3e:08:ba:35:06:8f:3c:d8:1b:14:7f:c9:cc:fa:
76:4b:94:c7:87:54:63:2a:4d:56:ad:60:ce:b3:5b:
cb:86:34:dd:68:2c:61:34:2a:49:79:ef:b9:b7:aa:
ae:01:51:25:4e:36:71:43:dd:40:cb:71:61:c2:f4:
0f:e2:01:ee:c7:5e:2f:b8:32:ca:15:39:02:f1:4d:
ce:9e:eb:39:c1:22:df:12:fb:a7:6b:fc:a1:1c:ab:
e6:46:92:b3:71:9a:51:5b:49:a6:53:f9:37:5e:f6:
e5:f4:ae:70:a0:c1:bf:7f:6f:a1:88:23:56:e3:1e:
97:b3:8c:c4:0b:12:3e:47:49:94:16:26:c8:91:04:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:29:DF:2B:40:F6:A5:83:AC:61:5D:E2:88:CD:98:B8:4F:E3:61
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ef:48:6d:06:14:9f:dd:25:e0:47:be:c7:11:6f:01:ef:95:
dc:3b:6a:d0:7f:dd:bc:cf:4c:36:5c:be:81:31:bf:84:0f:fc:
9f:ce:da:52:ce:d2:a8:4d:64:01:65:ad:b6:a9:44:20:cc:22:
10:6c:89:62:73:0a:4a:fc:55:75:e3:11:44:2a:45:19:16:4f:
a1:68:d8:3b:3e:e4:a0:e4:33:a4:95:90:93:7e:18:cd:4e:55:
ad:56:3a:02:65:a7:51:3b:77:3e:e5:22:ff:9c:42:ca:60:0f:
6d:5c:52:a8:7c:1b:7f:ba:0b:87:c7:70:b1:b6:ce:38:d4:6d:
3b:39:f2:c4:cc:79:e2:ea:7e:c7:5d:01:b6:46:f3:e9:67:e7:
9b:38:49:f4:4f:f1:fb:ac:02:15:91:24:7c:3f:9a:88:f1:34:
71:5b:1a:93:f1:e6:a6:f0:4f:e3:48:45:12:e3:39:d8:1b:70:
69:d6:f5:88:52:50:bf:72:aa:3c:97:75:11:d2:4d:af:78:5b:
82:c1:31:3c:43:3d:c3:6f:4c:95:47:94:f8:65:4b:2a:55:ea:
5d:30:0b:7c:bd:b1:72:72:6f:bd:f2:7f:11:00:62:ea:0a:c4:
6a:65:4f:26:43:5d:86:b3:cf:a5:67:e5:d0:eb:b3:d6:f2:45:
74:31:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:52:02 2026 by rpki-client