Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: 4I2JsW4oZRIv1tUEHIlEGIBPYjRpSt36PdZJ2CCW+8E=
Subject key identifier: 1B:6D:8B:3B:72:E4:1D:5C:01:33:9E:73:7D:F2:67:0D:E8:AA:FF:F3
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 01A06DCBE5B45B28ABF0CA748799BCD6338F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 0231
Signing time: Fri 04 Sep 2026 19:01:14 +0000
Manifest this update: Fri 04 Sep 2026 19:01:14 +0000
Manifest next update: Sat 05 Sep 2026 19:01:14 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: PvvbVb6cvkwspiD1UBOTcJCPi57lzFFpnXeU5aEOp0c=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:e5:b4:5b:28:ab:f0:ca:74:87:99:bc:d6:33:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Sep 4 19:01:14 2026 GMT
Not After : Sep 5 19:01:14 2026 GMT
Subject: CN=1b6d8b3b72e41d5c01339e737df2670de8aafff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:ed:13:53:d9:d6:09:f0:5b:97:fe:7f:40:
10:a4:71:a8:a2:44:78:10:39:9d:6b:c9:54:49:3b:
2c:ad:5d:a8:37:f6:af:da:ae:a8:d4:93:23:c2:14:
9b:06:7e:60:d3:d6:64:fd:3a:2c:5b:9a:f2:99:84:
25:59:92:c2:42:dc:33:1b:9b:96:ee:bf:62:b1:22:
fc:37:98:52:8b:92:a1:3e:b2:6d:88:6d:9d:4b:38:
d1:59:d6:5c:d0:e1:d8:23:43:4b:e7:f8:12:ca:76:
2f:b1:41:20:26:72:04:e4:99:9c:6a:56:6f:d7:d2:
30:15:39:68:e7:51:2a:a5:c8:f4:1b:97:4f:e7:f9:
93:bc:7e:fb:d3:ed:fa:f3:78:65:13:38:d6:5b:a4:
70:d2:d1:ea:c9:a5:01:04:cb:2f:20:aa:14:7a:15:
d9:e6:33:c3:2f:3d:c6:96:eb:ea:72:26:12:54:14:
c3:96:b4:50:9a:d9:fe:eb:8e:dd:99:8e:0b:69:79:
f4:89:82:50:74:d0:64:b4:f2:dc:26:f3:37:eb:76:
22:27:98:9e:50:e3:cc:c4:2b:77:47:6b:87:b2:b0:
cf:36:f5:08:25:a2:67:00:fc:f4:28:b5:98:73:f9:
be:ac:c4:e2:fc:53:46:7c:c8:e3:56:13:60:58:66:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:8B:3B:72:E4:1D:5C:01:33:9E:73:7D:F2:67:0D:E8:AA:FF:F3
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f4:02:d7:98:ac:04:3e:ca:b8:a4:bf:74:b3:31:42:d8:2e:
b7:6b:4a:7a:c2:20:73:e6:1f:d8:c6:bd:21:72:0d:cc:70:f7:
cd:33:31:1c:97:97:87:06:01:aa:ab:a1:30:21:55:1c:38:2c:
ce:f4:13:81:30:49:48:98:bf:fc:6c:94:cf:06:e2:52:a1:01:
fc:93:b6:5b:05:29:05:2f:ce:b8:96:6d:1f:7c:50:6a:03:bb:
05:1d:97:ff:c5:f8:97:3a:d7:8f:12:e5:b6:a1:7e:fb:de:ee:
91:60:f1:d2:09:47:05:14:93:47:b4:de:66:13:92:28:3f:4c:
3a:b5:06:f9:a0:7e:ee:7d:9a:11:5a:23:af:26:c1:b8:8d:c0:
a0:94:4f:28:1a:86:7d:df:bb:cc:40:d9:1a:a8:0a:de:f7:74:
76:3d:88:d0:65:76:57:2f:db:d1:68:17:c0:29:77:d7:cd:01:
af:4f:23:80:6a:21:f6:88:8c:8e:dd:09:fc:61:2c:89:cd:89:
42:55:40:35:03:96:19:f9:ad:60:c8:68:a0:bc:88:d9:37:5b:
fc:13:1b:07:49:25:3b:2c:a4:5d:d9:f0:f4:3a:1d:9c:77:9d:
e7:07:0e:79:92:d7:b3:3b:d9:50:c1:43:cf:8b:49:e5:70:e8:
0a:4c:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:33 2026 by rpki-client