Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: iURDShCtnYUO/fx9cJYeQRBeAMK5ohZscPyVLCWnvb0=
Subject key identifier: 3A:DA:3D:1C:54:79:68:01:F1:3B:5E:25:82:6F:7F:1E:3A:78:7D:27
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 019F9625C5DA1B1965B85F31CBDE49504A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 12D7
Signing time: Fri 24 Jul 2026 22:01:25 +0000
Manifest this update: Fri 24 Jul 2026 22:01:25 +0000
Manifest next update: Sat 25 Jul 2026 22:01:25 +0000
Files and hashes: 1: Hh7KFktywM-1-107eqrB5yEmn-8.roa (hash: QGn4U4QC+cKt83SkTXHhg4z++P/aykfUDnj2eiXvebY=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: wYOLjB/LUijXwp/qJdjX4sErwm74XIKAlzbHSGjvoDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:c5:da:1b:19:65:b8:5f:31:cb:de:49:50:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Jul 24 22:01:25 2026 GMT
Not After : Jul 25 22:01:25 2026 GMT
Subject: CN=3ada3d1c54796801f13b5e25826f7f1e3a787d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:45:73:55:29:8a:f8:47:33:dd:a4:08:52:
9a:2e:b6:fd:6f:40:e6:4f:76:58:ba:f9:07:d5:19:
99:65:94:12:0c:79:98:21:3b:ce:82:87:9f:c0:db:
5e:19:ed:51:8a:ca:99:9d:20:35:6a:f3:38:31:bc:
df:2e:73:a6:db:54:9b:fb:93:00:bf:ed:b6:85:e9:
11:df:e6:0e:07:2f:78:88:50:f3:db:e0:9c:e2:98:
84:06:7f:ea:3f:93:ee:e2:0e:b1:09:a2:02:23:de:
23:32:b3:e4:5c:c3:36:5f:b2:51:6e:e0:bd:36:23:
72:34:ab:44:6f:bf:a8:85:d9:56:15:76:25:ff:b4:
cb:5d:cd:44:1c:1e:99:53:7c:a7:cb:7e:e4:e2:b3:
93:d3:28:ae:be:85:8c:c0:05:31:5b:2d:7d:d7:c2:
5c:a0:2e:3d:4f:28:53:f5:52:36:8e:a4:dc:17:43:
fe:40:07:fb:9c:ab:de:98:f4:bc:a7:fa:49:01:d5:
aa:59:72:4d:19:8f:4c:ce:ab:30:52:50:99:a5:72:
fe:b3:fe:eb:12:e9:f8:d7:3b:3c:10:24:a1:73:6e:
42:18:38:b5:4e:b5:c5:a5:b2:d4:e1:6c:c0:1b:3d:
0c:15:a3:61:1e:00:c6:0d:59:a1:ec:3f:4d:87:18:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:3D:1C:54:79:68:01:F1:3B:5E:25:82:6F:7F:1E:3A:78:7D:27
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2c:8f:c1:20:12:5e:26:40:fc:f8:fb:55:7a:11:ee:30:d6:
0d:dc:b7:93:2f:63:87:4f:b1:81:83:fe:5a:a8:f1:12:b5:58:
33:58:eb:d4:9b:fe:94:eb:ad:c9:48:de:ef:87:82:44:c1:33:
7f:76:71:8d:e5:3a:d1:85:94:06:b5:61:14:88:73:0c:d2:52:
91:40:9c:21:12:75:f9:cd:dc:56:ee:9a:d7:41:e9:d3:19:24:
e5:49:9b:75:d8:a1:9a:8b:d7:21:98:65:0f:c9:66:0c:c1:68:
f9:8f:14:a9:1f:0e:f9:30:8f:0d:53:fe:a7:71:9b:d5:fa:40:
bf:9f:1c:59:7b:4b:52:52:4d:12:3f:3d:a2:2f:30:b7:4a:fd:
01:e5:96:7f:74:66:03:35:9d:8c:b8:45:5a:bb:77:38:ce:16:
24:cf:21:61:1e:c1:06:1e:bd:38:a7:3d:b5:82:e8:79:86:7e:
02:b2:ed:fb:9d:ad:7d:75:14:43:d7:37:2e:c4:aa:b6:e5:d2:
15:90:d5:49:60:a1:1b:47:55:62:b7:b6:9e:87:d9:85:4f:3d:
b5:e3:1c:10:bc:56:4d:eb:e4:d4:d5:65:93:99:ee:39:ee:bc:
d5:c2:6b:d3:87:7a:44:06:f4:e8:ba:c3:f8:34:61:cd:f5:20:
0b:53:a6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJcXaGxlluF8xy95JUEqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTE1NjdiMTY4MTgzM2M5NDRhNWYyNjQwYTllMDNiZThl
ZjBiZjQwHhcNMjYwNzI0MjIwMTI1WhcNMjYwNzI1MjIwMTI1WjAzMTEwLwYDVQQD
EygzYWRhM2QxYzU0Nzk2ODAxZjEzYjVlMjU4MjZmN2YxZTNhNzg3ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArupFc1UpivhHM92kCFKaLrb9b0Dm
T3ZYuvkH1RmZZZQSDHmYITvOgoefwNteGe1RisqZnSA1avM4MbzfLnOm21Sb+5MA
v+22hekR3+YOBy94iFDz2+Cc4piEBn/qP5Pu4g6xCaICI94jMrPkXMM2X7JRbuC9
NiNyNKtEb7+ohdlWFXYl/7TLXc1EHB6ZU3yny37k4rOT0yiuvoWMwAUxWy1918Jc
oC49TyhT9VI2jqTcF0P+QAf7nKvemPS8p/pJAdWqWXJNGY9MzqswUlCZpXL+s/7r
Eun41zs8ECShc25CGDi1TrXFpbLU4WzAGz0MFaNhHgDGDVmh7D9NhxjVSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDraPRxUeWgB8TteJYJvfx46eH0nMB8GA1UdIwQY
MBaAFIXhVnsWgYM8lEpfJkCp4Dvo7wv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEt
NTNhOTk4ZGU2M2UzLzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEtNTNhOTk4ZGU2M2Uz
LzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCyPwSAS
XiZA/Pj7VXoR7jDWDdy3ky9jh0+xgYP+WqjxErVYM1jr1Jv+lOutyUje74eCRMEz
f3ZxjeU60YWUBrVhFIhzDNJSkUCcIRJ1+c3cVu6a10Hp0xkk5UmbddihmovXIZhl
D8lmDMFo+Y8UqR8O+TCPDVP+p3Gb1fpAv58cWXtLUlJNEj89oi8wt0r9AeWWf3Rm
AzWdjLhFWrt3OM4WJM8hYR7BBh69OKc9tYLoeYZ+ArLt+52tfXUUQ9c3LsSqtuXS
FZDVSWChG0dVYre2nofZhU89teMcELxWTevk1NVlk5nuOe681cJr04d6RAb06LrD
+DRhzfUgC1Om0A==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:59 2026 by rpki-client