Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft (raw, json)
Hash identifier: xfEDdMcpsWbF5KhUye1L6Pq8nUQgOICwqAMipATjRG0=
Subject key identifier: 84:A2:09:82:35:2B:3E:F9:6C:FD:29:E3:B4:FC:F1:05:8D:DF:2D:20
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 019F935BC0D205EA24CF03EF801E69EE60B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:31 +0000
Manifest this update: Fri 24 Jul 2026 09:01:31 +0000
Manifest next update: Sat 25 Jul 2026 09:01:31 +0000
Files and hashes: 1: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (hash: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=)
2: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl (hash: rjxCzFxvSTc/kUu2LbH5Eml7WMsJFDtt46adhOLP0T4=)
3: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (hash: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c0:d2:05:ea:24:cf:03:ef:80:1e:69:ee:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Jul 24 09:01:31 2026 GMT
Not After : Jul 25 09:01:31 2026 GMT
Subject: CN=84a20982352b3ef96cfd29e3b4fcf1058ddf2d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:c1:39:83:4d:7e:34:13:5a:3f:79:b0:bc:
6d:f5:ed:d9:14:cc:4b:60:ff:83:bc:eb:93:d9:50:
1a:08:63:61:96:e3:23:09:6d:14:1c:91:b4:fe:f3:
db:6c:38:a5:58:c7:75:2c:48:f9:91:33:8b:d9:f2:
f0:68:62:a9:15:04:f4:af:47:f0:d1:b1:2c:2a:2f:
a0:4b:ec:89:fc:e1:7c:bd:b1:06:cc:47:d6:71:76:
9c:84:89:d4:3c:9c:44:91:58:f6:c1:ec:d6:f9:e8:
62:4c:47:7d:b6:fa:24:8c:d5:37:85:19:34:7d:c5:
81:cc:b3:00:1e:f5:27:a0:0f:8c:50:0d:39:2b:64:
b3:01:9a:2d:dd:12:eb:ae:c5:4d:98:3e:ce:8c:6a:
cf:e8:e9:41:cd:82:1b:4e:17:27:88:ba:f4:0b:e9:
f3:29:78:f5:11:24:aa:cb:e1:b6:7c:ff:95:6d:6b:
f1:99:fe:d6:3f:63:0b:03:3a:69:53:fc:dd:09:36:
e2:69:76:c2:57:90:61:67:dd:9a:e7:3b:50:cd:cc:
17:6a:b8:81:67:67:3c:3b:df:f9:94:02:7c:f1:e9:
fb:73:c6:3e:4d:a4:14:a6:9c:4a:b3:96:b8:dd:f7:
9a:c0:8d:5c:fb:c5:07:2f:83:46:25:df:a7:60:66:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:09:82:35:2B:3E:F9:6C:FD:29:E3:B4:FC:F1:05:8D:DF:2D:20
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:3d:36:69:87:8a:6a:17:a1:6f:6e:26:2f:9c:9d:f1:85:
0e:4e:86:ca:20:87:eb:9b:03:46:a7:67:df:6f:46:2f:95:f9:
1d:a8:ec:ca:9d:fd:fd:e0:d9:68:6e:49:dc:e3:87:83:a0:ac:
31:38:bc:6b:7e:3d:e3:6d:b2:f9:61:33:ef:0a:f9:81:3b:b4:
99:35:df:06:b0:29:c4:e6:3c:8e:b5:ec:cb:46:7e:a8:7a:a6:
24:3f:4b:a1:fb:0b:8e:9c:3e:12:90:e4:b8:1e:78:8a:bc:01:
cc:89:d6:fd:e5:1d:5f:33:99:e1:80:fa:8f:0f:74:0b:d4:49:
9c:af:16:0f:1e:98:a5:f3:85:71:5f:57:05:15:f9:d9:03:e0:
47:fa:ab:96:d1:da:7a:9e:b9:5e:32:42:76:60:5e:40:5a:ba:
5c:7a:25:24:84:16:05:66:4a:2e:e7:0c:65:06:66:22:5a:cc:
80:dc:19:aa:c6:e4:a9:bf:12:1a:e1:bd:b8:9b:9c:8e:80:b8:
62:3d:4d:42:34:d8:b5:7e:0e:19:2d:96:c4:83:94:26:7e:13:
08:ea:77:93:42:da:7a:3f:7e:90:92:90:71:b1:8a:22:72:fe:
32:8b:df:9b:06:69:cc:97:2b:a2:02:33:3a:0d:b3:05:bb:d4:
ee:76:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:11 2026 by rpki-client