Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: KEbAg7dsfnVNA7uJyYkeOLoRd1KvHOw+48ENAo2PwFo=
Subject key identifier: 09:3D:9A:51:66:0A:6A:8F:42:6F:91:15:E6:60:DF:B2:51:23:C2:94
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019E1D5947F64DFC13F08639F1D69A1EA830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 0280
Signing time: Tue 12 May 2026 18:00:50 +0000
Manifest this update: Tue 12 May 2026 18:00:50 +0000
Manifest next update: Wed 13 May 2026 18:00:50 +0000
Files and hashes: 1: CkU6YuZWJuqKMJWsC4OETRJk9K8.asa (hash: Xp66M/ItxfpMp+sHD2CrNdaSo56kOJ5bY26gQ5XjdMM=)
2: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: 1wcrTuxb1J6G5T0mvtMqGsYoGGyjLk76S4aU9+D+B2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:47:f6:4d:fc:13:f0:86:39:f1:d6:9a:1e:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: May 12 18:00:50 2026 GMT
Not After : May 13 18:00:50 2026 GMT
Subject: CN=093d9a51660a6a8f426f9115e660dfb25123c294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:dc:6e:49:fa:7c:08:19:b4:35:b5:42:b0:
77:77:59:40:24:0e:01:e5:1a:5c:92:9e:6b:a7:15:
df:65:2a:63:97:4d:8c:d3:0e:58:b8:e5:01:a8:24:
14:05:9d:69:3d:85:03:24:00:d6:9a:22:06:61:61:
87:79:1a:51:a3:e2:79:c2:3e:f5:82:74:c1:4a:9d:
99:49:53:fa:8e:32:6e:60:e3:e4:d7:a3:2d:65:12:
89:06:29:a8:d0:08:dd:72:dd:bb:72:75:23:0f:f7:
c4:21:b5:1d:af:6c:23:57:b4:ea:6b:e1:5d:7b:0b:
2e:1e:03:14:ed:f1:24:79:d8:e4:68:71:2d:b2:f7:
89:4f:f2:59:e1:f7:59:b8:d6:13:e8:08:a5:a0:44:
2b:74:b8:d2:19:82:b5:27:88:99:41:bb:6f:95:76:
0b:16:ac:3f:68:e6:47:7f:60:15:a8:4e:c3:58:aa:
0c:86:2d:6a:38:c0:d4:eb:d0:9d:b6:c0:03:ef:4d:
95:d8:1c:7f:c3:7c:62:f9:75:e2:55:6c:5a:f8:20:
ec:0b:6a:f2:d6:ae:62:ae:0e:37:4e:3f:25:cf:de:
f3:f0:30:df:42:1a:37:ca:88:b9:f2:c7:81:41:57:
16:76:2e:4d:b9:54:35:0a:d5:03:bb:35:5c:4d:d7:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:9A:51:66:0A:6A:8F:42:6F:91:15:E6:60:DF:B2:51:23:C2:94
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4e:a3:36:9b:7c:48:54:65:06:07:13:47:ab:b7:39:47:a7:
f9:49:46:ac:04:a2:19:7f:63:ef:1c:fd:3e:4a:8d:f2:33:f3:
95:b5:50:5c:9f:f7:47:ec:d8:41:11:1d:a0:78:ed:91:1c:b1:
ff:51:32:f6:41:b7:57:7a:5f:1c:1c:32:c3:13:41:aa:e2:bc:
93:59:03:bc:2e:d8:eb:b2:39:f7:ab:7e:50:42:18:7a:1f:8d:
53:79:d2:c0:61:cd:10:e7:d2:db:98:e3:6d:63:0a:78:e2:c9:
8f:99:ed:b6:d4:a0:f0:ae:6c:42:c6:fb:4e:08:16:25:24:75:
9c:05:2c:cb:23:9b:02:c4:14:2e:d9:5d:d5:e5:ee:8d:3c:b1:
a5:57:fe:c0:11:df:cd:e2:ec:69:d7:fe:09:b0:13:d2:36:31:
6b:0c:b5:24:fa:ff:f1:41:06:12:df:4f:ce:a1:bf:25:7a:46:
9a:1d:cb:a8:51:57:44:49:a6:6d:be:66:a7:c8:65:17:e7:a6:
24:29:33:6a:87:59:0a:45:13:5e:23:75:14:73:8a:70:3b:41:
f0:2d:43:46:a3:b0:f4:9b:ec:9c:5a:84:70:8e:08:73:84:9f:
20:d4:38:51:91:82:16:49:97:70:a8:88:e0:8c:bf:00:5c:25:
3b:36:2c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWUf2TfwT8IY58daaHqgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTZjOWJhNGJmZmQxYjViYTE0NTBhYjVkZDY5ZDdhYjc0
MDEwNjAwHhcNMjYwNTEyMTgwMDUwWhcNMjYwNTEzMTgwMDUwWjAzMTEwLwYDVQQD
EygwOTNkOWE1MTY2MGE2YThmNDI2ZjkxMTVlNjYwZGZiMjUxMjNjMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N3cbkn6fAgZtDW1QrB3d1lAJA4B
5Rpckp5rpxXfZSpjl02M0w5YuOUBqCQUBZ1pPYUDJADWmiIGYWGHeRpRo+J5wj71
gnTBSp2ZSVP6jjJuYOPk16MtZRKJBimo0Ajdct27cnUjD/fEIbUdr2wjV7Tqa+Fd
ewsuHgMU7fEkedjkaHEtsveJT/JZ4fdZuNYT6AiloEQrdLjSGYK1J4iZQbtvlXYL
Fqw/aOZHf2AVqE7DWKoMhi1qOMDU69CdtsAD702V2Bx/w3xi+XXiVWxa+CDsC2ry
1q5irg43Tj8lz97z8DDfQho3yoi58seBQVcWdi5NuVQ1CtUDuzVcTdecxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk9mlFmCmqPQm+RFeZg37JRI8KUMB8GA1UdIwQY
MBaAFIXmybpL/9G1uhRQq13WnXq3QBBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2Qt
NGU0MjNjYTUwNDg5LzEvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2QtNGU0MjNjYTUwNDg5
LzEvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU6jNpt8
SFRlBgcTR6u3OUen+UlGrASiGX9j7xz9PkqN8jPzlbVQXJ/3R+zYQREdoHjtkRyx
/1Ey9kG3V3pfHBwywxNBquK8k1kDvC7Y67I596t+UEIYeh+NU3nSwGHNEOfS25jj
bWMKeOLJj5ntttSg8K5sQsb7TggWJSR1nAUsyyObAsQULtld1eXujTyxpVf+wBHf
zeLsadf+CbAT0jYxawy1JPr/8UEGEt9PzqG/JXpGmh3LqFFXREmmbb5mp8hlF+em
JCkzaodZCkUTXiN1FHOKcDtB8C1DRqOw9JvsnFqEcI4Ic4SfINQ4UZGCFkmXcKiI
4Iy/AFwlOzYsPg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:57:58 2026 by rpki-client