Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json)
Hash identifier: P0o1DzDGkAcT3+n58UGGu5Os15N0FrzaZKvYe3JCuz0=
Subject key identifier: 1A:42:06:D8:67:78:51:49:57:59:2D:37:1B:24:98:AF:D1:6F:83:7F
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial: 019D31BE83A4A9A55C37E2E89411AF72B8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
Manifest number: 0206
Signing time: Sat 28 Mar 2026 00:01:02 +0000
Manifest this update: Sat 28 Mar 2026 00:01:02 +0000
Manifest next update: Sun 29 Mar 2026 00:01:02 +0000
Files and hashes: 1: CkU6YuZWJuqKMJWsC4OETRJk9K8.asa (hash: Xp66M/ItxfpMp+sHD2CrNdaSo56kOJ5bY26gQ5XjdMM=)
2: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: ZIe78/i4i2GmiD5CmyBDTwb2Dx59Q0JF4fXKtTBXNas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:83:a4:a9:a5:5c:37:e2:e8:94:11:af:72:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Validity
Not Before: Mar 28 00:01:02 2026 GMT
Not After : Mar 29 00:01:02 2026 GMT
Subject: CN=1a4206d86778514957592d371b2498afd16f837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:26:0e:99:42:6a:da:09:1a:a1:5e:b2:93:
b2:8e:4b:65:ae:3e:0d:41:fe:2f:13:65:3c:7f:8e:
bb:07:b9:db:f3:cf:33:71:67:11:eb:5f:e5:cf:d7:
14:7f:bd:39:6e:6e:21:cc:8c:cf:72:64:24:b6:d4:
a7:5b:da:04:30:0b:a7:0b:89:e9:05:c4:08:1c:2c:
a6:31:ce:5f:ae:d1:12:6d:9c:84:8a:28:5c:ac:f1:
0f:eb:68:77:0b:9f:0a:2e:02:cd:da:55:06:62:04:
c0:4c:31:3c:7a:a6:7c:8c:43:37:c5:50:fb:7e:c7:
d1:9b:b3:4c:87:8a:16:d3:3b:71:09:45:f1:88:01:
10:01:1b:12:f9:52:30:c7:84:36:3a:da:c7:7e:13:
be:4b:3c:36:2a:8f:88:fd:0f:11:96:21:02:13:e0:
f3:2a:3c:c3:51:ab:dc:db:59:59:4e:34:0a:db:73:
71:bb:7b:c4:26:b0:b9:5a:ff:de:26:22:a9:e4:18:
ce:e5:73:66:d8:46:0d:a0:f7:b1:76:f1:58:99:a8:
ca:70:00:e1:f6:db:d0:93:cf:1b:b6:b9:4e:31:e2:
50:88:8c:62:33:4c:61:e0:34:05:5a:3f:bd:fe:b8:
02:bb:08:72:49:29:0a:72:72:75:c0:89:3e:43:21:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:06:D8:67:78:51:49:57:59:2D:37:1B:24:98:AF:D1:6F:83:7F
X509v3 Authority Key Identifier:
keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:b3:1e:1d:1d:83:b5:4f:85:34:46:8e:6e:01:19:19:c6:
f0:0b:6e:69:70:3b:b2:96:34:67:2c:ba:81:b1:7a:27:a2:c0:
2f:cc:9b:dc:23:38:b2:14:2e:12:34:28:95:f0:b7:7e:a6:10:
33:1d:51:5d:6f:f3:54:85:6b:25:36:79:09:1c:94:a7:b0:1d:
f5:fa:73:f4:da:b0:3a:88:85:c3:f3:32:07:64:a6:af:27:69:
0c:6a:83:a7:36:c0:2d:f3:90:f6:6e:96:d3:de:da:4b:1d:da:
77:98:5a:f3:5c:37:34:aa:eb:a4:bf:41:4e:da:0b:6d:0d:26:
90:54:5f:fe:59:93:08:cf:cd:9d:b9:a0:7d:83:8f:20:ff:aa:
ef:cc:6d:d7:f1:c2:10:f7:2a:d7:09:e4:41:9f:f1:de:ef:95:
c4:7c:0a:14:c4:99:7b:23:5e:a9:ed:1b:9c:e9:a1:97:80:2f:
7e:88:93:de:4e:55:c1:e8:1d:2c:23:f6:68:ca:31:77:90:12:
9c:87:01:28:28:f8:da:aa:40:f7:9d:e1:bc:75:c1:75:42:e4:
61:85:2b:41:b9:88:40:ca:0b:e2:be:99:41:8a:d5:c7:37:f3:
40:4f:ae:7c:65:40:ec:e8:6a:e6:17:a3:5e:b4:47:d2:77:39:
63:d2:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:33 2026 by rpki-client