Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File: hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier: av98FotzgzKuKpauK0E4cYWKvmzc9M1g68SQvQifVpo=
Subject key identifier: D7:F4:2D:5B:5F:48:19:32:B2:88:50:E0:E2:57:25:E9:10:B3:71:A9
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01A1DC821FE75BAEC87EFDACF32E3B89DB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number: 1600
Signing time: Sun 15 Nov 2026 00:01:17 +0000
Manifest this update: Sun 15 Nov 2026 00:01:17 +0000
Manifest next update: Mon 16 Nov 2026 00:01:17 +0000
Files and hashes: 1: UVK-TwFECyBo493Ak51MrNfcaQE.roa (hash: /fbHkbD7KPDuOT91DBKV1keIzbve2wMN0Nea8980swA=)
2: cAfMugWdxXFLBCx7sw2-yd61uKY.roa (hash: orwX8b0RS0lYztkvgn66c9x9TZlFdD7WNVOTBejxj/Y=)
3: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: 5TbxZExcEMqATm0mNV13+rHR4X+V3plxnborPkYEpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:1f:e7:5b:ae:c8:7e:fd:ac:f3:2e:3b:89:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Nov 15 00:01:17 2026 GMT
Not After : Nov 16 00:01:17 2026 GMT
Subject: CN=d7f42d5b5f481932b28850e0e25725e910b371a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:93:d8:c5:0e:ef:15:00:8a:af:e6:a0:f3:
a7:30:ec:77:f8:9a:2f:01:f0:f2:d6:2d:84:db:f1:
1c:9f:72:09:97:24:c3:7d:94:cf:7f:a4:fa:70:60:
d3:46:3e:a4:45:21:c0:c5:21:a1:40:7a:43:70:10:
65:25:40:2d:ad:b0:a9:5c:5a:4a:0c:3d:ea:f2:1a:
88:43:e6:33:23:9b:c3:5d:1c:40:c4:7b:65:f3:84:
36:50:a3:b4:ba:6a:49:b5:7f:3e:78:1f:d5:7a:90:
af:b7:26:32:3c:c9:53:26:ae:3d:b8:22:20:04:8a:
fe:89:30:a5:15:25:bd:b9:f9:ae:ea:d6:07:32:78:
3c:38:bb:3a:94:82:be:04:b8:6e:0e:ea:73:fe:3b:
ce:3c:95:5b:de:1a:e6:cd:a9:a8:61:60:c6:db:4b:
2d:4e:b3:d3:c0:1d:2a:1c:9b:1d:e7:97:da:23:dc:
63:4f:95:de:01:7f:a1:26:99:7d:d6:5f:d1:4a:95:
0c:8e:ac:71:cd:10:22:5d:bc:67:3f:a8:a8:6c:59:
2d:ef:9e:be:d7:23:ad:ff:3e:a6:75:8d:fb:00:95:
07:04:92:80:2a:68:97:3f:34:31:12:a6:85:79:27:
a5:4d:3d:a9:87:13:7b:52:bd:d5:2e:87:4d:3a:d1:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:2D:5B:5F:48:19:32:B2:88:50:E0:E2:57:25:E9:10:B3:71:A9
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:39:84:10:27:91:2d:cd:f4:79:cf:30:46:30:2d:af:07:
6a:83:c3:b4:a6:0a:d4:33:ed:a3:8e:8f:f5:e6:41:2a:69:20:
dc:20:92:8b:d4:ba:40:8d:02:8b:16:10:63:a6:b3:d1:02:a2:
c2:e1:31:de:69:54:e0:2b:dd:21:3a:64:7b:e8:ee:48:bc:3b:
a7:5b:bf:bc:0f:74:ac:a8:14:a8:d2:2f:bd:b6:d6:b6:15:7b:
28:a2:bf:93:08:fc:44:7c:39:cb:e9:d7:d1:aa:66:c5:0b:0d:
bb:05:1c:20:68:a6:59:d5:c7:d5:1d:25:f2:db:8c:04:67:bc:
4d:95:4a:47:9f:b2:52:99:39:ce:7a:2c:c9:93:1b:4b:57:74:
32:c2:04:64:6a:77:c3:20:e9:2e:4a:18:16:da:be:36:8b:7d:
1f:54:ee:14:9d:ea:4f:ce:41:83:1a:2a:e1:c9:d9:d9:51:aa:
de:24:49:86:ec:a8:b1:cb:84:dd:93:4e:74:42:fa:21:b8:ca:
03:19:a4:d0:6b:9a:29:8a:a3:78:5a:cd:83:de:22:51:cf:d3:
94:b4:48:f1:1e:df:09:2b:c7:53:fa:e1:6d:66:95:0b:88:09:
9a:89:8e:c3:cf:22:9e:d9:c4:6a:52:e1:96:f1:e4:01:3d:59:
84:cc:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:36:21 2026 by rpki-client