Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: lGya28XxDZKo3sPsMtM7v4lXhfgVUhywl8hhD8T6Tp8=
Subject key identifier: 52:94:B4:F4:EF:47:A0:50:85:19:90:09:1E:06:74:E6:88:9F:9E:D5
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01A0CFDAA2805A5BF3080BA1554C6032F141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 101B
Signing time: Wed 23 Sep 2026 20:00:07 +0000
Manifest this update: Wed 23 Sep 2026 20:00:07 +0000
Manifest next update: Thu 24 Sep 2026 20:00:07 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: w7hYcwV7wWQXLat/y61J2HriFTlsKbeg0Kwghre4v6Q=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:a2:80:5a:5b:f3:08:0b:a1:55:4c:60:32:f1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Sep 23 20:00:07 2026 GMT
Not After : Sep 24 20:00:07 2026 GMT
Subject: CN=5294b4f4ef47a050851990091e0674e6889f9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:8c:d5:16:a5:a0:33:b5:c0:fc:74:15:60:
e2:1f:6c:15:2d:f1:3e:33:54:09:06:e7:d9:b0:c9:
eb:30:8d:ef:17:82:82:00:4e:67:0e:f9:e7:0a:81:
23:ca:87:8e:ac:39:4b:4b:b0:6f:41:88:de:3a:4c:
a6:2c:be:3a:5c:26:0a:74:be:aa:a1:80:90:e5:46:
5f:3f:db:67:31:4c:44:f6:42:57:d3:f4:33:aa:0e:
3c:7d:bd:46:e2:b4:f2:dd:fb:a8:18:39:03:9d:9b:
fe:7b:6f:1a:e7:aa:a8:3d:f9:f3:d0:63:c1:0e:cd:
32:83:bc:52:12:2b:89:89:77:2c:fc:b2:aa:0d:67:
d8:e4:f6:2e:d7:b4:d6:02:ad:a8:72:a6:7e:5d:aa:
d6:6b:d8:ec:df:41:3f:31:bc:6e:0f:0d:93:54:5d:
75:52:1c:a3:30:f4:de:cb:84:05:76:f1:5a:17:7f:
be:99:78:d2:5e:24:c2:c1:9b:c3:6f:22:9c:30:8b:
b3:74:c1:e5:b2:2c:dc:9e:69:fc:a4:75:59:ac:a9:
da:8d:1d:03:9b:99:ee:73:15:84:11:11:f7:32:b3:
79:19:5b:65:ad:ed:91:97:02:46:bd:d5:5f:76:b1:
09:40:50:38:76:86:88:a4:e0:6c:7f:09:93:82:d7:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:B4:F4:EF:47:A0:50:85:19:90:09:1E:06:74:E6:88:9F:9E:D5
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:67:60:51:f0:03:3e:b7:ed:ce:e7:5b:00:29:4b:5c:3e:
98:00:cc:01:50:a1:8a:72:20:3c:24:9c:f4:5e:a9:c8:42:2e:
17:59:f2:c7:44:fd:e9:4c:34:d6:2f:1b:a1:95:cd:a2:90:78:
ed:08:47:c6:31:fb:de:30:48:e5:d7:14:b2:51:80:7f:5a:f6:
50:f4:de:48:6a:ff:12:21:67:56:86:a4:a9:83:10:b3:e3:be:
6e:db:8e:2f:8f:c9:e9:50:81:3e:c1:0a:47:7c:32:87:38:33:
26:ba:3c:7c:f5:09:58:89:57:f9:06:30:a1:ec:40:ca:62:d4:
08:39:f2:e3:db:9e:ea:00:b0:86:fc:a7:09:6e:dc:93:ef:92:
3c:9f:39:49:59:5f:66:09:6a:1b:6d:07:48:b1:d7:f5:b1:94:
74:2b:32:6e:70:13:3c:10:45:21:e1:d2:47:91:64:f6:3c:0a:
6e:02:45:b8:c7:27:07:6a:5e:d3:80:9b:41:42:22:30:0c:ab:
45:bd:86:31:82:58:b6:16:e8:d3:86:5b:0f:75:5b:87:03:9a:
7a:1e:5e:bb:29:5e:41:bc:5a:d8:d9:31:50:2a:56:f2:29:82:
23:cb:c8:72:f1:ab:f2:e1:2a:31:ec:92:56:7c:a2:9e:66:9e:
d1:cb:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:07 2026 by rpki-client