Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: hli1zGu+48pD2yJn9W0q/mP1cz+jMcG2yUuXkV4HqLc=
Subject key identifier: 73:41:3D:AF:5B:7A:30:3E:BD:E3:90:8D:A9:66:32:58:C5:83:9D:F1
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01A0D5A68F5D84DB47B0639B7D3EE49A6B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 101E
Signing time: Thu 24 Sep 2026 23:00:57 +0000
Manifest this update: Thu 24 Sep 2026 23:00:57 +0000
Manifest next update: Fri 25 Sep 2026 23:00:57 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: 3PaVE7e70+iBL6leWhu+r1AgmRL2L262inKunPDazow=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:8f:5d:84:db:47:b0:63:9b:7d:3e:e4:9a:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Sep 24 23:00:57 2026 GMT
Not After : Sep 25 23:00:57 2026 GMT
Subject: CN=73413daf5b7a303ebde3908da9663258c5839df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:5a:f8:93:13:b6:0f:3f:e6:b5:1a:67:29:
f7:c7:ac:53:e6:22:39:69:72:db:54:24:e9:b2:68:
ef:a1:47:cd:04:a6:b7:59:4b:ac:2e:42:6f:d6:57:
4b:fa:95:fa:fb:00:ad:f0:63:9c:6a:51:b1:03:9c:
90:89:7f:48:db:b5:01:6a:7b:68:25:db:15:b4:aa:
16:dd:ba:5f:eb:c8:88:93:5d:2c:05:bd:77:65:80:
61:80:8e:f7:28:ad:e7:0e:b3:fd:8f:fb:2e:b8:a4:
cf:26:bb:87:2a:0c:70:9b:fc:80:72:94:79:52:c6:
cb:7d:6b:27:dc:69:cd:4d:2f:fd:98:ce:60:14:89:
b6:d2:85:96:13:2b:c3:68:5b:a6:4a:2e:53:48:43:
9b:90:f5:85:be:df:c5:53:59:d7:23:75:e1:32:0b:
ae:49:5a:08:14:2b:ca:be:67:ee:d3:f3:43:1a:a2:
66:bb:d0:4f:f6:b0:13:58:cd:a6:ef:0f:36:0f:49:
fa:29:63:cf:97:8a:50:f8:09:1c:42:82:bd:e2:88:
75:2b:4b:e1:12:c4:c1:c9:eb:f6:cc:fc:a5:9b:b9:
c7:74:60:ba:97:72:5a:88:a2:19:fd:38:d9:f4:52:
e9:9c:ab:e0:26:36:d5:65:bb:5a:86:bb:72:6f:2c:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:41:3D:AF:5B:7A:30:3E:BD:E3:90:8D:A9:66:32:58:C5:83:9D:F1
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:4d:5c:d8:c1:e5:20:ac:a0:38:62:1c:a5:f9:73:5f:28:
93:55:e2:bd:32:01:a0:00:e8:8b:33:24:8d:bf:10:0a:e3:8b:
a8:60:8f:82:a7:50:3e:01:92:80:2a:d2:47:9d:35:0d:ca:d6:
96:b4:04:87:62:9d:f8:a9:c3:19:2c:45:7a:63:a0:9e:f6:9a:
1c:15:a2:ed:39:aa:e5:8b:18:e6:03:6d:83:1b:ee:dd:37:05:
2d:21:f1:ba:1c:30:00:84:13:fe:a8:97:ca:da:4f:1f:21:19:
37:4b:fd:de:7c:6d:df:57:82:d9:c0:46:7c:32:3b:33:76:54:
43:c3:a0:49:de:40:02:a9:fa:08:9a:21:90:5c:d2:66:02:24:
c8:72:55:58:27:79:d8:28:96:54:9c:35:da:80:8d:7d:46:3b:
a1:f5:d0:57:90:f4:a5:b1:9f:2e:90:a3:9c:71:7e:96:d8:c6:
5d:5e:d9:95:81:62:31:dd:7d:75:9e:3b:01:d1:1b:e8:03:59:
6b:63:43:4f:40:2a:d6:3c:63:89:5c:34:9a:96:40:75:b6:44:
a4:b8:06:2a:02:8b:56:d1:1e:94:2b:1a:a0:c9:2d:df:02:3f:
88:db:19:36:f0:57:75:62:b6:a7:1b:6b:ad:96:41:1e:a8:d1:
93:8d:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:12:39 2026 by rpki-client