Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: Pfo8cCzVNEXfvcGVGlMn7ZTTHHbsZ4hYGcGSsGh0VqE=
Subject key identifier: EA:17:9C:53:44:77:5E:34:44:1D:11:41:81:9F:F6:5C:94:82:EA:22
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 01A0D236DF230EAE5C502EAD30490D7E2911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 0265
Signing time: Thu 24 Sep 2026 07:00:06 +0000
Manifest this update: Thu 24 Sep 2026 07:00:06 +0000
Manifest next update: Fri 25 Sep 2026 07:00:06 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: al+ZiBpiQ9OvmZXflLHGF7CAeQOY5Yqh8F4YzdoUJIs=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:36:df:23:0e:ae:5c:50:2e:ad:30:49:0d:7e:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Sep 24 07:00:06 2026 GMT
Not After : Sep 25 07:00:06 2026 GMT
Subject: CN=ea179c5344775e34441d1141819ff65c9482ea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:7a:c2:e9:7d:79:3b:b0:8a:ed:4e:4b:f7:
34:c1:d9:c0:08:f9:eb:31:ee:07:78:16:9c:aa:42:
84:4b:d0:db:88:8d:f2:eb:2e:bd:cd:fc:8b:cb:96:
02:33:d4:d6:ea:a1:14:bd:19:e5:b3:49:d9:df:69:
76:d1:93:6a:6a:6b:96:b0:c3:14:09:10:9e:94:9e:
50:b3:ce:f6:f0:f8:8c:b7:76:8e:c0:56:d1:06:18:
88:45:f8:7f:59:b7:7a:25:0f:d8:61:89:66:65:d3:
e2:0f:1c:4e:a0:64:4a:30:0a:63:c5:ea:b7:19:0f:
36:33:0d:31:71:d8:2e:c5:80:f8:43:8e:a8:f5:20:
4b:ad:82:64:5d:8c:a0:a4:70:dc:73:7d:84:d3:44:
9c:39:a0:3d:47:3d:14:9f:46:48:53:77:29:47:80:
22:bd:ca:48:83:b5:53:d7:b3:09:0d:2b:5f:12:a3:
d2:bc:82:62:ad:4b:45:76:71:22:ca:0e:d7:81:b2:
ee:5e:e6:8e:fe:7f:57:b8:d4:11:53:5e:10:d2:0c:
1e:16:39:04:e2:cc:80:54:33:c3:fa:a0:52:14:18:
f5:13:07:62:24:a2:1d:50:18:3b:14:ee:85:c4:a1:
60:14:51:e9:13:e0:26:10:8c:67:b4:f2:7b:aa:c0:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:9C:53:44:77:5E:34:44:1D:11:41:81:9F:F6:5C:94:82:EA:22
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:52:05:b7:3b:80:37:68:04:1e:e5:96:22:f1:69:b1:db:44:
88:2b:f9:9a:7b:bc:ff:35:f1:c4:67:9e:ac:5b:ee:6d:22:45:
69:19:c3:f8:80:b3:92:b7:53:bb:ce:c5:65:6d:af:0a:88:37:
a8:1b:e0:8a:64:ad:47:80:52:9c:92:d0:72:9e:dd:4f:32:f4:
79:21:95:ba:bf:07:2a:03:27:b1:d9:5c:84:c2:5d:46:5f:65:
ca:87:80:f1:37:55:8f:f2:2b:f6:e1:e6:56:1c:cd:24:b9:56:
11:ad:b9:2c:fa:ee:1f:bc:ed:29:35:ca:64:3f:44:43:2e:ac:
7d:b4:cf:b8:44:dd:3a:0f:4f:65:bd:05:04:21:a7:4d:f0:3e:
77:db:23:20:ee:39:e1:45:bf:ac:ef:0e:cd:db:5e:e2:c3:5e:
ca:08:6e:6f:98:b2:8b:82:7b:3b:8f:79:b6:ba:84:b3:06:be:
a8:86:e6:0e:e0:6e:0f:10:90:42:42:d6:45:e3:05:25:e7:bd:
dc:ad:33:44:88:e5:d8:54:a2:bb:7b:a6:04:80:bb:3c:5e:2e:
fd:b9:1b:fd:99:58:f6:31:d7:98:1d:ac:ea:15:fd:72:ab:3c:
0c:6c:9f:ca:c4:c5:9c:e3:21:18:60:35:a5:7d:4f:77:33:ee:
34:79:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:37:12 2026 by rpki-client