Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: CSUN4ROkSsZpYaZ6uLayY+t22SUp/5W0yeUcHbmMU5k=
Subject key identifier: 94:8A:15:A7:DE:68:89:99:53:48:27:D7:2F:41:BE:A9:E9:26:91:DD
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 019F8FB52562EE15D97757B96E9D88871BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 01BE
Signing time: Thu 23 Jul 2026 16:00:41 +0000
Manifest this update: Thu 23 Jul 2026 16:00:41 +0000
Manifest next update: Fri 24 Jul 2026 16:00:41 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: dRcJMjYpoSdsUMtl5X7fGjmdCd597BcVjvNp9rfj5Po=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:25:62:ee:15:d9:77:57:b9:6e:9d:88:87:1b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Jul 23 16:00:41 2026 GMT
Not After : Jul 24 16:00:41 2026 GMT
Subject: CN=948a15a7de688999534827d72f41bea9e92691dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:7d:59:fb:79:ea:18:aa:6d:3d:3e:5b:9d:
ca:05:ed:fb:8d:23:72:1c:94:b1:bb:07:d2:a4:a6:
4f:76:6e:2f:79:1c:13:4f:4b:79:6c:fa:3a:6d:a8:
28:fb:a8:67:d5:6d:ff:10:86:b7:ec:c8:f9:5f:01:
6f:ac:41:fe:45:03:59:dd:92:08:aa:d7:43:dd:9b:
55:33:0a:51:d7:8e:ab:5e:6f:04:db:a7:16:2f:d5:
dd:f1:2d:90:b9:a1:90:af:99:70:17:ad:ed:7b:68:
05:e0:1a:b5:7d:87:58:a5:f4:e1:dc:f4:eb:1d:43:
29:2c:cf:e0:00:0a:78:a1:dc:b7:ae:f9:71:85:7e:
81:8c:5e:73:42:0b:43:48:e8:38:54:30:65:23:02:
b1:96:0b:c9:00:42:e1:91:87:20:6e:26:32:60:ed:
5d:02:fe:6e:48:44:df:93:42:54:1d:09:5c:22:da:
60:7c:57:37:c1:30:7e:ea:8a:62:f5:88:87:64:06:
40:25:6c:1b:1f:1a:7a:60:8b:e3:bb:6a:ec:46:90:
8f:12:00:80:54:2e:3d:d2:50:4e:da:f6:39:ef:2b:
02:4a:b6:5b:22:bb:47:7b:3e:db:92:3d:7a:85:a7:
18:25:d6:11:df:0b:13:9f:4a:8a:e7:3b:a9:3e:14:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:15:A7:DE:68:89:99:53:48:27:D7:2F:41:BE:A9:E9:26:91:DD
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7a:a1:ed:b8:aa:01:98:58:51:7b:39:df:fd:8f:6d:f5:89:
ad:15:7a:0f:d5:38:9f:8f:10:41:8f:66:29:11:a1:12:e2:5a:
7a:ee:91:3e:46:82:5b:46:62:c0:0a:bc:1a:a9:22:67:cf:7e:
6a:8e:ef:6a:3d:3f:88:06:9c:f4:85:b4:33:a9:25:8d:ce:e9:
4e:85:2a:34:c1:99:0d:11:b1:2f:9f:e2:50:b4:d7:1e:cd:94:
96:f0:11:6f:27:0d:d1:2c:f7:45:6e:8c:91:e6:d8:bc:ca:5e:
60:be:11:e8:50:0e:df:d5:57:a6:1e:6d:89:13:82:f2:80:1a:
e0:b8:ce:7b:de:b4:8a:76:2b:79:86:e5:83:08:a0:30:e4:28:
50:cb:54:58:c3:ce:f2:75:32:76:b6:82:a5:07:61:2c:70:55:
2e:d8:ee:47:eb:1f:ea:c2:12:f8:dc:eb:87:b0:83:de:22:f8:
2c:3f:e5:99:ec:c9:4b:1c:21:bd:14:5c:30:b0:63:92:0c:e3:
35:71:44:59:b3:ca:29:d0:54:3f:14:de:36:d3:ef:77:de:d1:
30:a1:b8:95:ba:a6:24:d3:e6:84:73:fe:0c:56:54:c2:51:eb:
d3:a7:4c:9b:b1:ca:0e:08:2c:6f:08:f4:ac:c9:fd:60:67:c9:
c9:3b:bf:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtSVi7hXZd1e5bp2IhxvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjRmODc1ZTk5ZDM1YjE0MjA0NjkzZWVlMTFjYTliNmFh
ZmU0YWUwHhcNMjYwNzIzMTYwMDQxWhcNMjYwNzI0MTYwMDQxWjAzMTEwLwYDVQQD
Eyg5NDhhMTVhN2RlNjg4OTk5NTM0ODI3ZDcyZjQxYmVhOWU5MjY5MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyR9Wft56hiqbT0+W53KBe37jSNy
HJSxuwfSpKZPdm4veRwTT0t5bPo6bago+6hn1W3/EIa37Mj5XwFvrEH+RQNZ3ZII
qtdD3ZtVMwpR146rXm8E26cWL9Xd8S2QuaGQr5lwF63te2gF4Bq1fYdYpfTh3PTr
HUMpLM/gAAp4ody3rvlxhX6BjF5zQgtDSOg4VDBlIwKxlgvJAELhkYcgbiYyYO1d
Av5uSETfk0JUHQlcItpgfFc3wTB+6opi9YiHZAZAJWwbHxp6YIvju2rsRpCPEgCA
VC490lBO2vY57ysCSrZbIrtHez7bkj16hacYJdYR3wsTn0qK5zupPhTC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSKFafeaImZU0gn1y9BvqnpJpHdMB8GA1UdIwQY
MBaAFIW0+HXpnTWxQgRpPu4Ryptqr+SuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMt
OTM4YTczYjZmN2MyLzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMtOTM4YTczYjZmN2My
LzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHqh7biq
AZhYUXs53/2PbfWJrRV6D9U4n48QQY9mKRGhEuJaeu6RPkaCW0ZiwAq8GqkiZ89+
ao7vaj0/iAac9IW0M6kljc7pToUqNMGZDRGxL5/iULTXHs2UlvARbycN0Sz3RW6M
kebYvMpeYL4R6FAO39VXph5tiROC8oAa4LjOe960inYreYblgwigMOQoUMtUWMPO
8nUydraCpQdhLHBVLtjuR+sf6sIS+Nzrh7CD3iL4LD/lmezJSxwhvRRcMLBjkgzj
NXFEWbPKKdBUPxTeNtPvd97RMKG4lbqmJNPmhHP+DFZUwlHr06dMm7HKDggsbwj0
rMn9YGfJyTu/pQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:48 2026 by rpki-client