Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: 1XEMCnyI71x8b4IV1DDpbtYOb1X4K39cmvulBE1he0E=
Subject key identifier: F7:D8:45:C1:E5:1B:4F:26:9C:1F:99:CD:DA:17:99:AC:7F:71:C8:22
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019E1ED9CE76D3652CE92EEB6D540F5734F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 07F6
Signing time: Wed 13 May 2026 01:00:51 +0000
Manifest this update: Wed 13 May 2026 01:00:51 +0000
Manifest next update: Thu 14 May 2026 01:00:51 +0000
Files and hashes: 1: 84lhNVWjfCNBvr3PCV47ce0nnfU.roa (hash: 4T3jn28U+vBZ4NxTYxbLOUMX86XF3V96DLzXoQSnwmA=)
2: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (hash: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=)
3: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: YaaBKITGw/Qdixs+ZYEcB78K7zrQV21ZoYcuTN+oajY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ce:76:d3:65:2c:e9:2e:eb:6d:54:0f:57:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: May 13 01:00:51 2026 GMT
Not After : May 14 01:00:51 2026 GMT
Subject: CN=f7d845c1e51b4f269c1f99cdda1799ac7f71c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:44:35:50:55:8f:16:a3:d4:0e:63:9e:1e:
3b:16:90:0e:eb:fc:21:58:02:ba:f6:66:98:3d:76:
18:6e:f2:b5:b0:d9:b9:be:d4:70:f2:76:e6:2a:26:
a5:be:71:bf:4e:65:8d:39:b3:24:77:82:69:6a:c3:
db:e7:80:a5:cb:07:cc:d8:f4:32:a6:01:41:07:32:
ae:a2:8e:24:ea:60:be:40:0c:06:f4:0e:c4:e8:98:
82:33:78:1f:bd:2e:c5:85:cd:54:a9:ed:59:4f:f8:
fe:d3:40:5f:f7:b6:96:35:36:2d:72:93:ce:34:23:
6c:69:8a:00:87:6c:f3:c1:dc:c1:c8:49:7f:e5:e9:
61:ac:77:a2:99:bc:28:3e:cc:92:8e:0f:df:98:01:
bc:89:03:a7:7f:e0:1f:8b:fc:f6:7d:39:fb:11:a1:
8a:f0:88:71:8c:a5:df:55:28:0e:87:d8:fc:5a:64:
16:0e:a2:61:d2:8e:60:1f:eb:1c:68:e5:8d:08:05:
97:ef:16:05:e8:c2:10:da:eb:df:2b:2a:53:ae:73:
8e:2e:c3:a8:0e:24:eb:62:24:ba:43:e8:a6:b7:9b:
52:b1:7f:a1:22:6b:f9:cb:58:56:2a:95:50:2b:45:
62:af:ef:ad:35:f5:eb:b2:84:7f:88:2f:cc:f8:ac:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:45:C1:E5:1B:4F:26:9C:1F:99:CD:DA:17:99:AC:7F:71:C8:22
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ad:bd:cb:54:9b:c2:ca:7d:cf:ba:70:da:c8:35:a0:20:1e:
64:a4:13:0b:4a:03:f8:46:76:90:67:53:2b:7c:22:83:c9:86:
4c:7a:d4:61:f8:12:46:ef:ac:9a:4f:5b:c4:68:0b:72:e7:b9:
89:a6:f1:83:02:25:1e:65:86:8b:5b:b6:ee:df:ee:cc:8e:b7:
1f:26:0c:b2:f6:d1:b9:67:fd:70:ca:37:57:e2:45:3d:a8:69:
4b:fe:7e:8c:0b:97:b3:94:5e:31:58:64:50:f9:20:90:3f:0f:
07:d1:3b:97:64:80:cf:b2:e7:86:59:8f:27:da:3f:6a:fd:f0:
6c:bb:e5:f4:39:46:02:eb:b7:e0:bb:4c:6e:7c:a8:c3:8f:46:
c3:f5:15:6d:48:a9:5c:4c:32:af:71:ca:48:42:4f:19:bc:b1:
a8:26:b4:f8:bf:c2:92:34:d4:7d:a2:ee:ee:20:60:12:6d:c7:
ea:af:59:59:9d:59:59:e7:40:c0:11:3d:00:17:28:88:5d:35:
1f:e2:95:4a:8b:e6:f6:bd:4c:0c:7d:94:42:0c:5e:a8:80:b3:
a5:8b:1a:2d:cf:d1:95:b2:f2:29:83:2d:d6:98:07:6c:69:42:
a5:1e:36:5c:af:70:70:75:51:ab:2b:27:33:5c:55:37:2c:a8:
8d:a4:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:56:32 2026 by rpki-client