Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: 93CFOtorQfRCX750M0z0IKSi99F2UWNAHM/rkMicFp8=
Subject key identifier: 9F:C8:2C:9E:A1:6F:02:24:07:EB:A2:70:86:09:F8:C1:C2:2D:FA:14
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 019D2703B55F289B4C3E631D6C79596D4017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 0BE2
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: cmfy8fK6lws4bK9krnpTdUU/dY24FxMtSEJzCIKGOQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b5:5f:28:9b:4c:3e:63:1d:6c:79:59:6d:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=9fc82c9ea16f022407eba2708609f8c1c22dfa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:8d:35:12:d5:46:5a:37:05:f9:35:ae:13:
95:18:fe:64:23:25:07:17:1e:d1:e9:d0:29:05:fa:
2d:0c:da:d3:23:cf:79:4a:20:f2:64:7c:39:6a:a6:
41:dc:bd:8e:aa:5f:97:a2:59:1f:69:11:fa:86:14:
8f:2d:89:96:91:5f:41:8f:c1:c3:26:79:2e:02:ea:
8b:a0:9a:e9:84:2d:4e:17:c6:78:fc:5c:af:31:e6:
ba:2c:7d:42:24:c6:ad:26:2e:a9:af:00:a2:d1:58:
12:12:1f:c3:1a:95:41:c6:e6:c1:6e:05:68:98:4c:
f5:14:05:07:6c:a6:22:76:3a:b9:8e:03:11:39:02:
16:fc:6a:31:77:a5:26:01:c7:44:ff:80:ec:52:fc:
b6:43:31:c8:2a:29:f8:32:2f:17:38:3d:08:84:16:
95:92:f6:4d:31:7e:cc:aa:3f:bb:5b:4e:91:d0:ed:
46:6c:b6:38:09:ff:c9:ce:4b:ff:5f:56:e2:b2:4e:
b7:3d:53:2f:f7:68:f0:03:8d:8f:ad:0d:e2:66:30:
83:c7:19:82:1b:d8:82:7e:ba:0a:4b:f5:4e:3b:17:
92:42:32:e5:9d:bf:97:e8:26:10:7b:e1:a6:a1:d2:
e4:76:56:7a:20:66:7f:9e:f0:05:fd:7b:c2:3e:72:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:2C:9E:A1:6F:02:24:07:EB:A2:70:86:09:F8:C1:C2:2D:FA:14
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:69:ff:e3:25:7a:ca:38:81:b8:5d:5f:ec:f4:2b:a8:41:51:
46:2f:ea:b1:6b:2c:ba:86:78:f3:f8:4d:a4:ea:5d:43:7f:b6:
8a:6a:94:57:33:a5:19:50:92:65:2c:25:c9:b0:d3:30:15:d9:
26:d8:71:d7:50:81:c7:09:e8:fd:26:21:bd:dc:58:20:46:ba:
a7:ab:b7:52:a1:45:d8:88:4a:9f:d2:7e:6f:bc:0a:66:0f:3f:
13:7b:3f:8c:4a:91:2f:de:cc:d9:7a:c7:18:ed:50:18:57:be:
0a:41:4a:2d:76:2d:78:a9:64:98:2c:7b:48:d9:8c:5b:66:42:
fd:c5:69:d9:9a:36:03:9c:3c:af:13:09:f2:dc:a5:69:7a:bc:
88:f0:9b:bf:7c:b0:14:4e:63:80:6b:a0:61:23:21:1d:17:97:
e8:db:bd:38:a4:ef:e2:ad:89:c6:0d:fa:56:5d:93:75:e3:ef:
79:46:f4:bd:4e:06:4d:bf:7b:8c:d2:bd:73:f0:e3:8e:e9:05:
df:0c:92:81:e0:4f:cb:c3:15:de:d0:5e:30:5a:fc:c1:ea:01:
50:d6:57:40:81:29:99:fd:1b:2c:bb:15:f6:cf:eb:15:69:3e:
07:63:d5:36:42:96:63:82:f9:21:3c:a0:bf:ef:80:36:51:1e:
c8:f6:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:24 2026 by rpki-client