Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: nYeHnGM4WVz0EgVc/AXM6pHkSYugOnT2dAfKkfTQAI0=
Subject key identifier: 2B:8A:F1:90:12:93:82:61:9C:92:C2:47:ED:DF:D6:10:A9:A3:D2:DD
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 019D269649360254E8AA04553BFB06B6ADC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: 1OvoBWd1oEGTU5StzICCCarOhWhQyYDuLLd+/KPPCU8=)
2: xd4uF5A-A5iD95Zuer1EQgUg4c4.roa (hash: zL8osWE5mYbHuTzixEhig2aehz5wUK5OJXXALOyQ/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:49:36:02:54:e8:aa:04:55:3b:fb:06:b6:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=2b8af190129382619c92c247eddfd610a9a3d2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:29:25:bf:66:d6:7c:57:12:18:a4:41:17:
db:95:e0:b0:80:32:0d:88:ba:a2:e3:d5:81:99:83:
e0:60:e5:4d:ba:be:65:6c:9d:b8:a6:78:95:9e:29:
e7:77:d1:70:31:d4:68:46:70:1a:b6:fb:7f:38:e8:
76:78:7e:7a:1a:13:29:38:83:bc:65:5b:75:d0:7f:
49:b6:f3:40:b5:02:77:f1:65:31:cb:01:c3:73:bd:
ab:e7:4c:16:4c:4b:52:06:24:de:5e:ea:40:1d:7b:
44:cd:72:11:33:4c:bb:c7:64:18:23:d0:f8:5e:c6:
a4:dd:8c:1e:13:9e:d6:fa:e3:0e:1d:64:ca:cd:ad:
c3:f1:58:9e:34:62:5f:94:81:36:62:d3:aa:e9:87:
78:22:c6:09:75:f4:32:df:e0:04:93:6d:08:e7:c8:
09:75:0e:58:37:35:c4:68:6c:11:11:8f:4a:fd:67:
bd:bd:47:ed:fc:26:4c:60:0e:3d:33:50:9e:84:92:
4e:c8:52:b4:bd:60:c1:89:98:b5:fc:fa:53:31:2e:
81:3c:fb:0b:d6:2d:20:5b:d4:46:97:87:7e:42:9c:
2a:a0:4c:5d:b3:ea:ac:04:8d:30:24:37:5f:11:24:
48:be:86:e4:25:55:f8:61:ac:e5:fe:49:f4:f1:e8:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:F1:90:12:93:82:61:9C:92:C2:47:ED:DF:D6:10:A9:A3:D2:DD
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:44:ef:5d:3a:5f:2c:63:cf:9d:23:db:1d:15:30:91:66:93:
de:58:bc:cc:a5:93:24:a6:c7:33:50:90:ea:21:01:f6:21:c0:
95:05:7d:22:a7:51:e2:14:a6:3a:6e:8c:97:52:19:c4:2f:f4:
bd:22:a8:8d:72:0f:b5:bd:40:e9:db:24:10:c6:ed:0d:e1:07:
4f:95:96:a4:bc:ce:35:3f:57:eb:db:1f:e1:66:9f:80:d1:e5:
b6:fc:aa:76:5d:a6:fc:7b:b5:21:0c:12:47:ae:88:ee:76:47:
fa:75:db:e7:2f:1b:2b:ff:1a:f0:09:9d:68:00:60:03:81:7b:
ba:f5:cb:cd:62:9c:d3:27:99:a1:cc:d2:1b:a0:73:ce:1f:63:
b2:6e:8d:bf:fd:74:d0:0c:62:fe:b3:34:5b:cf:63:45:3b:c0:
22:57:75:d2:63:12:65:7d:36:af:35:63:98:32:7b:68:25:e5:
35:48:23:3b:f2:59:9b:ca:e4:9f:1d:9a:d9:cb:29:52:fe:c2:
86:ea:c8:79:b8:87:1b:eb:59:2d:62:dc:a5:d5:8d:10:a9:a6:
85:41:d9:c6:25:ea:66:a2:ac:09:ba:3e:9f:16:dc:e6:53:c7:
40:f9:1b:94:24:79:1e:ef:e1:a6:b1:91:a6:0c:30:e3:fb:78:
5e:54:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:17 2026 by rpki-client