Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: FYjboY5Y0GgAHJckk8JYe3vpTmv+PZbpYUx2GDKnIzk=
Subject key identifier: F8:A5:EC:99:06:1A:A8:BB:68:02:B1:0D:93:81:97:77:47:39:E0:10
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 01A1DFBA47C621866F9D754A058C35BA8C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1AFD
Signing time: Sun 15 Nov 2026 15:01:29 +0000
Manifest this update: Sun 15 Nov 2026 15:01:29 +0000
Manifest next update: Mon 16 Nov 2026 15:01:29 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
5: fPxq3Rnthn9rgllCccsebneIsEY.roa (hash: sOGcnnv7kw9rDNmrJkZHKgFMOL9XnFiQ5b2sRJoEIFc=)
6: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: HnWLS0yWIZMWWG6D6D6sG8I+niSchp8Oc5LtnL1EZWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:47:c6:21:86:6f:9d:75:4a:05:8c:35:ba:8c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Nov 15 15:01:29 2026 GMT
Not After : Nov 16 15:01:29 2026 GMT
Subject: CN=f8a5ec99061aa8bb6802b10d938197774739e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:a0:4d:c4:ce:9d:3d:82:55:9b:aa:7b:c6:
0b:a0:04:9a:f1:81:25:2e:d8:d2:01:cd:2d:a9:62:
83:4e:ad:c0:de:04:d6:52:6c:74:94:5f:6c:e5:46:
e7:aa:dd:75:b6:c3:f1:81:8b:f0:43:7d:3a:a6:9e:
39:14:2a:e3:e9:1f:e9:b2:dc:55:bf:77:64:58:7c:
4a:36:0a:dc:5a:94:8b:f0:20:4c:1c:57:ce:48:76:
bc:ef:53:24:09:5a:ae:7e:fd:ba:7c:40:66:c9:0c:
1e:23:4f:06:f9:fa:b9:6c:7a:f3:1a:92:bc:11:15:
87:0e:1e:57:b9:cc:92:c2:ba:75:f1:78:6d:28:f0:
05:7c:36:e8:73:a1:72:fe:79:3f:34:32:9a:62:9b:
ac:fd:50:bf:7e:9b:c0:59:2a:bc:25:7a:27:12:40:
d8:21:b9:0b:76:29:6f:9b:32:94:00:4e:f3:b3:58:
c7:d1:66:d8:c4:d4:c2:50:40:3f:cb:f0:05:ee:e9:
a5:17:c4:d0:8a:4c:82:24:32:e0:a1:e6:0f:0d:ec:
70:62:77:28:1e:d3:41:8d:e3:d6:c4:6c:90:eb:40:
bb:87:a7:6b:6c:ac:90:85:f4:f2:3c:24:df:42:b8:
ea:85:bf:39:7b:e9:9a:f0:1e:d9:de:ac:28:91:27:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:EC:99:06:1A:A8:BB:68:02:B1:0D:93:81:97:77:47:39:E0:10
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:25:ff:07:2e:dd:ad:7a:96:f3:b1:f9:e3:96:5d:24:8e:
e7:7f:16:33:26:e3:f4:0c:34:62:69:30:1a:69:83:84:8d:91:
51:d2:de:be:f8:74:b3:a6:e8:59:2f:3f:b1:89:fa:5e:cc:29:
1c:9e:b9:32:fd:e8:7b:41:fd:88:97:29:f2:18:ab:da:d8:8c:
e9:c4:c7:c4:2c:79:4e:73:a2:03:d3:d4:68:55:c6:58:5b:48:
21:ff:59:01:3b:aa:79:b2:47:70:4c:bd:72:e5:f4:ea:63:ff:
31:3d:8d:a9:45:a8:0d:e2:a9:22:43:7e:86:c2:68:f2:53:f7:
34:93:7d:9a:ab:74:3e:9a:40:23:9e:92:a7:a5:6c:98:2e:72:
c9:a8:d5:0d:d8:89:be:fe:b5:a3:68:51:41:92:ee:41:64:a9:
d6:f5:36:66:14:6e:65:b5:9c:ce:34:4f:82:41:fd:ad:db:d3:
ac:86:be:68:3e:93:18:5f:95:c0:e1:29:bd:f5:97:c4:1f:33:
13:03:5c:04:a0:a3:6c:6c:33:31:88:0d:4f:cb:96:ec:09:d8:
d2:f6:d2:c6:5f:37:e5:bb:6f:45:b5:61:18:ac:8d:77:d9:d6:
7f:2b:4f:d2:41:78:86:73:79:e6:99:4c:f7:0d:0c:d9:32:25:
07:ba:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:06:56 2026 by rpki-client