Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: ePMax1PyzHoADcLsPbtPTvO6/F81BLaUMT33GqWPGEo=
Subject key identifier: CB:41:9E:A9:F5:45:9F:E8:60:DA:0F:51:1A:AC:D1:67:99:EE:26:0F
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019D2771E1DF9A4A55A41C46BBDBA20FAE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: 2c5T24dwElDCBuaQRiyQQj9OkLBKiHMbIRc3uvfgWSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e1:df:9a:4a:55:a4:1c:46:bb:db:a2:0f:ae:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=cb419ea9f5459fe860da0f511aacd16799ee260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f1:98:c8:da:0d:cb:02:81:75:6d:29:57:e1:
16:27:85:66:83:0c:e1:2e:f6:26:ed:0e:f3:aa:d4:
6d:18:d0:2e:5a:2e:dc:28:cb:05:b1:8d:c1:e2:2d:
8b:8f:8d:c2:ac:df:40:c0:75:ac:e9:2b:44:7c:12:
d0:54:fc:2e:47:df:6a:f6:cf:01:e3:65:26:fa:88:
11:e5:00:b8:da:05:b9:75:34:bf:44:3e:48:4e:0d:
dc:12:9d:57:07:59:78:eb:60:c0:64:61:9d:c8:62:
1d:0f:e1:fd:93:2e:9d:a6:2c:99:1c:95:44:0e:2d:
84:e4:d8:0b:b9:8d:c2:16:33:e8:23:ca:47:07:2c:
11:6a:b0:be:fe:a4:4e:94:ef:d4:79:7d:14:cc:5a:
d5:98:89:c3:6b:f0:9f:82:e2:70:89:09:ba:d3:7f:
cb:1f:ae:21:7c:59:39:95:3b:07:21:97:64:2c:55:
dd:f4:4b:b2:0a:5d:25:ab:c7:62:12:92:03:74:75:
36:fb:07:2d:0f:37:85:88:35:b5:32:e8:fd:e0:5b:
cc:1e:1c:8d:b3:83:2c:9e:06:0d:18:f1:c2:9f:66:
c4:6f:30:83:67:9d:7d:ed:91:5f:36:69:83:b8:fd:
a2:35:ea:78:0c:f2:33:f5:90:2e:66:3d:c9:b8:8e:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:9E:A9:F5:45:9F:E8:60:DA:0F:51:1A:AC:D1:67:99:EE:26:0F
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:0c:92:7b:f5:1f:ab:16:91:13:2b:5c:99:10:30:92:02:
74:32:e6:07:1b:d3:05:9b:14:58:27:75:fb:a2:82:b5:66:65:
63:7b:1b:d8:cd:84:32:2a:6b:56:63:39:3b:ca:d5:2e:79:91:
32:b5:20:86:2e:9c:c2:c1:a2:98:d8:7c:81:30:f1:02:3f:e2:
05:f9:95:cc:97:cd:bc:c9:6d:d1:e8:10:b8:f4:86:b0:12:5e:
7d:60:6a:28:ba:a5:a2:36:cb:f9:aa:61:7f:ea:b0:99:57:62:
22:31:8b:b8:16:3a:b7:78:02:a5:55:f6:ed:8f:7f:f7:c5:de:
e3:8e:e3:f7:a1:77:04:42:e2:31:3f:17:eb:a9:b8:f3:be:b6:
94:b3:e3:d7:86:89:d5:49:81:1c:96:a2:b4:ad:dd:7d:d2:4e:
4a:52:09:13:87:4d:c5:5b:09:16:a2:cc:63:fe:fe:2d:72:a6:
49:a9:eb:7a:45:a3:2c:70:07:40:e5:60:ce:78:9e:53:25:b8:
6e:26:b9:91:3a:45:fb:79:13:c0:8e:6e:2b:96:48:40:85:53:
84:56:0b:6e:f4:98:09:7f:82:29:c4:b1:2a:5e:31:f4:0d:38:
77:88:99:39:ce:9b:ee:e4:a7:03:15:99:d3:3a:a9:90:c9:dd:
4c:81:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:14 2026 by rpki-client