Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: nfH8gPwsAHRYVLxPmGptZrKPpqJD4KeP2zHcWOQ7hX0=
Subject key identifier: D7:A3:12:0D:75:A3:03:62:F0:B3:65:1F:A1:B2:34:7B:F5:CE:77:0C
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019D2772C57ECF3E0848D1C94E55BA502F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 104C
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: CEo6RwRx9Spac4PK6W/nlCFUU5Q33wVXF+KpQEc19JQ=)
2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c5:7e:cf:3e:08:48:d1:c9:4e:55:ba:50:2f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=d7a3120d75a30362f0b3651fa1b2347bf5ce770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:be:a1:11:c8:f8:3c:63:9d:9d:73:c0:1e:
b5:ba:58:58:68:b2:6f:c5:42:4e:ea:b9:9e:4c:03:
a3:60:2a:47:a1:6d:38:1f:fb:d5:85:bf:70:6a:2e:
ea:ca:f6:d6:27:68:38:ba:e3:41:48:ac:b4:54:fd:
3d:66:4c:d7:3f:a8:9d:49:35:75:01:71:c4:39:d6:
9f:8a:ae:3a:5a:02:c8:05:35:5e:90:08:0f:0c:83:
4f:3d:05:df:3c:3a:ff:dc:d1:4c:7a:28:39:6c:da:
55:b7:50:0e:2f:7b:45:2f:84:36:0c:e4:33:62:08:
d1:b5:c4:0f:6c:51:0c:9f:ff:28:fb:b6:e9:85:cb:
88:73:f2:47:99:00:e1:19:50:6a:b0:df:64:3c:8a:
c8:c5:d9:16:d1:45:33:5e:45:75:3c:88:28:5a:06:
a9:3f:da:aa:9e:92:75:d7:e2:db:3d:35:2b:e9:e9:
eb:0e:c5:55:d5:b9:71:5c:4e:42:54:18:e4:b6:e6:
0c:fc:c1:b9:03:d9:8d:af:b1:20:9a:fc:6c:64:fa:
3a:c4:7a:03:1c:89:f8:e4:f1:61:2f:a8:76:82:e8:
fb:e5:1a:7c:76:6e:71:55:30:26:fc:09:0a:5f:fe:
b5:58:fb:a2:21:d7:fd:41:d8:aa:f1:f9:20:f5:3b:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:12:0D:75:A3:03:62:F0:B3:65:1F:A1:B2:34:7B:F5:CE:77:0C
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:b3:10:eb:78:7a:03:14:55:66:50:97:1d:01:1a:4f:42:
07:cf:94:65:6a:31:b3:82:03:d8:1a:eb:42:aa:d3:07:3e:b6:
af:1e:ab:68:ba:61:49:42:07:8c:2c:e1:6b:54:79:3c:12:8c:
88:5c:26:a6:ee:ed:87:c0:12:32:26:a9:f5:08:72:ea:aa:12:
18:e6:40:ca:b7:05:ba:37:77:40:2d:81:eb:38:cc:20:5b:92:
aa:1b:f5:68:5b:25:9e:49:f4:23:40:29:eb:38:46:2f:1d:49:
50:cd:3c:6b:c4:74:2a:6f:03:f0:19:7d:5b:b7:b0:9e:fe:90:
25:7f:c5:67:65:eb:c7:08:12:90:5f:e3:e2:8c:9e:d7:69:17:
df:58:b2:40:8d:ec:5c:b2:35:b7:80:93:a1:6a:34:54:a6:44:
b1:fb:ab:e6:1d:13:f8:8e:44:0a:79:7d:c0:3c:e8:2f:52:3a:
41:de:94:90:15:38:42:01:29:02:db:31:61:3a:27:e4:d9:fb:
06:d7:00:1c:00:c4:80:1a:5f:fd:32:6c:35:b2:c2:1f:5b:30:
c7:bb:f3:0f:b0:9b:92:89:23:95:2f:30:31:58:90:fb:b3:13:
b4:28:2c:48:90:70:90:42:38:32:e8:e3:43:a6:18:f1:e8:00:
3c:56:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:39 2026 by rpki-client