Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: 99iU+gtku6HfCiXuSmUoaBYJqkoMgiknOkBRSdCFBIA=
Subject key identifier: 2C:6D:7D:D2:AD:C5:1D:29:67:96:0F:09:E6:0E:D2:5C:24:7D:AB:BF
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019E1EA2A96A784A20EC2DAED881A0F5B4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 10CC
Signing time: Wed 13 May 2026 00:00:37 +0000
Manifest this update: Wed 13 May 2026 00:00:37 +0000
Manifest next update: Thu 14 May 2026 00:00:37 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: 9aH+hG4rzLxsrkmgSyz/MugLguYartirYtLAZQw/A44=)
2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a9:6a:78:4a:20:ec:2d:ae:d8:81:a0:f5:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: May 13 00:00:37 2026 GMT
Not After : May 14 00:00:37 2026 GMT
Subject: CN=2c6d7dd2adc51d2967960f09e60ed25c247dabbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:3f:c5:2d:4f:99:58:2b:96:c2:88:02:5b:
6a:a9:52:94:67:a5:f5:09:52:2d:cf:c8:71:ac:53:
e6:97:f2:6d:ab:c3:b6:4a:41:76:cb:fb:09:ce:0a:
05:f2:e4:8d:49:14:b9:76:d9:c9:81:21:d6:b3:1a:
d9:b4:c4:be:6b:71:c3:a4:dd:aa:01:04:c4:7c:5a:
8c:49:21:9d:de:23:07:d6:38:03:f1:5f:0a:aa:e4:
97:cc:96:9f:7d:0b:c4:44:4d:ab:2b:e9:53:ac:7c:
02:e9:50:f0:93:1b:31:2b:ab:b7:67:06:41:38:42:
bb:31:a1:ac:d7:3a:17:a7:1e:57:1c:16:74:e9:d8:
a7:60:ad:3d:cd:06:02:b7:64:ab:60:af:c1:cc:c3:
cd:78:09:3d:02:14:8c:73:14:e1:96:fb:80:76:b1:
f2:bf:b0:95:e8:8c:e5:5c:18:5c:37:16:c4:05:e1:
93:fc:ef:1a:31:77:c8:5b:e8:44:c6:f1:bf:99:4d:
4d:c9:ed:0b:1e:b6:e8:18:35:3c:8c:d5:95:42:9d:
f5:5a:10:ca:32:75:41:00:1b:9a:f5:bd:84:bf:3c:
e3:20:55:d1:c6:f6:37:dd:d7:9e:fe:3c:14:9a:a8:
fa:7d:cf:95:ce:40:8a:0f:0a:01:ef:d2:b4:7a:2a:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:7D:D2:AD:C5:1D:29:67:96:0F:09:E6:0E:D2:5C:24:7D:AB:BF
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f9:a9:d5:ae:0b:94:af:49:a3:18:f8:47:2f:55:dc:62:ec:
7f:dc:42:78:84:0a:db:da:db:66:47:5b:e1:93:96:33:47:4c:
17:0b:26:4c:d4:48:09:21:3b:8d:5d:cf:be:12:24:9a:7e:be:
61:51:1a:04:e6:b8:40:8f:a2:79:5a:b0:49:20:24:69:ba:96:
c1:5d:fa:f1:46:a5:c9:ca:09:ff:01:2d:40:40:4e:07:da:4e:
b6:fb:4f:cf:af:92:07:d0:ac:ff:ce:8f:ad:09:79:5c:8e:53:
83:e6:6b:a7:e7:e1:b7:00:5c:54:02:3c:32:32:84:34:c4:cc:
88:22:3c:75:fc:9e:4b:e5:c4:b4:a4:13:d0:4b:33:81:ab:41:
53:75:f9:98:ab:04:83:9e:ee:bc:a7:60:14:9b:46:b2:db:34:
cb:e4:71:ff:fe:ee:24:36:f8:82:d9:80:00:55:04:2d:12:9d:
a1:99:62:cc:4a:d3:ef:cc:22:ea:5e:42:36:2d:25:8a:8b:b1:
f0:b9:01:1b:fc:78:8c:15:30:b7:3d:3b:15:48:0a:ce:7a:d4:
20:78:50:72:4b:0c:fb:e5:54:49:6c:11:07:08:f0:8b:a1:04:
27:02:5e:06:65:73:43:e1:41:f2:26:cb:66:26:ce:05:cf:40:
ec:a7:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:59 2026 by rpki-client