Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: vwTxjjGK1iEETGB9/NL5HqIf8hBrO6WHhq9uWVwkdY8=
Subject key identifier: 39:CE:EA:21:33:98:03:7E:1B:BB:1C:F5:15:D7:10:09:6D:B0:68:96
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 019D29973A6BD333AFA904A846A064A9F7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: yZZMB2e+ZL6ShZE47FHLd7EAd1219/cGImGWVlkRfQo=)
2: jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa (hash: N3EOZbDfEcrnakBa74+QQELHNWZ9acd9bm7XvC99pnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3a:6b:d3:33:af:a9:04:a8:46:a0:64:a9:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=39ceea213398037e1bbb1cf515d710096db06896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:1d:a9:98:c2:e9:91:5a:70:76:75:a2:34:
2c:2b:4e:09:29:16:ef:94:89:0a:0a:09:e4:be:32:
dc:dc:df:64:ed:03:7c:9f:d6:ac:91:58:4d:2b:96:
73:7a:69:49:5e:1b:ba:1d:43:78:78:80:4d:64:a5:
91:33:10:0c:9d:b3:d9:88:45:f2:ac:2a:19:55:86:
15:5b:e8:6b:df:93:99:0b:e5:97:9b:48:20:7f:35:
0b:1e:d0:ec:e7:5f:f5:22:32:c7:49:a4:a7:25:16:
02:ae:3e:6c:d1:62:a5:d7:64:52:ea:3c:67:3f:fd:
82:d7:26:4d:f5:df:fd:2a:07:0a:e0:b6:f5:39:27:
14:93:c0:92:7e:29:3d:ed:cc:79:cc:80:8e:18:a6:
49:25:07:9b:ef:f8:62:52:08:1a:62:2c:c5:75:46:
09:8d:dc:b8:a1:61:94:17:a6:6a:9f:3f:db:2a:f7:
80:44:75:d5:db:c2:12:e2:64:c8:b8:80:3e:87:b8:
d3:7f:7a:85:06:31:51:38:5f:a3:44:66:41:4a:77:
e2:a2:1e:9e:da:e2:97:73:2a:83:f3:c6:3b:c4:3f:
2e:2a:50:44:65:61:5c:bd:4c:b1:f6:ae:69:3a:8f:
f4:d9:49:80:19:19:56:03:7c:16:ce:a3:be:a0:f3:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:EA:21:33:98:03:7E:1B:BB:1C:F5:15:D7:10:09:6D:B0:68:96
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:d1:3e:a8:1e:40:a4:3f:0d:44:11:9c:4a:65:4a:70:2f:
e8:88:a2:68:46:91:42:27:ce:9b:34:49:96:e4:74:99:35:42:
94:16:50:d0:e6:48:16:15:6a:35:bd:d6:a1:2c:73:9f:1a:3d:
f5:79:46:f4:fc:d4:1b:c6:d8:9c:3f:5b:52:00:82:55:d8:ad:
d7:28:39:36:3b:30:82:3f:ae:38:63:cd:7a:74:e7:5a:0e:a7:
ac:d8:67:11:49:23:5f:b7:bb:d1:35:a1:70:e2:7f:e5:0d:00:
b4:31:76:0c:13:0d:77:1d:25:a1:0f:e4:67:a9:49:2c:e8:84:
cf:32:90:db:57:29:c9:03:87:02:dd:77:4e:66:ab:e5:96:d9:
24:21:91:78:65:f5:80:2c:f6:b3:02:ac:e2:a5:3d:8b:a7:19:
65:6d:dd:c4:0e:ab:20:d8:0b:dd:91:69:0d:7e:1f:b0:1d:75:
81:76:9c:b9:50:b0:86:25:a9:6e:44:54:cf:15:eb:a7:ff:51:
4d:06:0d:37:15:70:0e:1c:32:40:47:2f:5d:6f:de:da:2f:30:
bf:88:20:a5:4d:21:53:fd:17:c9:5a:71:65:31:c1:75:ce:35:
45:3b:d1:db:be:ab:1c:bb:a4:6c:b4:04:dd:38:35:cb:45:67:
7e:71:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:34:48 2026 by rpki-client