Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: 5eWNHhF2nHw3bxd+CDyIGcltbRHnsl0zHxK8e1A/9rM=
Subject key identifier: CD:BB:69:7B:64:DF:1B:0B:A1:B7:D1:59:70:02:94:7C:20:FC:B6:B0
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019D2816D90BB4AD8DF4312CB8D1D7D473E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 06E6
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: 8LTCNsodIxU5JJvcg3r7lkXMO5MnHQL1wvg09iZlnLk=)
2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d9:0b:b4:ad:8d:f4:31:2c:b8:d1:d7:d4:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=cdbb697b64df1b0ba1b7d1597002947c20fcb6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:0d:30:1d:d6:53:95:88:f1:15:01:65:ed:
a9:65:47:e5:e3:5e:76:a6:e6:30:e4:de:54:f6:a6:
a5:2b:45:09:28:43:5f:0e:e5:c2:38:cc:24:7d:2d:
57:5f:34:3a:fd:d1:c7:c4:dd:42:95:bb:1d:40:73:
41:64:11:57:b6:02:98:4f:2a:8c:c0:6e:20:32:28:
1e:48:3b:5d:62:26:14:e8:ab:ba:fb:f7:18:43:74:
ed:65:9c:53:fe:71:4d:2f:d0:ba:d3:c3:fb:c7:60:
b0:bb:bd:8a:a4:3e:53:ac:5a:45:c0:df:30:99:2f:
3f:63:f7:cc:be:6e:c4:8b:6e:6c:4a:86:a0:ea:24:
47:e4:f6:21:ad:43:3f:bc:07:fa:33:cd:91:a5:8c:
10:67:8b:9b:67:f6:03:df:16:46:4b:d0:7a:ec:3d:
71:14:c7:7c:85:2d:f2:9f:0b:47:ef:81:9c:7d:3e:
3d:b9:09:e1:93:ea:d8:cc:20:ab:f2:86:32:0d:e8:
04:34:1f:69:af:98:8d:4b:3c:f0:c3:d2:fe:69:36:
65:0e:fe:26:f3:60:9a:44:6e:65:a5:1f:39:f2:69:
28:84:75:c0:39:53:18:76:40:64:28:52:bd:f0:01:
f1:75:9d:7c:62:aa:31:d3:9d:3a:38:2b:fa:3f:65:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:69:7B:64:DF:1B:0B:A1:B7:D1:59:70:02:94:7C:20:FC:B6:B0
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2c:80:7b:93:3f:14:24:2f:e4:90:d1:e6:3d:74:6c:91:92:
1f:b9:b4:c5:34:11:fa:6f:67:cf:cb:b7:1c:6a:d8:6d:9e:aa:
5b:73:49:83:78:a7:d3:0c:ed:39:e0:ed:c7:9a:30:cd:4f:87:
6b:78:a7:97:0c:ca:1d:e0:fb:d1:b5:4b:ba:b2:92:b7:27:38:
6a:a2:ae:ca:8e:44:f3:70:9d:aa:cf:61:18:90:11:35:61:45:
9d:42:1d:0a:93:43:13:c1:c3:a6:f0:0e:bc:92:81:c6:98:13:
b8:15:85:70:2a:f9:41:c6:2f:be:ee:c9:c6:49:c1:49:92:97:
55:72:25:3a:6d:9c:ac:91:77:30:e6:f6:05:24:6a:1f:6d:55:
da:4e:07:ab:04:39:52:ab:5a:79:02:d6:14:67:aa:cf:37:6b:
95:bf:d4:ba:5f:01:40:da:df:bd:ae:e0:cc:aa:64:3e:a7:82:
bd:54:3e:a7:ab:1c:c5:f0:a2:76:3f:ed:38:52:23:43:b5:03:
c4:a3:dc:5a:0c:17:c6:24:b2:7b:65:6f:c9:ff:f4:cf:89:a1:
27:27:8c:47:cc:09:58:94:d1:1d:63:1a:27:4b:63:a9:dc:bd:
60:a3:38:f3:cc:48:6d:a7:cc:2f:6a:93:c1:a7:3f:3e:df:20:
11:1a:d8:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFtkLtK2N9DEsuNHX1HPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk
ZDQ5YTAwHhcNMjYwMzI2MDMwMTE5WhcNMjYwMzI3MDMwMTE5WjAzMTEwLwYDVQQD
EyhjZGJiNjk3YjY0ZGYxYjBiYTFiN2QxNTk3MDAyOTQ3YzIwZmNiNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbYNMB3WU5WI8RUBZe2pZUfl4152
puYw5N5U9qalK0UJKENfDuXCOMwkfS1XXzQ6/dHHxN1ClbsdQHNBZBFXtgKYTyqM
wG4gMigeSDtdYiYU6Ku6+/cYQ3TtZZxT/nFNL9C608P7x2Cwu72KpD5TrFpFwN8w
mS8/Y/fMvm7Ei25sSoag6iRH5PYhrUM/vAf6M82RpYwQZ4ubZ/YD3xZGS9B67D1x
FMd8hS3ynwtH74GcfT49uQnhk+rYzCCr8oYyDegENB9pr5iNSzzww9L+aTZlDv4m
82CaRG5lpR858mkohHXAOVMYdkBkKFK98AHxdZ18Yqox0506OCv6P2VehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM27aXtk3xsLobfRWXAClHwg/LawMB8GA1UdIwQY
MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt
YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3
LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayyAe5M/
FCQv5JDR5j10bJGSH7m0xTQR+m9nz8u3HGrYbZ6qW3NJg3in0wztOeDtx5owzU+H
a3inlwzKHeD70bVLurKStyc4aqKuyo5E83Cdqs9hGJARNWFFnUIdCpNDE8HDpvAO
vJKBxpgTuBWFcCr5QcYvvu7JxknBSZKXVXIlOm2crJF3MOb2BSRqH21V2k4HqwQ5
UqtaeQLWFGeqzzdrlb/Uul8BQNrfva7gzKpkPqeCvVQ+p6scxfCidj/tOFIjQ7UD
xKPcWgwXxiSye2Vvyf/0z4mhJyeMR8wJWJTRHWMaJ0tjqdy9YKM488xIbafML2qT
wac/Pt8gERrYnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:35 2026 by rpki-client