Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
File: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft (raw, json)
Hash identifier: Kc5Z6xdaSFo9SrbBnGBJX395c+TlZR9X+H85LpDf2hU=
Subject key identifier: A9:D8:66:B8:BB:67:34:E0:C2:AF:06:23:15:BC:51:C8:CB:7D:5B:7A
Authority key identifier: 1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
Certificate issuer: /CN=1c1c754b7a5b541892540d24ab98d31537974574
Certificate serial: 019D29976A1BB9B067695F7E95DB8892D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl (hash: Z3EaIiou9pkPd6cDPFsGK94hvtfYUEY3wKcZNz4SPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6a:1b:b9:b0:67:69:5f:7e:95:db:88:92:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1c754b7a5b541892540d24ab98d31537974574
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=a9d866b8bb6734e0c2af062315bc51c8cb7d5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:b3:51:0e:a2:4f:c8:15:55:32:50:0b:8b:
e6:47:61:97:f1:c2:2a:40:65:e4:b4:23:7a:2c:88:
8c:67:c7:4a:6a:6b:6a:e0:77:7b:45:bf:d3:8a:b8:
42:b2:74:8c:12:e3:fb:bb:14:a0:8f:4b:d1:36:64:
e3:24:13:27:10:a1:d8:f4:93:af:2e:ef:fa:3f:23:
d2:a0:4d:a6:a7:ba:db:cb:7a:01:18:11:b9:be:c4:
8a:d6:6d:ae:35:f3:a2:79:2a:a8:a3:d3:38:48:b5:
ab:98:8d:bb:45:1b:a4:a5:2b:0b:de:09:5d:40:b9:
f4:1d:9a:b0:f7:00:e6:91:d6:78:21:ee:c1:ab:4b:
46:31:cb:ed:98:9a:c0:5d:6a:6a:9d:fd:92:b4:f4:
98:17:8a:26:1f:5a:74:ae:58:0b:34:80:7d:a1:09:
5f:71:97:c7:a8:ac:1e:88:e7:ec:16:57:d6:7d:2f:
8f:88:7d:bb:b4:3d:61:bc:2d:e0:72:2f:0a:50:47:
51:28:55:c8:48:9b:68:fa:52:c0:c8:7c:bd:ee:7a:
51:1b:6d:f1:ff:15:20:3c:02:6a:5f:c6:3f:ae:fd:
65:a0:dd:a6:80:84:f0:e3:a3:01:6a:8e:6c:92:72:
ff:2c:9d:2a:e0:02:59:63:c6:f7:95:54:cb:aa:59:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:66:B8:BB:67:34:E0:C2:AF:06:23:15:BC:51:C8:CB:7D:5B:7A
X509v3 Authority Key Identifier:
keyid:1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:7f:5d:20:c7:e1:01:d0:6e:4e:42:32:d1:d5:f8:ae:aa:
91:25:c7:20:33:5c:e4:6b:6b:5b:98:d3:aa:c1:23:81:b0:57:
1f:38:24:67:53:0e:f4:e0:ed:ac:40:c7:af:03:48:df:17:67:
cc:4a:39:79:99:62:b5:e6:8b:36:a1:3f:3c:88:5a:da:c0:20:
62:48:12:29:3d:59:b5:c9:ee:53:4d:af:ce:1a:ff:3f:bf:a8:
76:1c:32:67:c2:ea:05:3b:18:17:e1:30:29:34:da:49:3a:81:
98:73:31:04:f7:02:db:19:ba:af:48:92:a3:d4:5f:c4:5f:1b:
db:f7:11:12:b9:56:90:ee:3c:dc:1e:98:1a:39:ec:8a:1d:27:
1f:7b:43:d7:d2:14:89:b8:81:c4:ab:ec:44:56:06:5a:1c:b4:
4c:a9:be:b6:81:f1:6d:49:3d:16:d7:62:e4:77:15:67:16:cc:
f2:af:ca:2e:08:13:e9:2b:e3:58:75:1c:a8:ab:91:16:03:51:
37:bf:d0:42:46:f7:c8:87:ac:6b:b7:a4:ef:99:00:fc:40:bd:
ca:96:89:ca:da:33:56:27:b6:6f:e7:ee:87:14:70:dc:1b:3c:
d5:ab:8c:96:de:2f:b5:dd:34:c8:f6:75:d3:83:89:38:80:fb:
65:d3:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:31 2026 by rpki-client