
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: 92mGjkUvwfaBJWVdZSa8XtTrMsjy0soCfn6qqxmlTYw=
Subject key identifier: 61:CB:A1:ED:7C:B3:B2:5D:35:FF:E2:3B:C7:C5:49:20:3D:64:9A:AF
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 019D2704A488E8BA03A464F8E980F746B418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: MDpoihgCs5PVmUq27aH5YTc86ZKGB3ddCL2cGO10Rlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a4:88:e8:ba:03:a4:64:f8:e9:80:f7:46:b4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=61cba1ed7cb3b25d35ffe23bc7c549203d649aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:52:da:c1:76:fd:1f:f4:63:d5:54:9f:be:
53:5c:9b:76:3c:31:97:13:3a:42:dc:15:f2:18:33:
81:f1:ed:1c:e3:8e:6c:20:76:cf:93:13:3f:31:5f:
5c:70:4e:ea:81:fd:2e:cd:0b:79:ea:34:ed:84:c2:
46:93:a6:64:e7:0d:a2:3f:c5:f4:d7:84:cc:ae:d6:
a8:52:9c:3c:cd:6d:7b:b0:ac:91:7d:54:c2:fe:f7:
89:4a:95:3f:b8:fb:a1:b0:ca:d0:59:30:f8:32:55:
52:5e:66:ce:6a:22:7d:d0:1c:af:00:33:56:4b:50:
7f:e2:74:9d:03:de:5d:dd:83:08:fc:d8:95:dc:bf:
df:80:90:9a:2e:b5:e2:a5:65:60:00:c3:6a:1f:ca:
11:c2:e5:a2:4c:93:71:41:cb:d1:df:83:d3:e2:9b:
9e:87:b7:f5:43:eb:93:3e:55:56:f7:a1:1d:fb:06:
31:ea:4c:4d:05:42:c7:31:f4:68:a0:7a:d6:11:04:
d1:57:27:c3:de:ba:eb:94:75:fc:42:f6:db:7d:0f:
d4:ba:03:d0:07:2d:bd:8f:d6:c7:eb:27:e3:e0:94:
3e:42:30:d1:63:45:44:5b:5f:11:7e:2e:3d:6c:16:
3d:61:bd:60:9b:9e:86:b8:95:bf:75:48:35:2e:11:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:A1:ED:7C:B3:B2:5D:35:FF:E2:3B:C7:C5:49:20:3D:64:9A:AF
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:30:22:e1:12:ac:ef:49:b6:07:da:9d:d4:fe:6c:1d:51:
c0:4a:ef:43:50:34:35:0e:d0:c8:28:26:37:d7:64:f5:bf:51:
a1:c1:97:d6:a8:3f:55:37:5e:8e:10:f3:91:5d:54:6e:16:73:
f7:6f:9b:64:09:f8:ba:f0:7a:e7:16:9d:f3:a1:7b:f7:27:68:
a0:2d:f5:1c:a4:3a:9f:30:81:ed:17:65:08:15:a2:28:f8:3c:
ea:9a:96:93:7c:a1:22:8e:2c:f9:e9:a2:13:1e:78:40:3c:7b:
8f:6b:6c:9d:11:73:7c:81:61:d5:a7:a9:c5:66:ec:ce:16:ed:
87:d0:af:9b:50:e5:c6:89:f9:a5:54:03:c2:88:9c:11:59:ef:
18:64:74:08:ed:77:25:2e:eb:a0:d9:da:67:4e:e6:44:0c:d7:
0e:e1:85:87:c9:9c:d6:4c:20:dd:eb:19:27:ae:c2:ad:6b:3d:
66:53:b2:07:d5:82:b4:77:0f:99:65:67:76:e3:f8:5e:fa:81:
5c:97:93:eb:8c:44:8d:d8:6a:cd:89:1e:c7:1c:2e:e2:be:24:
cf:db:89:59:b9:ce:5b:e6:80:2a:1f:56:1c:73:6b:38:c5:bc:
a0:60:8a:42:0a:91:ee:dc:ae:2f:1b:3a:3d:cb:7d:a5:f7:b0:
bc:e7:6d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKSI6LoDpGT46YD3RrQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYmJkM2UxYmNlNjcyNTFiNThmMjZjZmQyNWZkNDAxNTY0
MTY2MDMwHhcNMjYwMzI1MjIwMTQ4WhcNMjYwMzI2MjIwMTQ4WjAzMTEwLwYDVQQD
Eyg2MWNiYTFlZDdjYjNiMjVkMzVmZmUyM2JjN2M1NDkyMDNkNjQ5YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme5S2sF2/R/0Y9VUn75TXJt2PDGX
EzpC3BXyGDOB8e0c445sIHbPkxM/MV9ccE7qgf0uzQt56jTthMJGk6Zk5w2iP8X0
14TMrtaoUpw8zW17sKyRfVTC/veJSpU/uPuhsMrQWTD4MlVSXmbOaiJ90ByvADNW
S1B/4nSdA95d3YMI/NiV3L/fgJCaLrXipWVgAMNqH8oRwuWiTJNxQcvR34PT4pue
h7f1Q+uTPlVW96Ed+wYx6kxNBULHMfRooHrWEQTRVyfD3rrrlHX8QvbbfQ/UugPQ
By29j9bH6yfj4JQ+QjDRY0VEW18Rfi49bBY9Yb1gm56GuJW/dUg1LhEXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHLoe18s7JdNf/iO8fFSSA9ZJqvMB8GA1UdIwQY
MBaAFB270+G85nJRtY8mz9Jf1AFWQWYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAt
Y2Y4YjAxZjZlZjE3LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAtY2Y4YjAxZjZlZjE3
LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaQwIuES
rO9JtgfandT+bB1RwErvQ1A0NQ7QyCgmN9dk9b9RocGX1qg/VTdejhDzkV1UbhZz
92+bZAn4uvB65xad86F79ydooC31HKQ6nzCB7RdlCBWiKPg86pqWk3yhIo4s+emi
Ex54QDx7j2tsnRFzfIFh1aepxWbszhbth9Cvm1Dlxon5pVQDwoicEVnvGGR0CO13
JS7roNnaZ07mRAzXDuGFh8mc1kwg3esZJ67CrWs9ZlOyB9WCtHcPmWVnduP4XvqB
XJeT64xEjdhqzYkexxwu4r4kz9uJWbnOW+aAKh9WHHNrOMW8oGCKQgqR7tyuLxs6
Pct9pfewvOdtnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:42 2026 by rpki-client