Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: 4G+/JbSqRyvX9ajDKwWhdmGiEVZZiA18RPrmvFjfrIg=
Subject key identifier: 94:1A:0F:1C:02:3B:CD:F2:EF:EE:4F:44:5D:87:41:2A:AE:FB:F3:FD
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019D29978151EE696BA8CB7579CE726D42D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0777
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: 84lhNVWjfCNBvr3PCV47ce0nnfU.roa (hash: 4T3jn28U+vBZ4NxTYxbLOUMX86XF3V96DLzXoQSnwmA=)
2: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (hash: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=)
3: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: IfIJ0xQ6hAue4SjFEBiva2lRtFfSCfXdUc9uiMgYKVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:81:51:ee:69:6b:a8:cb:75:79:ce:72:6d:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=941a0f1c023bcdf2efee4f445d87412aaefbf3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:fb:6b:12:4c:7f:9d:ba:dd:13:23:ff:32:
fe:4c:0c:1f:6b:7b:51:8f:02:63:4d:5b:14:2e:11:
52:71:f4:6c:9c:b0:9c:75:ad:6e:35:fc:3e:63:e0:
f3:86:1c:87:8b:5b:e4:a5:cd:72:9f:e2:4c:c2:24:
17:c8:1b:14:cd:0e:09:b0:96:05:ce:05:9b:b3:e0:
ab:f1:9a:bd:81:5a:56:bc:14:5b:4c:ea:26:c2:90:
b5:68:e3:08:57:84:93:4d:ab:9f:28:69:52:e4:93:
9e:36:09:66:14:56:cc:1a:62:75:74:ce:90:fe:1d:
25:8b:de:98:95:71:2f:6b:95:0e:fd:6f:13:4a:9a:
4f:b1:07:b7:42:bd:9f:b4:05:e7:36:01:d1:24:af:
56:f1:97:e7:57:a2:14:0a:b0:c4:1e:21:b2:6c:4a:
38:db:98:ed:17:59:6f:9e:dd:da:cd:34:a2:a7:af:
e8:95:44:1b:80:fd:f8:ce:4d:83:bb:7b:f6:5e:91:
b2:e5:d3:28:9e:40:c7:87:44:3c:f5:7d:0d:3b:ee:
17:c5:f4:d6:b2:c2:66:1c:b8:d9:68:14:77:57:37:
27:e6:48:2a:8b:b5:a8:99:df:c8:b0:41:6d:22:9e:
f7:52:a6:f9:fe:fe:3d:4b:2b:a3:b9:57:4b:57:68:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:0F:1C:02:3B:CD:F2:EF:EE:4F:44:5D:87:41:2A:AE:FB:F3:FD
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:28:d9:2a:fc:69:f6:56:29:a8:6f:71:f4:a0:ba:96:94:
e5:41:17:f8:f4:bf:1f:a6:7d:15:39:e8:e1:1c:28:43:0b:8c:
8b:c8:0e:ac:82:c4:1c:ac:ee:6b:85:c2:f2:02:47:38:2b:97:
5d:59:c9:80:c4:11:1d:dd:81:3d:8c:e6:ae:73:11:54:01:a0:
05:fd:4f:60:75:63:05:78:88:53:6b:e5:45:8b:09:b6:c4:c1:
0e:c6:2d:12:ae:91:c2:ca:c0:52:29:21:a8:98:a2:66:da:dc:
95:b4:45:54:80:67:89:82:e8:ac:25:1a:40:17:1d:f4:90:b4:
0f:0e:46:cd:60:c7:e4:d0:1f:02:39:bb:42:6f:ae:d0:ea:ed:
b6:1f:bc:6b:a8:ed:ee:40:d3:fe:d6:f9:4c:da:94:ea:ac:9f:
46:62:e3:b4:f7:cc:d3:12:b2:a8:d0:d4:7a:8e:ab:0a:b3:f1:
80:6d:01:15:09:60:96:44:68:3c:31:e7:b1:3e:16:fc:bb:ac:
07:bb:3c:41:4b:fa:e9:69:b2:e8:44:de:33:5d:f0:66:5f:16:
fe:74:ee:a3:4f:35:2f:ed:5a:0c:d9:6d:42:3d:e9:76:38:23:
bc:92:a6:6b:d4:4a:c5:da:56:71:d4:75:6b:0f:fe:b3:78:f1:
83:55:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:33 2026 by rpki-client