Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: 41/ZjjT8xzzN0te8BEUk1Pqr8/FJc7fLXDmTwb1Xadw=
Subject key identifier: 26:B3:E8:BC:46:18:53:B2:7F:13:D8:E3:CF:2C:AB:98:6F:56:04:1A
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 019D37F763DADE3AD94DF2B28E4D63E85FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: 3yJLzOP+2Y4rwHall0HyM1+L8oi6EZ0yQeOP5dECTOQ=)
2: xd4uF5A-A5iD95Zuer1EQgUg4c4.roa (hash: zL8osWE5mYbHuTzixEhig2aehz5wUK5OJXXALOyQ/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:63:da:de:3a:d9:4d:f2:b2:8e:4d:63:e8:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=26b3e8bc461853b27f13d8e3cf2cab986f56041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:a1:96:a8:46:cb:d2:71:89:07:5f:1f:e1:
12:f5:97:53:69:1d:c4:7c:45:a0:15:35:0a:50:c9:
25:b2:4b:1c:3d:36:b3:5b:dd:ae:85:c3:e7:59:68:
73:be:ae:4d:a7:60:0d:6f:c1:4e:87:93:59:b8:0f:
65:d1:b6:7b:69:19:97:92:30:8c:2a:57:af:a4:1b:
07:d9:3e:12:7a:c8:24:e1:4f:3b:9e:8f:aa:34:c2:
c8:9f:a8:c0:66:c9:a2:8a:5f:ed:74:bd:eb:2c:d1:
02:3a:3d:66:09:62:55:55:59:a1:3e:69:e0:b1:74:
52:7b:40:a9:e2:44:7c:2e:82:43:f3:e1:ca:69:8f:
20:39:de:c6:3f:48:2e:de:a7:12:6f:6e:91:c8:8e:
18:f0:e1:c9:24:a1:7c:5d:cb:b1:56:98:d4:79:bc:
bf:87:e6:c2:ab:b8:bd:40:66:91:d4:3c:40:1a:fa:
f2:22:7b:e1:d5:5a:65:72:a8:6a:6f:31:15:1b:95:
05:e6:fb:11:d3:2e:42:2b:c2:e3:86:75:ff:c0:6e:
51:05:af:26:b0:2d:28:82:56:6f:43:f1:99:7d:7a:
07:a7:ce:8c:3a:14:e5:09:2f:ee:61:44:3b:56:c5:
d7:45:80:35:d9:9c:d0:74:5b:15:98:8b:55:8e:db:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:E8:BC:46:18:53:B2:7F:13:D8:E3:CF:2C:AB:98:6F:56:04:1A
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:56:8a:a9:2f:0f:5b:c1:c2:46:59:c0:f6:64:5b:fa:c9:24:
a1:e9:30:a1:42:d0:b5:9b:99:71:04:11:ed:46:d1:6a:f0:fd:
ef:e9:7f:c3:23:a2:90:1e:c7:97:d3:ae:bf:07:5d:e2:bd:19:
b6:87:0e:0a:5e:d3:be:ef:40:c5:83:0d:9f:83:47:86:b3:25:
e5:45:2c:00:e9:2f:1f:11:45:f5:76:80:71:e4:dd:81:d2:6f:
1f:35:8d:b6:8f:c4:9b:a8:ba:c6:6c:e5:d8:82:8d:31:ad:b5:
f2:0c:cf:85:68:e8:6b:0a:bb:cc:71:2b:e4:8a:34:22:10:61:
a9:38:17:21:d6:bf:e1:12:3a:17:a7:a5:32:a1:c5:69:b6:df:
42:d5:56:1d:ab:d7:7c:72:fa:35:c6:d7:4c:3b:93:17:cd:8f:
66:db:59:01:f2:b9:31:01:ff:74:da:52:00:1a:c3:58:54:e8:
2e:fc:97:62:7b:ac:9d:24:4a:cf:fd:ad:46:d3:f6:5c:d6:f0:
b3:eb:39:fe:c0:f0:25:a3:d0:28:e7:5b:4b:cd:52:7f:1b:05:
8c:80:a1:d1:50:5d:ec:e1:3c:62:95:5e:f7:72:fa:59:10:69:
57:c4:b1:f7:28:c2:9c:3e:e3:03:46:16:74:e4:94:b2:99:3b:
07:ef:ed:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392Pa3jrZTfKyjk1j6F/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm
NzY2ODAwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
EygyNmIzZThiYzQ2MTg1M2IyN2YxM2Q4ZTNjZjJjYWI5ODZmNTYwNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HShlqhGy9JxiQdfH+ES9ZdTaR3E
fEWgFTUKUMklskscPTazW92uhcPnWWhzvq5Np2ANb8FOh5NZuA9l0bZ7aRmXkjCM
KlevpBsH2T4Sesgk4U87no+qNMLIn6jAZsmiil/tdL3rLNECOj1mCWJVVVmhPmng
sXRSe0Cp4kR8LoJD8+HKaY8gOd7GP0gu3qcSb26RyI4Y8OHJJKF8XcuxVpjUeby/
h+bCq7i9QGaR1DxAGvryInvh1VplcqhqbzEVG5UF5vsR0y5CK8LjhnX/wG5RBa8m
sC0oglZvQ/GZfXoHp86MOhTlCS/uYUQ7VsXXRYA12ZzQdFsVmItVjtu8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaz6LxGGFOyfxPY488sq5hvVgQaMB8GA1UdIwQY
MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt
YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz
LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelaKqS8P
W8HCRlnA9mRb+skkoekwoULQtZuZcQQR7UbRavD97+l/wyOikB7Hl9Ouvwdd4r0Z
tocOCl7Tvu9AxYMNn4NHhrMl5UUsAOkvHxFF9XaAceTdgdJvHzWNto/Em6i6xmzl
2IKNMa218gzPhWjoawq7zHEr5Io0IhBhqTgXIda/4RI6F6elMqHFabbfQtVWHavX
fHL6NcbXTDuTF82PZttZAfK5MQH/dNpSABrDWFToLvyXYnusnSRKz/2tRtP2XNbw
s+s5/sDwJaPQKOdbS81SfxsFjICh0VBd7OE8YpVe93L6WRBpV8Sx9yjCnD7jA0YW
dOSUspk7B+/tAg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client