Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: cpFgnqZtiOUi/5WOd3uIVCxPsPxXQufvSm933CVhxRc=
Subject key identifier: D8:27:6F:4A:AE:33:74:AA:A1:78:14:C3:E6:3B:41:39:B4:54:CB:7B
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019D38D36F693478C33DE9DDBEC330B7D4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: XnL0oS+xYX5g9IX059PExX/m+y8apxrOSEv0R10Hi1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6f:69:34:78:c3:3d:e9:dd:be:c3:30:b7:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=d8276f4aae3374aaa17814c3e63b4139b454cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:87:99:34:9c:ba:b8:9e:30:1d:74:24:3d:
1a:aa:82:3f:89:cd:29:af:bb:8d:d4:76:32:d7:8f:
ff:7b:b0:97:55:1a:8c:41:d6:d5:5c:cb:b5:6e:86:
04:c8:f3:fe:44:a1:be:0b:f8:e5:fa:03:de:9b:97:
4a:bb:a3:2a:b3:c1:51:83:64:15:2d:6c:f9:3d:a6:
31:cc:7e:4a:57:56:0d:39:2c:49:b4:f2:4d:f8:c2:
89:3c:09:e1:8d:9c:5e:2f:13:fe:28:c1:4b:05:36:
3c:16:c9:ae:d5:3e:b0:c1:5f:7e:07:a2:6b:6a:47:
e1:b0:5a:a4:4b:bc:57:ee:7c:e1:5b:bb:75:80:a1:
ae:b7:22:56:df:ca:8c:2e:d4:a7:86:48:ca:56:29:
28:03:25:08:b3:87:be:50:97:b9:e5:f2:ea:75:2d:
1a:5f:95:01:23:51:ad:84:76:a5:b6:f2:72:31:cf:
79:cb:33:7f:42:64:d0:e7:95:da:ad:87:93:1f:7e:
46:c0:18:d4:76:f3:b9:e0:f1:c5:c1:3f:68:ab:d2:
37:21:0f:23:3a:3e:0e:ae:82:15:d8:c7:d3:60:40:
f8:9b:b3:7d:7a:48:2a:4a:c4:50:8d:95:cd:b2:9e:
3c:99:c7:55:b1:22:0b:6d:b6:0a:a2:df:d4:ac:25:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:6F:4A:AE:33:74:AA:A1:78:14:C3:E6:3B:41:39:B4:54:CB:7B
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:85:ef:cc:3b:c1:b3:a8:12:2a:5d:88:d6:3c:de:4b:27:
02:22:74:8b:21:3d:0c:cf:cc:fd:75:c4:ed:de:6c:c0:63:29:
19:80:e6:0f:5f:fc:8e:16:01:60:66:0e:16:4d:ae:fa:4c:66:
c0:7c:8b:12:1d:78:72:63:c6:fa:4c:f4:87:03:29:34:8f:60:
1d:06:35:40:39:00:88:5f:a2:1f:d5:d9:02:5f:b7:21:2e:9a:
7a:a3:a8:8b:48:d6:87:f1:04:b3:45:08:14:22:64:36:f7:2a:
86:5d:ad:79:c8:7c:2a:93:28:91:7f:02:75:59:35:dc:3b:bc:
9e:3b:68:44:be:c0:8b:4d:c0:af:50:f7:6a:e6:d4:87:42:e0:
2d:3d:36:70:35:e7:7a:ed:17:4f:e0:d9:a7:63:5f:4c:da:29:
b1:78:00:a2:e2:25:c3:fb:99:97:97:13:d5:e6:52:75:17:c9:
7d:25:d7:1c:4e:a7:3a:64:ca:ba:8b:b4:3f:24:a2:0a:1d:61:
11:63:d8:fe:14:1f:66:ca:2b:ad:3d:72:e8:75:88:04:26:f0:
aa:c1:ba:b4:81:e9:48:2e:ad:7f:bb:12:6d:89:f6:b6:e4:7d:
b3:83:8b:d4:4f:e1:65:78:57:52:74:0f:c4:e6:ae:63:35:ef:
c2:66:ec:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04029pNHjDPendvsMwt9T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1
ZTIyZmUwHhcNMjYwMzI5MDkwMTEzWhcNMjYwMzMwMDkwMTEzWjAzMTEwLwYDVQQD
EyhkODI3NmY0YWFlMzM3NGFhYTE3ODE0YzNlNjNiNDEzOWI0NTRjYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BSHmTScurieMB10JD0aqoI/ic0p
r7uN1HYy14//e7CXVRqMQdbVXMu1boYEyPP+RKG+C/jl+gPem5dKu6Mqs8FRg2QV
LWz5PaYxzH5KV1YNOSxJtPJN+MKJPAnhjZxeLxP+KMFLBTY8Fsmu1T6wwV9+B6Jr
akfhsFqkS7xX7nzhW7t1gKGutyJW38qMLtSnhkjKVikoAyUIs4e+UJe55fLqdS0a
X5UBI1GthHaltvJyMc95yzN/QmTQ55XarYeTH35GwBjUdvO54PHFwT9oq9I3IQ8j
Oj4OroIV2MfTYED4m7N9ekgqSsRQjZXNsp48mcdVsSILbbYKot/UrCXJEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgnb0quM3SqoXgUw+Y7QTm0VMt7MB8GA1UdIwQY
MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt
NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh
LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2+F78w7
wbOoEipdiNY83ksnAiJ0iyE9DM/M/XXE7d5swGMpGYDmD1/8jhYBYGYOFk2u+kxm
wHyLEh14cmPG+kz0hwMpNI9gHQY1QDkAiF+iH9XZAl+3IS6aeqOoi0jWh/EEs0UI
FCJkNvcqhl2tech8KpMokX8CdVk13Du8njtoRL7Ai03Ar1D3aubUh0LgLT02cDXn
eu0XT+DZp2NfTNopsXgAouIlw/uZl5cT1eZSdRfJfSXXHE6nOmTKuou0PySiCh1h
EWPY/hQfZsorrT1y6HWIBCbwqsG6tIHpSC6tf7sSbYn2tuR9s4OL1E/hZXhXUnQP
xOauYzXvwmbs9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:43 2026 by rpki-client