Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: 48+8BLd3us0VZUhOUxOSAE5KAciLG0eKkeUqoPXsx9g=
Subject key identifier: A2:98:00:B5:1F:A7:CB:5A:4C:05:51:32:8E:8C:10:0F:58:37:EF:61
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019DCD86B61CAE8C084BBD4F22093B8C24FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 10A2
Signing time: Mon 27 Apr 2026 06:00:50 +0000
Manifest this update: Mon 27 Apr 2026 06:00:50 +0000
Manifest next update: Tue 28 Apr 2026 06:00:50 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: IoijsuR4zJxXka5D7DgHkpdBidEWV0rPU3IdYrAHwP0=)
2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:b6:1c:ae:8c:08:4b:bd:4f:22:09:3b:8c:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Apr 27 06:00:50 2026 GMT
Not After : Apr 28 06:00:50 2026 GMT
Subject: CN=a29800b51fa7cb5a4c0551328e8c100f5837ef61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:e0:95:be:0e:9d:29:4e:81:0c:a7:87:b6:
8b:2e:74:7f:d4:a1:89:86:2a:59:60:7d:28:d5:46:
4a:28:68:19:42:80:c3:36:53:a2:39:c1:c5:a8:33:
0e:1c:89:77:f4:3c:a9:a7:e0:f2:00:21:de:17:7e:
ee:58:1e:a6:fb:e2:27:27:53:be:6a:3e:80:6a:a2:
cf:ee:5a:6e:d1:51:5e:cc:41:d6:50:7f:dc:05:05:
c4:e9:33:07:78:4a:b0:f7:37:a3:d5:4e:7e:ae:57:
5f:c3:1f:ee:33:1c:dc:7a:c6:6b:58:79:a6:bf:73:
e0:32:c2:75:e3:7d:65:91:bc:87:b8:c0:75:84:ff:
8b:e4:38:b1:e0:99:1e:2d:e5:4e:c4:54:b4:24:35:
f8:cf:b6:88:e1:d7:72:15:97:2b:14:a4:d2:76:94:
0c:fc:12:a4:0a:b4:d3:24:5b:ae:ba:df:f1:16:c4:
28:bd:41:a8:39:57:f4:aa:55:eb:d8:20:2b:5c:7a:
23:6f:51:43:81:58:ef:d3:23:c6:d5:5e:c7:e7:8a:
f4:ba:d6:3e:c6:1c:be:69:48:7f:3d:5b:52:b4:af:
9e:85:57:60:a8:70:b1:6b:36:61:68:21:50:75:9a:
47:15:ba:82:a2:fb:b0:9f:e9:46:1a:dc:41:cf:ba:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:00:B5:1F:A7:CB:5A:4C:05:51:32:8E:8C:10:0F:58:37:EF:61
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:d2:6c:cb:d8:f1:c1:45:4b:ba:4b:cd:b6:bc:4e:6e:00:
3f:38:a7:bd:6d:22:44:54:36:fc:5f:46:61:23:11:12:67:77:
ca:4d:fb:aa:81:72:19:96:33:f2:00:f0:0e:9c:8c:b1:e1:6a:
d6:e9:c9:76:36:99:1b:02:7a:1c:6b:6f:1e:6e:54:38:06:ca:
84:38:a4:7d:38:5a:de:bc:69:14:08:b8:e0:9d:04:21:b8:cd:
b9:84:63:ad:59:11:a7:f6:53:da:de:ea:21:4c:80:23:8d:5e:
8e:f3:e6:c1:58:57:92:ce:93:8e:1c:b6:23:44:2a:10:d1:f4:
64:be:1b:8b:c5:39:84:eb:be:b9:fe:07:2a:94:b0:67:8f:95:
2d:bd:23:8f:37:f3:ec:7c:90:75:e6:bf:05:88:a5:71:22:fc:
58:38:fe:22:ca:13:ca:13:74:9a:b0:f2:3b:eb:e0:f6:02:09:
b0:c7:63:07:06:2a:35:bc:9f:23:d5:98:2c:7b:f0:1b:31:a9:
75:65:53:db:e0:89:50:db:47:98:e7:32:62:46:8f:c5:a6:67:
33:14:21:5b:d8:f2:ec:3c:fd:f6:76:d9:c9:c2:fd:43:49:56:
7e:4c:d3:d3:ed:0d:5e:1f:ce:cb:01:d9:80:89:b8:5f:f7:8a:
65:f5:cc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NhrYcrowIS71PIgk7jCT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3
MDA3ZjAwHhcNMjYwNDI3MDYwMDUwWhcNMjYwNDI4MDYwMDUwWjAzMTEwLwYDVQQD
EyhhMjk4MDBiNTFmYTdjYjVhNGMwNTUxMzI4ZThjMTAwZjU4MzdlZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ3glb4OnSlOgQynh7aLLnR/1KGJ
hipZYH0o1UZKKGgZQoDDNlOiOcHFqDMOHIl39Dypp+DyACHeF37uWB6m++InJ1O+
aj6AaqLP7lpu0VFezEHWUH/cBQXE6TMHeEqw9zej1U5+rldfwx/uMxzcesZrWHmm
v3PgMsJ1431lkbyHuMB1hP+L5Dix4JkeLeVOxFS0JDX4z7aI4ddyFZcrFKTSdpQM
/BKkCrTTJFuuut/xFsQovUGoOVf0qlXr2CArXHojb1FDgVjv0yPG1V7H54r0utY+
xhy+aUh/PVtStK+ehVdgqHCxazZhaCFQdZpHFbqCovuwn+lGGtxBz7puwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKYALUfp8taTAVRMo6MEA9YN+9hMB8GA1UdIwQY
MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt
YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw
LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlPSbMvY
8cFFS7pLzba8Tm4APzinvW0iRFQ2/F9GYSMREmd3yk37qoFyGZYz8gDwDpyMseFq
1unJdjaZGwJ6HGtvHm5UOAbKhDikfTha3rxpFAi44J0EIbjNuYRjrVkRp/ZT2t7q
IUyAI41ejvPmwVhXks6Tjhy2I0QqENH0ZL4bi8U5hOu+uf4HKpSwZ4+VLb0jjzfz
7HyQdea/BYilcSL8WDj+IsoTyhN0mrDyO+vg9gIJsMdjBwYqNbyfI9WYLHvwGzGp
dWVT2+CJUNtHmOcyYkaPxaZnMxQhW9jy7Dz99nbZycL9Q0lWfkzT0+0NXh/OywHZ
gIm4X/eKZfXMbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:43:25 2026 by rpki-client