Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: go3CkAOErOynq+/SCt5B3xAPJQ3AK9t5UfdGmGnE4Kw=
Subject key identifier: 85:5D:61:FC:AC:42:59:B8:8F:2D:6D:89:77:AE:3A:D5:32:9E:FF:0F
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019CE3D9959E47804EB3BBB32C7117B552AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 1029
Signing time: Thu 12 Mar 2026 21:00:13 +0000
Manifest this update: Thu 12 Mar 2026 21:00:13 +0000
Manifest next update: Fri 13 Mar 2026 21:00:13 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: n87Lgf7ZLqjndfg63S85kWA5SsQ+DTCudr87//yjgeI=)
2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:95:9e:47:80:4e:b3:bb:b3:2c:71:17:b5:52:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Mar 12 21:00:13 2026 GMT
Not After : Mar 13 21:00:13 2026 GMT
Subject: CN=855d61fcac4259b88f2d6d8977ae3ad5329eff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:a3:d8:35:07:76:c9:68:7c:77:fd:85:60:
cd:2f:14:9a:e4:46:5b:e4:e2:b2:8a:f0:f0:73:e3:
01:21:31:63:72:dd:69:85:ea:ba:49:9a:42:0f:6b:
34:5e:99:7f:a2:7b:53:1d:57:ae:55:9e:2f:83:9b:
a5:f7:3d:bb:78:56:8a:f6:7b:46:6b:be:0d:b3:f9:
d4:a4:27:f1:85:c7:9f:99:25:4d:88:dd:4f:a8:9b:
2a:b0:96:e5:69:b9:bc:ad:37:03:00:cc:c0:1d:ba:
45:91:8a:d0:b9:47:b0:bb:5b:cd:10:0d:4e:a8:ae:
bf:af:4a:f4:d5:9d:99:7c:73:f2:fc:96:41:44:c6:
0a:ee:50:44:ea:2a:df:03:db:ea:48:c7:69:11:b9:
24:92:d0:88:59:7a:bc:c7:75:86:97:8d:01:4a:c7:
0c:86:79:23:dc:10:d7:e5:9c:8c:dc:7d:18:63:bd:
33:ab:8b:c7:89:1c:4a:3c:68:56:a6:14:cc:c0:15:
56:fe:fd:c6:f1:18:a0:10:d9:6d:36:74:d4:04:8c:
7f:0b:19:61:07:62:91:65:88:52:3e:13:98:a4:58:
d9:b5:4f:8e:1d:00:14:5d:1e:f9:9b:2f:27:b0:7d:
10:96:28:8d:98:49:1a:aa:9d:24:5a:bf:9d:60:dc:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:61:FC:AC:42:59:B8:8F:2D:6D:89:77:AE:3A:D5:32:9E:FF:0F
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:ae:23:b9:1b:d2:0c:83:af:7d:2a:bb:6d:42:0c:5a:ce:
71:d2:66:54:10:24:46:f8:d5:5c:dc:17:45:8d:d5:01:51:63:
40:65:95:86:97:b3:ff:87:62:c5:a3:c8:10:0f:26:16:9b:b3:
b4:9e:97:03:a6:4e:2f:fd:4f:43:23:e9:f3:73:ba:35:7d:a9:
92:68:50:b3:32:a5:5f:ad:09:61:92:74:ce:22:dc:74:98:36:
02:06:f6:d2:44:23:64:7f:bb:e7:a0:90:f8:d5:d7:37:4d:9b:
96:1c:f4:48:36:f4:9f:52:d5:4c:da:6d:b9:a1:45:e7:20:fc:
71:33:a2:19:a0:39:4d:5c:1b:5b:38:13:de:d0:b8:15:5d:0a:
ff:a4:b8:fd:b0:36:5a:c2:69:1d:8b:ca:9e:38:91:5a:a9:f3:
a9:b7:b7:9c:2d:7d:50:5b:06:ce:5c:ec:d0:64:47:39:77:81:
8b:b5:d0:70:49:cc:c6:09:fe:63:08:04:da:57:da:8d:73:09:
4d:55:48:59:4c:60:da:d1:22:e2:e9:0a:12:db:93:5d:37:09:
b4:0c:ab:be:1c:35:ee:f1:3c:40:3e:84:10:34:bd:92:7f:ad:
7e:4d:5f:7d:2b:a4:b2:3e:b8:25:c5:72:a8:0e:9a:cd:51:ff:
ff:f6:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:35 2026 by rpki-client