Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: BlN29iDURGSHzRE9f/ZnFbTtNXFN5WAyZm4zh1T7Tsw=
Subject key identifier: 3C:D9:77:AA:A8:86:68:E9:AD:F3:09:2B:D1:53:87:7E:3D:68:18:BD
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 01A183E35C9480402680CF35EC584340CCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 19:01:17 +0000
Manifest this update: Wed 28 Oct 2026 19:01:17 +0000
Manifest next update: Thu 29 Oct 2026 19:01:17 +0000
Files and hashes: 1: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: YiKYMLizRW86dgK4IaYpi7TCO6w+jtdAiSpaSVmNUJM=)
2: jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa (hash: N3EOZbDfEcrnakBa74+QQELHNWZ9acd9bm7XvC99pnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:5c:94:80:40:26:80:cf:35:ec:58:43:40:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Oct 28 19:01:17 2026 GMT
Not After : Oct 29 19:01:17 2026 GMT
Subject: CN=3cd977aaa88668e9adf3092bd153877e3d6818bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:ac:0f:1e:55:89:c1:cb:73:37:1b:14:07:
1e:45:86:83:21:8b:56:47:1c:92:34:d4:2f:3d:da:
6e:8f:b0:fe:4d:0c:b6:f3:ee:12:b6:16:a0:20:bc:
7e:b5:eb:53:5b:bc:be:93:4a:15:7c:ad:f0:17:7c:
eb:93:50:2b:85:91:f0:49:28:ff:16:03:8f:64:a6:
cc:c7:87:35:86:f3:36:79:f6:f3:73:84:a7:6d:e8:
2f:bb:ca:8e:00:25:a1:89:b6:f7:63:d3:5b:78:3a:
50:28:39:a2:db:eb:43:83:bc:30:c7:35:8a:f2:30:
71:f3:f4:1c:97:97:a1:20:46:14:37:60:7b:6d:56:
16:4f:c7:83:bd:b7:9d:59:64:27:2c:70:bb:88:0a:
f7:29:c2:f6:9b:eb:59:6a:a1:9d:df:0c:7a:65:9b:
b4:ed:ab:c6:75:18:ae:4f:16:5f:20:ad:dd:41:50:
cd:78:e7:7a:b0:db:80:ff:12:e8:1b:09:9d:99:0b:
7a:26:a2:18:d5:a0:33:1a:1e:6d:05:4e:41:83:7b:
b9:78:3f:05:d2:4b:e8:2d:67:1c:a3:88:26:b8:ef:
7d:93:64:ff:25:1f:14:18:68:30:0a:7a:44:2e:0b:
ce:00:48:09:d1:e1:45:8f:d0:0b:ca:8d:b8:b9:d5:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:77:AA:A8:86:68:E9:AD:F3:09:2B:D1:53:87:7E:3D:68:18:BD
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:50:90:82:03:93:fe:9a:ec:e1:c3:d6:70:a3:88:6c:e4:9e:
25:4d:7b:52:93:e4:e9:81:5b:8b:dc:d2:6f:5b:6d:43:f1:fc:
61:00:a2:aa:3c:f7:72:5d:20:24:b3:bb:71:49:71:6b:d5:be:
6e:7a:1c:20:aa:53:ba:f2:87:68:0c:b2:dc:3e:4a:33:bc:76:
da:31:5c:bf:e3:ef:e0:7f:6d:c9:fd:05:52:d9:59:bf:55:85:
82:fa:09:c7:b5:1f:64:db:03:27:d1:6c:54:26:01:8f:da:db:
b5:a5:d2:24:93:7d:11:7a:c5:26:4c:51:41:7c:c1:6d:e5:a9:
f6:8b:b4:0a:e3:5f:84:5e:ae:be:7d:cd:f0:7e:57:5f:c9:42:
0a:55:12:8b:5b:c5:de:b0:cb:b6:69:c2:43:37:b9:46:96:c7:
73:62:2f:47:5e:bf:e9:d2:d4:9a:ed:7b:ba:ed:b5:3d:e3:69:
d0:39:1c:7a:c1:5f:9b:12:55:39:3b:c0:d6:77:47:c4:3b:fc:
7d:d9:12:1c:1e:63:42:55:a7:4c:88:06:ca:4f:7f:16:d4:39:
47:73:2b:05:f5:24:97:cc:88:cd:f4:dd:8d:82:18:bc:e1:cd:
da:e7:18:08:97:53:49:9c:d0:c0:41:b3:fb:27:71:73:d6:6e:
14:c5:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:49:37 2026 by rpki-client