Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File: hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier: mCg5uVXM6O0c5Qajv6TuFyycWxdBnsPcIrr1HFiZUuw=
Subject key identifier: C1:A8:C1:32:F4:45:B0:B6:1E:AC:11:8E:EE:44:D1:8B:2C:CD:19:8E
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer: /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial: 019D386562E8672ABF9B72DA57B84A7324CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number: 14AC
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: sBtooU320wpR+hrTTZhX9fWMDNnJ16ks9C8awLKmX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:62:e8:67:2a:bf:9b:72:da:57:b8:4a:73:24:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=c1a8c132f445b0b61eac118eee44d18b2ccd198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:3c:51:c5:7c:cc:06:37:37:4d:d6:be:5d:
14:51:35:b1:37:d9:18:bf:ca:8f:0d:5e:6a:de:1b:
49:eb:ed:c2:4d:bc:6a:13:f0:7a:b8:c1:20:5b:ec:
b5:ee:cb:47:9c:1b:16:4b:a4:74:a0:83:ac:4b:7a:
5e:56:f4:8a:d3:a3:cc:41:12:98:a8:e8:d4:40:25:
ec:68:1b:51:49:e1:71:3c:72:c9:82:dc:34:21:5f:
60:7a:62:ca:fd:e4:e8:68:31:55:bb:84:05:f5:35:
43:6b:23:3a:ae:a8:0c:1c:be:44:8c:0a:fc:45:09:
03:54:00:54:62:06:7f:bb:4f:ce:3e:2b:aa:7c:93:
5c:15:f3:85:bf:40:d7:db:a1:fb:f0:c8:8e:58:92:
45:5d:c6:ee:a2:39:f3:d1:c9:57:69:b2:f3:ce:49:
bf:3e:ac:26:3b:77:29:43:76:14:cc:bb:76:98:a6:
31:8d:bf:1f:f4:7b:fe:95:f4:e2:8b:79:5b:a5:00:
d7:61:d8:03:3b:73:14:15:84:1d:50:fd:c9:e8:8c:
5d:fd:97:ee:2d:86:9b:18:b6:cd:a5:55:3f:11:d9:
f8:6b:66:d9:16:2d:4b:9d:9c:5d:f8:48:6a:a2:9f:
b6:cf:76:73:84:d8:e8:92:f1:dd:5d:1e:e0:09:de:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:C1:32:F4:45:B0:B6:1E:AC:11:8E:EE:44:D1:8B:2C:CD:19:8E
X509v3 Authority Key Identifier:
keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:d5:07:58:66:06:6c:12:83:9a:42:4c:f9:16:19:e1:8f:
48:9c:43:8a:fd:1a:be:2c:f6:79:9c:40:24:5b:b4:95:39:ba:
72:9b:88:33:ce:3d:fb:97:e1:bc:ca:b7:7e:5e:ef:35:d5:34:
f4:6a:ff:14:80:41:ca:6c:b5:05:8d:ff:a0:a6:2c:4c:25:e7:
2d:49:da:c8:dd:08:91:c3:45:2c:d5:55:7a:2c:e8:fc:92:bc:
5d:00:c2:ce:e2:07:bb:71:8e:05:ee:5c:db:76:d0:2c:c3:3f:
42:ff:f2:c3:c6:2e:d8:16:d4:91:1a:3a:16:95:d9:5f:ad:f7:
f5:59:d3:b8:15:3d:cc:a6:e7:69:10:a6:ad:9f:ab:3c:74:1a:
22:e1:5b:f5:c4:25:ba:d8:84:2e:98:ea:fc:b9:2d:53:fb:24:
1e:7d:14:9e:01:db:fc:74:c3:53:5f:36:f8:12:bb:66:55:45:
bb:6f:41:7d:36:7b:70:56:f7:63:09:45:0f:48:f7:fb:28:ee:
17:0d:47:0a:e5:7d:b9:26:63:59:78:8f:e2:6f:03:b8:c3:85:
82:f0:8f:73:61:49:af:33:02:8d:37:90:5c:31:7c:cc:9b:49:
08:2a:f6:f9:bf:87:f7:2b:1c:9d:da:1e:aa:c1:3f:d2:aa:80:
09:30:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:08 2026 by rpki-client