Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
File: HBV2r1ubyOiNSAz86FrcxV_N0CY.mft (raw, json)
Hash identifier: 3FC3FJeSDwAUGljpZX1Pe8MzB1n1Dy6vpr5dL1E0XYo=
Subject key identifier: 1A:28:89:66:AA:FF:DE:4F:84:D1:5A:12:19:89:7A:DC:1E:1E:3E:40
Authority key identifier: 1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
Certificate issuer: /CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Certificate serial: 01A1A66F1DF37EFBF2823589CB12E4221D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
Manifest number: 010F
Signing time: Wed 04 Nov 2026 12:01:02 +0000
Manifest this update: Wed 04 Nov 2026 12:01:02 +0000
Manifest next update: Thu 05 Nov 2026 12:01:02 +0000
Files and hashes: 1: HBV2r1ubyOiNSAz86FrcxV_N0CY.crl (hash: HdRe9c2fgo3Wf9fwKy+UKpj36URj92W7E8ld4ET1fGo=)
2: RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa (hash: ZCPLqSOaXN6zp9uC89mjjEue1DLY3x3B14Iog4p5db0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:6f:1d:f3:7e:fb:f2:82:35:89:cb:12:e4:22:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Validity
Not Before: Nov 4 12:01:02 2026 GMT
Not After : Nov 5 12:01:02 2026 GMT
Subject: CN=1a288966aaffde4f84d15a1219897adc1e1e3e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:ab:fa:b0:ba:d9:2e:c6:1e:b5:6e:f2:3d:
e6:6d:09:89:3c:6b:58:d7:3c:c3:cc:c6:f0:5b:51:
8d:ed:3a:24:47:89:d7:87:7f:40:14:1a:68:76:d4:
17:1f:2f:66:e1:7b:a2:05:61:52:e1:cd:f2:a7:13:
82:ae:03:f3:cd:7e:df:1c:a4:09:9d:73:07:b1:ca:
49:78:27:db:b0:bc:ff:f4:ab:21:46:b0:9d:74:13:
f2:5c:33:f6:fc:7d:27:6e:ee:73:b5:46:79:f5:1f:
04:ac:46:98:f6:37:0e:bf:8a:33:7e:0f:85:17:a0:
b9:2f:d3:42:0c:fc:42:a0:6b:9d:0b:14:1f:db:f3:
6b:11:fd:68:e5:dd:25:e2:45:ec:36:9a:43:91:48:
5c:c5:c6:6c:91:2b:de:95:57:38:5e:b1:12:d0:c5:
c2:b1:4e:7e:c3:7f:59:64:b1:f8:61:4a:00:9b:99:
c9:e6:4a:24:f8:a6:65:5d:fe:01:51:57:0a:1e:6a:
bb:37:08:7f:31:0b:6a:20:fa:71:1c:08:40:db:56:
7a:72:f8:63:3e:5e:58:6d:79:06:35:00:23:bf:f2:
8d:dd:50:05:e0:e3:cb:9f:ee:e4:2c:d7:c2:6c:ac:
35:77:c2:23:6f:c9:67:6a:48:9b:e4:8a:dd:97:9c:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:89:66:AA:FF:DE:4F:84:D1:5A:12:19:89:7A:DC:1E:1E:3E:40
X509v3 Authority Key Identifier:
keyid:1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:de:eb:37:e5:16:fc:34:83:9a:f8:8d:23:25:0c:94:ad:75:
18:c4:52:d3:df:53:db:42:01:2a:19:ba:4c:27:d4:14:02:30:
0e:84:7b:e5:3c:43:d6:08:64:73:dd:86:ca:16:77:7e:12:3b:
59:99:6f:d7:76:f3:82:c8:d0:e6:d1:67:1d:6b:e6:f1:ee:64:
fb:e3:4e:95:60:e2:e6:3d:3b:2a:70:cc:de:79:ef:bd:77:b5:
32:96:bb:40:20:3c:e9:c9:b9:6c:87:db:ac:05:a8:d7:32:82:
05:19:f1:3e:f2:3c:2d:c5:55:57:47:fc:0b:ee:01:e0:f4:e8:
be:ce:41:02:0e:0b:cb:0e:f2:da:46:e7:89:80:15:4c:df:e7:
ae:be:c7:70:69:90:b2:ec:1e:d9:f2:80:4f:2d:60:ca:7d:54:
cf:8b:9b:e4:75:db:3f:2b:15:3d:ef:a3:0f:1d:b9:59:1a:2a:
fc:32:31:f7:28:aa:ca:00:59:e0:7f:81:b3:cc:17:26:47:41:
44:99:3e:89:7f:3a:7c:9a:6c:87:3a:ca:47:62:f7:7b:23:24:
87:fe:05:96:9f:ff:08:26:d3:57:6c:76:bc:3f:3b:b8:86:8d:
9d:17:ca:c1:71:56:c3:e6:ae:d3:22:dc:fa:49:53:13:0f:4b:
c1:4c:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:18:26 2026 by rpki-client