Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File: HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier: 0thbGg3YyHFq0ISsk+kqWQLiqNyXHQsB2VeM+SyvHZc=
Subject key identifier: D2:6E:21:F0:6D:AD:D6:7B:8D:06:79:28:85:48:6C:EB:0F:EB:B1:55
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer: /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial: 019D38D31BB0A72841F9F5C7EAF694839B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: OnnQ+ysY4wx7rNNkNe2srVahqYpPn+/vBF52FhF7ooA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1b:b0:a7:28:41:f9:f5:c7:ea:f6:94:83:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=d26e21f06dadd67b8d06792885486ceb0febb155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:bd:d4:6f:69:9b:bf:7f:3f:7d:49:ed:60:
9a:a4:46:37:8f:81:eb:c8:be:6a:b8:ca:c3:b9:2e:
4f:46:11:14:42:88:ff:12:09:b2:43:62:6a:6b:66:
aa:ed:3a:4c:28:b6:3c:44:bd:6f:e5:50:54:2b:84:
c2:7b:dd:9a:6f:74:a1:98:81:da:ad:fc:d9:30:e6:
9f:a1:aa:c0:54:08:1b:04:f2:3c:7e:bc:72:50:6f:
b6:32:b7:23:51:d8:d0:00:26:03:9b:09:78:cd:5b:
5c:06:90:d9:aa:41:3c:74:d6:86:e9:3f:a2:b5:c9:
fc:6e:b6:6e:02:80:f9:5c:76:7f:ad:90:2e:e4:75:
95:63:a2:79:83:f0:79:71:f2:22:eb:c7:8b:84:86:
5e:68:63:c6:15:ff:22:34:e3:20:30:0d:e4:97:f1:
71:a0:1b:ee:34:ce:3d:76:ca:9d:9d:fa:dd:d5:e1:
33:b7:c4:f8:83:93:4c:42:61:94:36:a2:4e:de:97:
a5:04:9c:09:08:4e:7c:10:30:81:56:3b:7e:a6:4d:
15:1a:d7:b9:ba:96:f1:61:f1:a0:fd:0c:85:9e:18:
ab:98:74:08:92:52:82:02:58:24:e4:c5:d1:d5:69:
ca:f9:da:9f:8e:05:d5:b9:3e:54:53:7f:0f:69:6f:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:21:F0:6D:AD:D6:7B:8D:06:79:28:85:48:6C:EB:0F:EB:B1:55
X509v3 Authority Key Identifier:
keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:37:5e:35:b5:6f:b3:e6:e0:7e:26:57:18:05:c0:d6:0a:
b3:1f:21:80:d2:33:95:9b:e7:28:09:d2:6d:f3:24:03:b7:b6:
c1:ea:5c:42:41:7f:7f:ce:d4:de:b2:ef:2d:e7:d8:78:5a:a9:
3b:21:55:80:7c:de:36:f3:cf:45:b4:ac:42:51:44:ac:7f:55:
05:70:9b:8f:9e:54:5b:12:98:bf:e3:d4:fb:81:b3:46:f4:4b:
08:6c:d7:2c:12:ef:f4:19:6e:d7:6e:e1:d6:8c:69:3d:05:96:
00:de:74:9f:e1:33:54:96:3c:a8:f6:3b:d7:5b:fb:a0:2a:0e:
99:11:17:78:97:c0:84:28:7e:44:44:0e:09:d9:48:f7:aa:24:
c5:bb:88:88:b2:71:ef:85:90:79:12:b3:a6:f0:14:87:f6:2c:
c7:de:9f:97:09:dd:cc:47:b4:37:ce:6b:ed:74:51:0b:18:27:
4e:2d:ff:79:f0:ec:e3:0f:a4:80:f4:61:a8:73:19:a6:8f:7b:
80:42:7d:61:b1:3b:67:76:ba:e5:02:11:3a:87:49:de:08:a7:
49:da:e7:28:68:9f:d6:b2:13:e4:e2:9b:be:ad:ab:a6:54:63:
93:d0:ab:04:6f:c4:7b:b6:dd:dd:ae:b0:e0:b3:6b:28:6b:fb:
0b:2a:7c:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xuwpyhB+fXH6vaUg5sMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYjJlMmU3MzU5YTgwMTYzMmE2NmQxMGI5NjFlNGYyZWM2
ZGZjNGYwHhcNMjYwMzI5MDkwMDUyWhcNMjYwMzMwMDkwMDUyWjAzMTEwLwYDVQQD
EyhkMjZlMjFmMDZkYWRkNjdiOGQwNjc5Mjg4NTQ4NmNlYjBmZWJiMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnW91G9pm79/P31J7WCapEY3j4Hr
yL5quMrDuS5PRhEUQoj/EgmyQ2Jqa2aq7TpMKLY8RL1v5VBUK4TCe92ab3ShmIHa
rfzZMOafoarAVAgbBPI8frxyUG+2MrcjUdjQACYDmwl4zVtcBpDZqkE8dNaG6T+i
tcn8brZuAoD5XHZ/rZAu5HWVY6J5g/B5cfIi68eLhIZeaGPGFf8iNOMgMA3kl/Fx
oBvuNM49dsqdnfrd1eEzt8T4g5NMQmGUNqJO3pelBJwJCE58EDCBVjt+pk0VGte5
upbxYfGg/QyFnhirmHQIklKCAlgk5MXR1WnK+dqfjgXVuT5UU38PaW/JPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJuIfBtrdZ7jQZ5KIVIbOsP67FVMB8GA1UdIwQY
MBaAFB2y4uc1moAWMqZtELlh5PLsbfxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82ZmQ5YmUtOTY5NC00NjM5LTkwYzUt
OTBlYmQ3NmU5MWY5LzEvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82ZmQ5YmUtOTY5NC00NjM5LTkwYzUtOTBlYmQ3NmU5MWY5
LzEvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2Y3XjW1
b7Pm4H4mVxgFwNYKsx8hgNIzlZvnKAnSbfMkA7e2wepcQkF/f87U3rLvLefYeFqp
OyFVgHzeNvPPRbSsQlFErH9VBXCbj55UWxKYv+PU+4GzRvRLCGzXLBLv9Blu127h
1oxpPQWWAN50n+EzVJY8qPY711v7oCoOmREXeJfAhCh+REQOCdlI96okxbuIiLJx
74WQeRKzpvAUh/Ysx96flwndzEe0N85r7XRRCxgnTi3/efDs4w+kgPRhqHMZpo97
gEJ9YbE7Z3a65QIROodJ3ginSdrnKGif1rIT5OKbvq2rplRjk9CrBG/Ee7bd3a6w
4LNrKGv7Cyp8qg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:07 2026 by rpki-client