Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: zd/4KGughtfi/e8QA3fkDObso2tn0yLH2IY7BAu96xM=
Subject key identifier: 4E:D7:DB:64:E0:75:5D:4A:3B:58:BB:56:84:1A:B0:22:87:F1:F7:6B
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 019D386576665BFAC694B5DFBE0DF0B93DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: ozztdIwUkFI6EX4EFdWdJCeSTSoOqFKPOh6XmJqNPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:76:66:5b:fa:c6:94:b5:df:be:0d:f0:b9:3d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=4ed7db64e0755d4a3b58bb56841ab02287f1f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:08:6a:65:23:56:a8:f0:8f:5d:57:94:b7:
5a:bd:0c:10:19:31:d2:eb:a8:24:04:67:70:da:a6:
61:b2:b5:6d:54:3d:7d:9e:6e:15:1b:d1:3d:45:96:
06:a8:08:1e:f7:81:e0:3b:8f:66:5d:93:ad:00:49:
78:3b:16:9d:6f:78:a4:b5:74:2e:af:e9:cf:84:e6:
83:bf:cb:9f:29:37:48:0a:99:aa:4d:8f:f7:d3:28:
77:44:78:ca:24:ea:b7:0d:7a:ca:df:f7:11:80:0a:
63:5a:82:9e:82:9a:38:dd:df:66:2d:8b:63:7e:35:
ec:c4:9b:0d:05:09:d2:3e:5b:0a:7a:a9:a1:d3:af:
f7:a4:90:ed:45:0c:a0:52:f6:6d:37:7f:d6:61:f2:
36:f0:1f:e0:b1:92:0d:e8:ff:ab:b5:55:a6:5d:06:
5c:03:6a:22:d2:27:52:53:9b:eb:5e:a0:4d:40:f1:
e6:ed:a4:d4:c7:f9:08:5e:21:db:3b:6f:46:7d:98:
27:9b:41:c4:27:ac:a7:93:42:79:f3:65:99:84:35:
c7:14:33:a1:1f:f4:75:33:fc:92:85:f2:21:d0:c1:
b7:bf:94:b7:db:a4:9f:2d:8c:4a:d3:1f:86:24:18:
63:03:d3:ae:40:29:c6:d1:a4:ac:65:70:3a:b9:c2:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:DB:64:E0:75:5D:4A:3B:58:BB:56:84:1A:B0:22:87:F1:F7:6B
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:ac:5e:4e:8e:3a:6d:1c:68:cd:57:ce:a3:93:64:69:ba:
82:1b:ab:ac:7a:34:77:2e:2c:c7:cb:18:e6:95:e4:76:c9:0f:
ca:ac:2a:6b:63:f4:4b:90:a4:a0:af:ae:4c:2d:2e:1f:ce:e3:
73:a0:75:92:21:d0:ae:d6:38:2e:01:46:3c:b9:b4:68:ca:fd:
dd:11:8d:fc:2a:92:08:1c:7b:1f:c1:de:86:76:d4:27:4a:f7:
cd:a3:f7:1c:0a:b9:87:39:ac:f2:c8:d7:ac:36:20:df:4e:32:
8c:9b:df:0e:e0:cc:62:4e:c1:9c:70:19:0a:5e:66:bb:ff:2e:
e2:37:90:e8:aa:c5:25:58:c9:6a:3a:a2:d1:07:78:f1:ad:91:
f6:f0:d4:e6:a7:c7:73:e9:74:91:5f:cc:23:74:18:37:9e:6c:
82:c5:c5:eb:10:0a:9b:29:08:af:70:1e:42:77:c7:c5:ee:db:
e7:9c:39:a3:56:4f:8a:b3:d1:9a:5e:bd:1c:46:c8:6c:75:2b:
60:10:aa:81:1d:ec:6d:76:7f:7a:1b:5e:5d:43:56:bb:ae:49:
36:21:a9:61:88:e0:6c:6f:af:f4:20:94:89:f3:b2:cd:c1:b8:
f3:7b:5a:4c:c8:4c:33:8a:da:a9:bd:fb:b7:a3:6c:04:8f:7c:
7e:d8:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:02 2026 by rpki-client