Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: y5IpXzzmZdeNi5j3jwbX26WNSgLsRr//27Mv21RImUw=
Subject key identifier: E4:27:1B:05:F7:49:9E:C9:45:DB:06:2B:11:16:D3:27:03:89:C8:0E
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019D39099C616F6942F72A1CAA0466622BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 077F
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: 84lhNVWjfCNBvr3PCV47ce0nnfU.roa (hash: 4T3jn28U+vBZ4NxTYxbLOUMX86XF3V96DLzXoQSnwmA=)
2: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (hash: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=)
3: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: b6fZL1havcIiTx6ybgTqQg4jTIYOrDkEWWt6efGLDsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9c:61:6f:69:42:f7:2a:1c:aa:04:66:62:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=e4271b05f7499ec945db062b1116d3270389c80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:aa:70:77:f7:00:34:8d:27:14:04:5f:ef:
2a:97:24:7d:03:fb:49:b0:7d:d0:d1:9f:fa:e0:f7:
af:05:1a:a5:2d:48:5a:3a:f7:17:90:32:1e:81:71:
97:a4:65:95:2c:5c:9a:f5:9d:9b:7d:77:f9:ac:8d:
b9:94:12:c3:5b:07:89:1c:09:fe:fc:bb:40:85:ac:
2e:df:24:f0:6a:12:74:33:81:0b:ba:96:7f:2a:c6:
21:ef:eb:45:28:d7:b7:e7:76:a6:72:6f:55:29:3f:
6f:19:93:5c:bf:d0:f4:ba:36:26:fb:57:a6:0f:65:
74:4e:83:68:00:d7:a6:d2:fc:5b:4f:e1:8c:44:46:
14:e2:17:82:05:2f:d2:cb:4d:0d:ab:c7:21:98:bc:
ca:73:44:f9:1a:80:59:84:2c:97:cf:e5:1f:c3:10:
4d:76:94:21:5e:af:53:1e:c4:5c:2d:b9:d0:af:c3:
37:41:05:7a:ae:d7:d8:58:21:25:5e:f9:57:88:e6:
72:0a:95:6b:d8:69:28:4e:bb:e3:13:5a:b1:5d:4d:
07:57:15:7a:20:b3:9d:cb:99:73:76:63:96:c6:26:
16:a0:61:ee:09:ea:de:71:50:ae:58:27:99:b8:8d:
a9:d3:1a:02:41:a7:d5:74:a3:8c:ac:21:07:90:d4:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:27:1B:05:F7:49:9E:C9:45:DB:06:2B:11:16:D3:27:03:89:C8:0E
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:c5:1d:3d:f2:0e:0c:75:2b:6e:71:85:a0:4b:21:46:13:
d6:f0:1e:2f:e7:0b:c3:1f:68:e1:fc:4c:25:82:bd:bb:47:11:
c5:43:b7:fa:f5:bb:54:03:42:ff:01:8e:6c:18:00:a0:d3:1e:
cd:d0:a1:7c:51:69:e5:f7:40:5e:3d:8d:46:62:c8:0a:c7:54:
c2:2a:09:29:92:16:83:3f:7a:8d:9c:07:c1:b1:af:5d:58:1f:
30:98:e1:b8:38:8c:da:f9:f4:0d:1c:18:68:1a:b5:fb:22:ff:
f8:34:89:7a:ca:10:f1:d7:35:6d:34:17:c5:f8:3e:9d:a1:82:
24:4c:1a:5d:26:c0:e2:a7:c4:7a:72:3d:d7:4d:2e:8f:5f:f3:
c3:7c:ee:21:fa:38:43:b4:e6:bd:e3:81:9a:88:74:d6:f2:9f:
1d:4e:2b:94:00:ec:2f:2e:bf:a0:a6:69:77:d0:fb:88:cd:c9:
d2:57:97:25:31:0b:e9:53:b8:6a:2b:fe:9c:0a:e2:b9:00:b4:
63:2d:86:8c:85:36:dd:11:1e:e9:cd:b7:f0:1e:a6:d8:7a:9e:
f0:95:94:29:3e:27:95:29:9d:f5:cb:b6:8c:8d:5b:e1:ad:32:
65:50:03:7b:c8:f1:e8:2d:be:12:c7:bf:50:8c:9c:02:3c:9b:
3e:20:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:07 2026 by rpki-client