Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: se3KRQssxPJgUGVWde3qKUTkPNEecZuhfDwwg5tiSx0=
Subject key identifier: 9B:15:8F:87:0C:EE:48:67:48:DC:81:88:7C:1B:B7:A5:E3:72:82:89
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 019D98F44E619669804AF5A64D92AB096A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 0C1D
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: XEnzdkn1YGZK+gZZZlNxws/mXNnUuxa5nWvq9Xvq3PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4e:61:96:69:80:4a:f5:a6:4d:92:ab:09:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=9b158f870cee486748dc81887c1bb7a5e3728289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:ec:78:25:fb:eb:11:02:0c:38:a8:84:a3:
27:91:8f:9c:1f:32:07:3e:cd:dd:e4:91:71:9f:fc:
4c:9d:c1:a4:bf:2d:e8:17:aa:ab:e6:ae:c4:55:d0:
4a:78:c0:c4:95:e7:24:5d:52:2c:97:b0:1f:55:66:
1c:82:71:2a:e7:88:85:51:98:90:a1:2e:16:2c:ce:
f7:15:cc:7c:7f:94:cb:e6:c1:9b:1f:89:0e:31:9d:
c0:76:93:2b:8b:c5:57:fd:97:2c:e8:81:ca:56:3f:
71:6d:6c:e5:4d:27:84:5e:43:67:0f:31:b6:40:53:
35:ea:ff:0e:7f:58:fa:49:1f:24:37:ab:7a:96:88:
e0:91:54:9b:1a:c5:07:3e:27:4c:5e:94:25:ae:06:
ec:36:77:0a:d5:3f:61:7d:cc:40:0d:ed:ba:4d:93:
82:15:c4:41:8a:82:a4:7a:5d:ec:6d:dd:9d:77:3a:
e5:86:f7:91:d1:4d:4d:47:5c:d1:5a:01:e9:16:e1:
b0:39:b6:36:b2:be:7c:49:16:e2:e9:b9:c5:26:b9:
ed:ea:61:f4:37:21:ab:f0:ce:16:19:a4:58:48:0e:
73:e2:06:8c:0d:93:c3:d2:70:5f:9d:71:23:31:20:
69:1f:87:36:f8:82:0d:09:5a:e9:df:bf:fc:ec:52:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:8F:87:0C:EE:48:67:48:DC:81:88:7C:1B:B7:A5:E3:72:82:89
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:51:82:3b:2d:6a:ce:fe:6a:a1:64:95:e4:74:62:88:54:d9:
36:ac:bf:33:41:c9:3d:f2:58:fd:df:22:45:c9:5d:8b:f7:5e:
26:61:1a:3f:68:e5:c8:c4:cb:d6:1c:42:72:4d:32:f3:29:f3:
7c:d4:bd:81:c4:0a:1b:83:62:3a:0a:c1:12:b8:94:a3:e1:05:
0c:9c:88:c4:d8:53:d9:6f:97:8b:7b:86:0b:b8:95:db:2d:90:
0e:38:39:96:b1:57:20:04:9a:d8:5a:96:04:20:d0:be:a8:7a:
ac:3d:e4:23:79:69:95:c9:7f:9c:c8:26:18:93:12:ca:0c:56:
3a:d6:73:ea:ba:b7:72:a7:89:80:92:71:73:4a:b0:e7:9d:e9:
df:63:52:39:4a:4f:7c:c9:ae:6d:0f:aa:d9:19:88:10:18:03:
f0:e8:68:e8:18:77:08:3a:7b:53:e8:49:e9:2c:39:f2:32:13:
b9:ee:69:73:4c:cb:49:22:96:8c:0a:58:78:ec:e4:dc:36:f9:
05:54:c6:dc:18:bb:0c:dd:6c:60:e5:94:b0:e8:74:82:33:a5:
4d:33:e1:5d:a0:68:8f:79:a6:08:27:c8:3d:22:29:f2:ea:2f:
f2:54:0b:a5:ca:b5:2b:ac:71:66:3e:1e:7f:06:6a:83:14:15:
d9:05:cc:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9E5hlmmASvWmTZKrCWpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMTYxOGUwNDM3MmQ5YjI3ZjQxN2QyMjlmODI2MTQwMjdi
YzNjNjAwHhcNMjYwNDE3MDEwMDQwWhcNMjYwNDE4MDEwMDQwWjAzMTEwLwYDVQQD
Eyg5YjE1OGY4NzBjZWU0ODY3NDhkYzgxODg3YzFiYjdhNWUzNzI4Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrDseCX76xECDDiohKMnkY+cHzIH
Ps3d5JFxn/xMncGkvy3oF6qr5q7EVdBKeMDEleckXVIsl7AfVWYcgnEq54iFUZiQ
oS4WLM73Fcx8f5TL5sGbH4kOMZ3AdpMri8VX/Zcs6IHKVj9xbWzlTSeEXkNnDzG2
QFM16v8Of1j6SR8kN6t6lojgkVSbGsUHPidMXpQlrgbsNncK1T9hfcxADe26TZOC
FcRBioKkel3sbd2ddzrlhveR0U1NR1zRWgHpFuGwObY2sr58SRbi6bnFJrnt6mH0
NyGr8M4WGaRYSA5z4gaMDZPD0nBfnXEjMSBpH4c2+IINCVrp37/87FIiUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsVj4cM7khnSNyBiHwbt6XjcoKJMB8GA1UdIwQY
MBaAFBwWGOBDctmyf0F9Ip+CYUAnvDxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmZhMDQtZTk1YS00NWIyLTlhN2Qt
YTM5NWFiMzVkOGVhLzEvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jYmZhMDQtZTk1YS00NWIyLTlhN2QtYTM5NWFiMzVkOGVh
LzEvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1GCOy1q
zv5qoWSV5HRiiFTZNqy/M0HJPfJY/d8iRcldi/deJmEaP2jlyMTL1hxCck0y8ynz
fNS9gcQKG4NiOgrBEriUo+EFDJyIxNhT2W+Xi3uGC7iV2y2QDjg5lrFXIASa2FqW
BCDQvqh6rD3kI3lplcl/nMgmGJMSygxWOtZz6rq3cqeJgJJxc0qw553p32NSOUpP
fMmubQ+q2RmIEBgD8Oho6Bh3CDp7U+hJ6Sw58jITue5pc0zLSSKWjApYeOzk3Db5
BVTG3Bi7DN1sYOWUsOh0gjOlTTPhXaBoj3mmCCfIPSIp8uov8lQLpcq1K6xxZj4e
fwZqgxQV2QXMHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:26 2026 by rpki-client