Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: 3Q/mP2h4Flfww3sXAE+IMh2xeqwgfQw5ZmnBfA9sqIE=
Subject key identifier: C9:5A:C9:9B:62:DF:CE:85:71:D7:2D:9C:2A:F6:66:07:D9:E2:67:3D
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019D98BDC06468E8BA29C4D977E3E37B61FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
5: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: dVX+nv8qf4YmKmw5XUOj/UpSa+K/qX7VkxWEqT2MUw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c0:64:68:e8:ba:29:c4:d9:77:e3:e3:7b:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=c95ac99b62dfce8571d72d9c2af66607d9e2673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:f1:e6:1a:96:65:dc:c4:9a:b8:68:cf:87:
c0:af:8d:ce:62:c0:68:f6:46:22:35:73:d1:87:f5:
52:c6:bb:0b:ff:3c:e1:bf:57:28:74:52:7a:bb:bd:
2c:d0:53:97:e2:e8:0d:71:1d:35:c5:ea:99:58:3a:
7b:95:0c:04:1a:4f:e6:7e:c9:93:ba:0d:e9:65:34:
7e:bc:f2:e9:30:ba:50:1e:3d:bb:fc:d9:bb:d6:bb:
0d:c5:d0:1a:83:8e:75:61:13:f5:de:f4:19:d9:31:
63:fa:3c:a9:81:ce:d3:b4:61:d1:6f:b3:d9:53:15:
03:52:8f:b8:2d:cd:68:eb:af:0f:50:3c:e1:7b:f2:
d6:5d:26:0c:46:ce:54:42:30:be:6f:13:ba:ab:b4:
4b:77:59:ed:9a:ef:82:73:2f:c1:53:f4:f8:d5:7d:
ad:55:ac:f7:bc:b6:fc:16:0a:30:3f:b4:d3:3f:c5:
76:3e:90:b5:9d:05:9b:a2:75:16:e2:e9:f0:96:a6:
72:89:3e:ea:66:ca:7e:9d:c2:b0:a6:99:97:18:37:
b3:28:71:82:7a:8d:df:b7:1c:c7:1e:65:c9:c0:39:
a7:92:92:40:9a:77:f9:29:d6:0b:03:53:06:9c:8d:
23:7e:36:b4:fc:ce:71:64:8d:a2:03:51:b3:4c:b9:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:C9:9B:62:DF:CE:85:71:D7:2D:9C:2A:F6:66:07:D9:E2:67:3D
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:94:22:63:f9:c2:f4:5b:75:6e:a7:75:99:f0:b5:91:d4:4a:
01:71:f1:82:b2:8c:98:8e:24:08:80:9e:d3:f0:fd:69:10:dc:
12:ac:6b:24:ed:10:62:ac:b6:94:10:1c:88:8e:93:0a:b9:b1:
7b:81:df:32:cc:b7:5e:5c:d7:33:20:b5:cd:a9:05:fb:66:62:
ef:5b:63:8e:f1:f8:fc:42:99:b7:5f:c7:24:4d:99:8b:6f:e7:
cf:d6:65:cb:f8:13:5f:fd:38:dc:bd:19:cd:8d:08:87:eb:5e:
da:de:1c:8b:98:49:39:a5:69:ca:85:09:82:0d:13:58:7e:6b:
15:9c:4c:5e:30:b7:9f:c4:81:69:b1:4c:dc:3c:01:5d:14:cc:
65:4c:8d:e1:fc:5c:c1:41:8c:6a:f6:ef:06:51:80:ca:10:c2:
19:40:7e:67:45:33:9a:37:76:80:3e:9f:47:03:95:a4:4e:79:
1f:93:f1:73:a6:d8:9c:29:b0:2e:3b:fe:9f:eb:b2:0a:be:3c:
ba:7c:e2:e1:f9:75:48:45:b3:5a:cf:ca:a8:92:b3:c0:d5:ea:
b7:f8:7b:39:6f:0a:0c:f2:81:7a:05:37:94:87:08:d3:69:4b:
24:c6:dd:32:48:55:8c:cf:bf:52:e8:63:c8:c2:4f:ec:fc:fa:
67:36:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:07 2026 by rpki-client