Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: q1ZAGrwg+nk/MXeh9eoGwO0VMzERzH4SZ4u5sDWKG0g=
Subject key identifier: 29:3D:BD:18:1A:4A:38:07:2D:19:B8:07:8D:8A:42:73:BD:47:35:E2
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019CABD99233571F6F9F4C1E77E83BB7AF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: SckR3k9kENMfSJ/4Tu39ihkqeMCEPCTOrxg17vT8Q8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:92:33:57:1f:6f:9f:4c:1e:77:e8:3b:b7:af:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=293dbd181a4a38072d19b8078d8a4273bd4735e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:78:07:d2:cc:85:bd:f8:ff:e9:d4:c0:88:
ca:45:bb:40:76:c2:ce:eb:6f:00:1f:8a:6b:9c:50:
37:7b:60:0e:26:f8:8b:94:8d:20:23:3d:d1:4f:43:
1d:22:9e:6a:cf:6d:a8:84:5d:cf:25:0e:98:aa:40:
e3:d0:7f:b7:85:5f:ec:4a:0d:1c:65:7b:ce:6c:aa:
f8:d9:0d:b9:3e:b0:68:50:d9:b2:86:a6:4d:5a:10:
70:83:5e:08:05:31:77:0c:68:8a:02:de:52:61:35:
ae:0e:51:42:57:e8:c2:78:70:c2:a6:9f:4b:36:2b:
62:f3:51:ee:07:f0:7b:49:f9:fc:32:55:b3:60:13:
9b:a4:d0:35:eb:d8:d1:ec:ac:2b:8f:77:59:12:41:
a0:f9:04:b6:3c:f8:28:77:37:ea:33:e5:d2:67:c0:
6d:3e:aa:3b:09:f8:3d:32:41:35:3b:5b:a1:62:7c:
1a:26:ea:b5:83:59:40:ac:34:0a:be:b7:12:12:b8:
22:f9:46:d1:3e:a8:b3:f7:dc:07:6e:b4:f3:e3:ce:
f8:29:17:88:e6:2d:63:87:ff:ca:7f:55:c8:91:8c:
7f:31:b2:dc:c3:e4:bb:f9:8c:f9:fb:10:9b:16:dc:
2c:30:5f:40:79:c0:3d:e4:b1:df:b6:ad:c0:af:ec:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:BD:18:1A:4A:38:07:2D:19:B8:07:8D:8A:42:73:BD:47:35:E2
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:5b:de:c1:d1:3c:e0:da:e3:17:5f:e9:73:78:79:43:d0:
15:de:2b:ea:39:bb:7e:bf:15:d8:c5:7e:cd:e9:71:1e:06:7e:
20:6f:26:2a:43:ba:f4:6f:23:42:ab:94:f3:a5:92:71:5a:c5:
34:b0:f3:85:6d:b1:d4:86:10:61:15:46:85:a6:7a:2d:d3:7f:
69:5d:5e:98:84:b5:4f:ff:d2:1a:0a:24:2a:19:d1:6a:9d:99:
bc:9a:1a:a0:57:c7:c4:ab:8c:bc:ca:6a:65:85:ce:32:1d:81:
00:f6:87:2e:9a:7c:41:82:50:8b:d8:69:b2:83:dc:44:1b:5f:
18:ca:3e:ea:b7:65:4d:e3:6b:87:87:61:bb:a3:15:ed:16:ac:
ca:85:4d:50:4e:0c:cf:53:d4:2e:68:a3:70:42:fa:7c:3a:0c:
56:fa:a8:d9:c4:63:49:8e:80:ba:76:e1:30:0d:1a:f3:a9:ff:
4e:1f:24:5c:94:e5:d4:1a:3f:a7:af:ef:bd:e7:83:11:94:03:
84:4f:3e:73:2c:ab:d9:d6:21:39:be:fc:60:06:09:99:50:f1:
c7:b9:6c:d1:27:ce:59:7c:4c:b6:e9:14:5f:c9:01:cc:b2:08:
fb:3d:d2:87:71:09:3c:d9:ab:c2:1b:3e:75:28:e2:88:25:66:
6e:57:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:40 2026 by rpki-client