Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: L3P/8E9hTm7UsCtK5UrPvzLOzpY1nsxFYi/c34zmGBg=
Subject key identifier: E0:C9:B6:72:57:17:CB:5B:42:C4:55:EE:5E:91:16:9D:29:26:66:DC
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 01A0C1E87BEE1081E965506B58F70F68E90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 03:00:33 +0000
Manifest this update: Mon 21 Sep 2026 03:00:33 +0000
Manifest next update: Tue 22 Sep 2026 03:00:33 +0000
Files and hashes: 1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
5: fPxq3Rnthn9rgllCccsebneIsEY.roa (hash: sOGcnnv7kw9rDNmrJkZHKgFMOL9XnFiQ5b2sRJoEIFc=)
6: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: C2RFtnYhfolKR67c8g+wMu4YRa6DrkLWym5fgS43K0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:7b:ee:10:81:e9:65:50:6b:58:f7:0f:68:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Sep 21 03:00:33 2026 GMT
Not After : Sep 22 03:00:33 2026 GMT
Subject: CN=e0c9b6725717cb5b42c455ee5e91169d292666dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:2d:c2:82:f0:a4:4d:7b:6e:4a:93:9f:da:
c9:cc:e7:0d:d7:9c:be:90:19:0c:d9:87:3b:ef:6c:
55:4d:f0:cf:61:a5:45:2e:11:78:1b:d1:e8:a7:4c:
c9:82:7b:8d:f6:8f:18:12:6f:9d:bf:9b:aa:1e:16:
46:96:bc:69:ad:8d:90:05:a0:e2:0d:2f:37:f5:48:
42:fe:20:17:17:da:4b:e6:b5:a9:0b:e0:df:85:b2:
59:78:35:16:4d:63:57:60:21:2f:99:ec:ff:f7:e6:
0e:29:e6:42:be:fd:85:b5:99:cd:ca:5f:6a:ba:53:
97:e7:11:4c:24:b8:87:b5:4b:4a:e6:70:e8:9e:8c:
80:8a:73:40:f5:5c:47:b4:0d:f6:e8:4d:2c:87:92:
e5:40:61:93:33:7e:b8:a2:bb:91:e9:3b:97:3a:17:
6e:10:2c:7d:b4:89:44:9b:20:c4:56:50:45:d9:0b:
3d:87:c7:b8:84:51:c9:35:f6:7a:0b:46:8b:fb:f3:
60:db:d4:d2:07:aa:bb:de:f1:cf:0c:af:61:89:44:
99:a9:2a:55:46:e8:8b:51:72:45:c5:2a:9b:9a:5e:
c0:a1:e7:32:52:d2:48:e5:2d:31:e1:77:22:44:d8:
4c:2d:ab:a2:6d:0f:8e:14:2c:fb:6f:2c:9f:5d:86:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C9:B6:72:57:17:CB:5B:42:C4:55:EE:5E:91:16:9D:29:26:66:DC
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:c8:8b:aa:ab:d0:ed:30:bc:9d:ea:83:e7:50:a2:f6:93:
44:96:94:d3:34:7e:41:69:dd:5c:76:f8:fc:da:27:e7:50:cf:
fa:73:02:33:06:08:82:7f:44:03:02:83:50:f2:76:82:c6:04:
df:df:73:48:fa:dc:fc:b8:25:63:57:c2:81:2a:1e:41:ec:ed:
c2:53:5a:5e:4b:e9:75:ee:8c:9b:3a:c7:f7:97:22:b1:6f:91:
37:20:2e:44:a7:65:c3:34:4b:40:23:ff:00:1c:eb:28:bc:06:
a1:1e:f8:03:83:4e:de:27:0b:c3:ee:24:95:6c:cd:89:6a:ae:
96:68:8a:20:5c:fa:b5:06:1b:9f:c3:ab:0e:49:b9:22:17:46:
53:5b:fd:77:8a:53:70:20:eb:8f:e8:ea:5e:a0:a9:c9:17:cf:
28:91:c5:6e:f4:44:8d:c8:22:f2:95:a5:f9:d2:0d:f0:08:71:
99:e9:83:40:6e:55:48:07:a2:20:e2:21:96:fd:7b:05:c4:cc:
57:34:ea:85:a5:9a:c1:f9:88:40:5e:02:5c:57:e1:45:02:f5:
54:f0:0d:a2:24:08:66:21:5b:57:50:a0:45:b0:db:ce:f7:00:
a6:be:c2:f7:9a:b5:10:5d:fb:46:d5:2a:53:18:a0:92:29:15:
5e:25:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:32:23 2026 by rpki-client