Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: AEZgy/ZTt0j7yQLd/9z4YFa21/+QfSNf/qrDP13b0eU=
Subject key identifier: BA:2A:CB:14:8C:6D:E0:46:48:AB:8C:83:BA:C8:9B:E6:D5:F3:FA:59
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019CABD965BC4EA3DB5A7211E724E2BA6626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 100C
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: Df1QEHp2/6CK4kVHaLpGdWuoHQN6yBZ971ughNL1zP4=)
2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:65:bc:4e:a3:db:5a:72:11:e7:24:e2:ba:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=ba2acb148c6de04648ab8c83bac89be6d5f3fa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:ac:21:fd:4e:81:89:56:aa:7d:c7:75:41:
e0:21:ad:2c:c9:4e:bb:ef:e9:b0:56:04:0d:b3:5e:
43:08:44:2c:4b:d9:ec:6a:c4:7f:0f:44:1c:70:42:
1e:0d:10:0c:24:2b:36:be:80:af:88:81:55:b9:54:
18:6a:a4:5b:87:2b:c4:61:da:d1:6e:9a:1f:fe:e7:
46:10:f8:02:32:f6:6e:05:47:35:7a:e8:d2:14:bf:
d5:4f:94:96:a4:93:5e:6e:e8:33:08:89:bb:4c:47:
a6:c1:cd:7f:a0:5a:59:5f:29:aa:a9:11:1f:94:0e:
09:8b:84:1b:89:c4:28:dc:82:e7:32:6b:26:e5:56:
c9:00:41:a7:8d:bd:3b:f9:fc:b7:36:06:b6:14:c3:
2d:1b:64:4f:4c:4b:d2:6f:9a:db:c4:62:dd:49:0f:
e7:60:47:47:46:d1:f4:f7:db:9f:50:85:80:ca:c4:
e8:ff:65:ee:88:c7:00:d5:71:05:b0:8c:1f:65:b5:
1f:e7:f3:46:af:2c:0f:82:c6:cf:06:63:b2:8c:2c:
ff:1c:e5:a1:3a:4c:f6:4e:1d:0c:77:c4:39:b2:56:
4b:f6:c0:ca:b6:9a:58:07:87:e3:8c:29:0d:e8:bd:
44:5f:df:15:80:55:b2:2e:be:f0:61:0a:38:22:a9:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:CB:14:8C:6D:E0:46:48:AB:8C:83:BA:C8:9B:E6:D5:F3:FA:59
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7c:e9:42:0a:71:96:c5:f4:79:c5:35:cb:a5:36:04:a1:a8:
2d:22:39:21:fe:72:24:22:55:31:41:86:7f:11:26:7d:b3:e5:
f3:0b:cf:00:b1:09:ea:d8:4f:87:f6:26:1f:f9:cc:55:14:ad:
4d:d1:7a:17:db:5f:8f:c1:fd:aa:ac:98:c7:0b:a3:5a:d2:6f:
b9:23:a0:77:1c:a3:81:37:f1:16:31:c7:02:5e:76:b2:5e:f7:
68:2a:08:5c:84:04:8d:2e:88:67:61:e6:42:3c:2a:8e:0c:af:
2a:0f:20:4c:34:8f:bc:fb:a0:29:ce:d3:62:b3:94:2a:07:10:
ad:a7:cf:d0:a6:fc:95:5e:de:35:7c:56:d0:83:cc:1e:d1:a2:
65:83:e5:cc:a6:e2:1d:20:e3:31:78:38:80:0d:ee:2e:c2:b6:
5e:c1:b5:cb:4b:8c:f6:cb:88:ab:54:fc:cd:f4:16:97:28:fd:
18:7e:ca:09:75:1e:4c:16:25:33:8e:6c:60:a0:58:be:72:13:
d4:de:f2:7e:2d:52:df:19:34:70:2e:d2:22:f0:09:65:f5:1f:
f3:88:a5:c6:d4:95:ec:37:1f:f0:5f:3d:84:80:4c:68:2b:0a:
93:49:f0:e9:48:ed:72:48:a9:2d:66:c9:37:03:1b:72:0a:d0:
51:0e:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:40 2026 by rpki-client