Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
File: HBV2r1ubyOiNSAz86FrcxV_N0CY.mft (raw, json)
Hash identifier: BxzC+MvSpynXEFkVfpJV3IHWvQaAGGv/NSgLCPt9g5k=
Subject key identifier: 25:9B:80:08:11:67:39:94:8F:BF:81:CF:C2:BC:01:9B:51:4A:35:C9
Authority key identifier: 1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
Certificate issuer: /CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Certificate serial: 019FAA88A6AB813E23ED9DB2FE33D7ECF431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
Manifest number: 08
Signing time: Tue 28 Jul 2026 21:01:49 +0000
Manifest this update: Tue 28 Jul 2026 21:01:49 +0000
Manifest next update: Wed 29 Jul 2026 21:01:49 +0000
Files and hashes: 1: HBV2r1ubyOiNSAz86FrcxV_N0CY.crl (hash: XXuKo5KY9iPE9wFR5tJwZis+ecPAvb6fqTAUvuYNJZA=)
2: RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa (hash: ZCPLqSOaXN6zp9uC89mjjEue1DLY3x3B14Iog4p5db0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a6:ab:81:3e:23:ed:9d:b2:fe:33:d7:ec:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Validity
Not Before: Jul 28 21:01:49 2026 GMT
Not After : Jul 29 21:01:49 2026 GMT
Subject: CN=259b8008116739948fbf81cfc2bc019b514a35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:a1:c4:84:43:83:35:e3:3e:eb:6b:12:27:
11:26:df:2b:c8:0e:2e:25:8f:b8:57:83:f1:37:96:
da:b9:75:02:28:98:ab:c9:40:8f:ac:ef:f3:a2:8e:
66:d9:6b:71:c2:fa:52:99:f4:2f:b2:39:a7:ea:18:
a0:ec:f7:00:69:f2:72:1a:f7:cc:ae:e3:95:58:08:
b5:3a:b1:85:e6:51:f0:89:34:41:5b:39:a7:c2:38:
3d:e3:00:3e:b6:98:57:ee:50:27:c0:cd:ce:a2:b1:
7a:b3:39:3d:44:97:02:cf:f7:62:80:ec:45:de:3b:
50:d6:c5:7b:e4:8b:96:ef:52:dc:71:b8:d5:56:e3:
d1:d4:c4:81:f4:0c:91:02:7e:0a:14:d3:d1:8d:d5:
b6:58:21:0a:95:66:08:92:8b:94:1b:b7:23:cf:31:
53:53:16:44:b5:26:8b:a8:7b:db:dd:7a:d8:3b:75:
99:00:1d:2c:84:aa:51:e7:d1:df:36:be:a3:de:48:
5f:e2:3e:96:23:8d:3b:77:c4:90:a8:b4:e9:48:a2:
b3:2f:6d:80:7e:df:2f:86:0e:a8:d4:07:80:ab:0c:
6a:9d:9c:17:bd:87:aa:ad:02:3b:13:8c:aa:1f:63:
e5:1a:dc:5f:43:65:c3:32:c0:7a:8f:e1:41:6a:9e:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:80:08:11:67:39:94:8F:BF:81:CF:C2:BC:01:9B:51:4A:35:C9
X509v3 Authority Key Identifier:
keyid:1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:80:df:c7:e4:54:ae:6e:70:78:bc:36:ce:03:bb:14:07:
29:2f:f6:5e:77:ed:8a:f6:65:a8:85:dd:6f:a9:f9:5c:e3:2d:
55:07:07:1c:d0:9f:34:51:27:3b:5d:73:2c:32:09:dd:40:81:
5f:ab:5e:5b:28:9a:02:81:6a:33:0a:ae:1f:94:f3:d2:75:b6:
a3:c4:f3:41:b1:fb:3a:89:2c:aa:6a:a9:05:0c:3e:65:c3:e2:
dc:92:67:59:c0:93:9f:34:ef:38:f8:d0:de:c6:69:4e:5d:88:
7b:20:a5:07:8b:ad:81:eb:dc:ba:8b:e8:75:9d:68:2d:e2:cc:
2a:22:84:21:49:47:40:45:f4:81:30:51:f9:70:26:eb:41:fc:
2f:b0:20:16:99:c8:6c:70:c3:5c:27:43:8e:bc:28:21:4b:b0:
4c:8a:fb:95:6e:4c:18:cb:ea:b7:6b:49:22:69:ab:d2:95:31:
b4:8b:62:48:ec:9a:c9:1e:30:d6:9e:cf:d7:a2:77:34:b1:14:
9a:c4:d1:c6:8f:7a:a8:41:f7:06:05:6d:9f:97:30:df:e4:f8:
49:c1:7d:19:aa:f9:0d:cb:60:66:ce:50:71:5a:17:69:ae:39:
38:bc:11:25:5c:02:38:33:14:c0:ff:fe:1a:ae:e7:a7:58:49:
2c:7b:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:48 2026 by rpki-client