Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: rztmJLrySm0hXw5whIIi1hQ8t/57cR8KkBqNTF8pSqA=
Subject key identifier: B4:27:29:6D:60:CB:A3:81:AB:44:B3:C4:AB:75:C5:26:4B:AE:15:FE
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019CAA8FBED3BB8F0CB5625EEB056652D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 06A5
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: e1lV9qdIx+efr1fWbDSlKTl4evODM6AYr0hQcNSHsh8=)
2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:be:d3:bb:8f:0c:b5:62:5e:eb:05:66:52:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=b427296d60cba381ab44b3c4ab75c5264bae15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:c0:1d:b9:93:22:86:f1:70:d2:af:e4:35:
0e:13:7a:a2:d7:24:3f:d6:02:71:81:8f:9b:9f:d0:
5d:29:4f:2d:66:5f:ba:c8:f2:20:c4:b7:9c:b4:0d:
7a:91:d0:a7:7a:c0:e5:d8:e3:28:ac:56:e5:ab:0d:
ca:8a:4d:b8:8a:2d:40:14:6f:ba:9d:35:de:96:85:
46:ee:e6:bc:c9:c2:89:b6:df:1b:c7:3a:c0:ea:fa:
98:9c:3f:ce:83:03:e2:16:ea:31:81:82:fe:46:c6:
be:ea:8d:e4:5a:17:75:b6:c6:99:45:84:5c:5c:42:
71:e7:a5:aa:b8:59:77:ac:3d:df:43:d9:72:60:e7:
b2:95:98:79:62:31:bf:92:1e:38:23:a0:d7:15:7b:
94:58:f2:ce:e1:dd:94:5a:a9:1e:94:98:df:40:dd:
90:74:0e:b1:1b:39:aa:1f:a3:8e:71:f9:bc:95:c2:
c5:5b:27:e1:06:3c:28:b9:da:15:f4:46:ad:98:61:
ed:0b:f6:c0:a1:07:16:5d:d5:88:e4:37:c9:b6:45:
7e:b8:a4:dc:42:12:5d:2b:be:13:4c:a2:b6:26:64:
5f:fa:89:fb:40:49:26:b1:52:cd:0a:5e:ae:aa:08:
8b:70:22:8a:1a:00:67:e2:37:2d:c8:7b:bf:78:88:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:29:6D:60:CB:A3:81:AB:44:B3:C4:AB:75:C5:26:4B:AE:15:FE
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:79:d3:f1:13:b1:61:29:bc:a0:f7:d2:b4:f0:50:1d:f6:a4:
e1:88:55:8a:ec:da:ae:13:73:22:2f:2d:3c:a1:d1:83:8e:6a:
77:ad:9a:4b:b9:05:0e:0e:cd:da:ff:cf:f6:13:4b:51:df:a8:
15:ab:e5:af:64:3d:fe:a8:9f:a4:7f:ae:73:c6:2c:74:77:45:
c8:3f:f7:8b:b0:2d:d0:ed:75:8d:ff:a6:fc:98:7f:dc:4c:d6:
9c:a9:aa:40:1c:40:65:dd:57:f9:97:02:63:88:62:fc:aa:a4:
97:15:b2:1a:92:ff:36:56:88:0b:c8:a3:20:45:46:9b:89:cd:
7f:97:cc:b6:5a:84:96:be:ae:7b:6b:03:8b:9a:e5:2e:51:b1:
9f:f2:d1:46:c8:ed:07:b4:78:53:5c:ac:ea:dd:e6:08:5a:c7:
9d:06:35:8d:9f:32:9b:d1:de:d9:35:28:54:dc:00:79:1e:2b:
5f:07:dc:70:e1:7c:2b:25:bc:d9:83:90:38:0f:7b:22:10:b5:
ba:d2:0d:76:f7:ab:39:0f:62:07:9a:e7:6e:cb:32:45:57:83:
7c:e4:c5:1d:a1:0a:00:32:7a:42:f7:db:eb:76:36:bf:9f:69:
8a:55:4c:48:8b:94:7e:61:e6:00:d3:5d:63:19:f4:ce:c1:91:
86:2a:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:11 2026 by rpki-client