
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: V1nTr1GXcBExSqQ5P5vSLRRn4dtXTQM723X3z40HV+I=
Subject key identifier: F9:27:6A:EB:18:91:75:C6:8E:F1:B3:E9:48:19:D9:51:3B:7D:B3:45
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 019CAB6B1F48504B0C014063559D6BCFE560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: QM+zY5Hn9RjosbL4SkSUgjYOlvJVVlVb8pLWhFJY23s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1f:48:50:4b:0c:01:40:63:55:9d:6b:cf:e5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=f9276aeb189175c68ef1b3e94819d9513b7db345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:b2:32:4c:34:9a:fe:fd:a4:42:d2:3c:4d:
1b:de:b2:ea:6c:38:44:82:66:c8:75:56:dc:a3:ab:
f5:dd:04:3b:fe:c0:64:8b:e2:85:45:bd:5f:31:2c:
51:d8:3c:69:ff:5a:0b:c5:21:b5:85:a4:52:6f:e3:
c6:c3:c0:e4:2b:e1:b3:c4:07:c0:3d:b3:c1:7f:ab:
df:12:59:fe:f8:55:e9:73:ac:25:ac:4c:65:fd:e4:
03:32:90:90:8d:3c:5d:a2:5f:eb:5f:8d:fe:b1:cc:
82:21:a3:bf:e5:3a:65:0e:03:60:7f:5e:b7:37:78:
be:11:a0:0a:5a:56:f7:99:e2:74:fb:6b:db:cb:fb:
2d:5b:c5:b4:39:77:4a:93:ca:72:e2:b9:b8:4c:05:
3e:68:0e:cd:f6:90:59:67:17:74:72:19:39:d2:74:
64:bc:df:56:b7:3e:9c:80:f6:f7:06:52:45:12:9e:
c5:e4:51:da:cb:a0:7d:36:20:dc:a6:2a:ae:27:82:
b3:04:37:5e:0e:6e:91:04:4e:4f:68:04:5c:af:98:
3e:14:10:c7:99:bf:59:15:52:2e:5a:cf:66:51:05:
39:7f:1d:14:5e:1e:3d:e2:96:7d:64:8e:e3:91:bc:
f7:76:f6:92:2d:04:26:70:3d:82:e9:aa:e5:c8:e8:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:6A:EB:18:91:75:C6:8E:F1:B3:E9:48:19:D9:51:3B:7D:B3:45
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:17:8a:2e:52:8a:53:e8:4b:39:d1:fd:9f:d4:c5:0a:fb:
dc:06:25:41:39:55:f3:4b:18:df:2b:52:39:05:d4:2d:14:17:
2c:0f:4e:77:9b:a0:b2:4e:f4:cb:77:f7:d3:49:69:a2:48:2b:
15:d4:25:6a:93:89:0b:b6:eb:ba:b0:b6:71:6e:cc:5f:f0:17:
75:7c:8a:b6:99:c2:15:07:2d:4a:6d:4f:24:22:56:e1:3f:f7:
76:de:22:b2:e4:3b:93:f0:d0:fa:f5:4c:d4:88:91:f2:99:ff:
ba:14:24:23:95:2d:84:a8:fb:50:7f:a8:6d:13:76:d7:e9:9a:
4d:ed:78:aa:79:70:2d:29:0c:d3:a0:4b:d5:64:a3:63:94:ea:
c1:4b:4d:c8:ec:ad:08:7a:ad:4f:a1:4c:44:a7:d9:32:89:24:
9a:5f:3a:33:9f:7b:8b:6a:3f:3d:62:c0:27:b3:01:c6:67:06:
3b:03:cb:d4:74:79:ab:ad:66:44:a3:8b:ba:0f:38:36:5a:8b:
34:9d:fe:8b:c2:a7:ce:5c:3d:84:c7:c2:9f:f6:cb:f2:1a:b8:
55:06:a6:26:4a:fa:b5:e1:d1:8f:47:d7:c2:7a:1f:95:b9:8d:
90:fd:48:66:f8:39:d1:1d:f9:5b:d1:3b:d3:a5:cd:b8:1c:79:
42:40:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:14 2026 by rpki-client