Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: a0oX7DmLMQ5n9U03pP+G/E3cItb0XfnP1jmh7vcyNKU=
Subject key identifier: AE:8A:8D:1F:95:EE:33:0B:7D:2E:0F:67:B8:50:49:9F:CE:A3:5C:37
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019CAC0FE7CC519D67FA9746CC20B4151A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0736
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 84lhNVWjfCNBvr3PCV47ce0nnfU.roa (hash: 4T3jn28U+vBZ4NxTYxbLOUMX86XF3V96DLzXoQSnwmA=)
2: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (hash: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=)
3: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: mia5FdrK8CohFQJLrlai6N1pUplYpnuVMHMls/UA/to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e7:cc:51:9d:67:fa:97:46:cc:20:b4:15:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=ae8a8d1f95ee330b7d2e0f67b850499fcea35c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:3a:77:b9:4b:79:67:60:c0:ab:74:56:3f:
b8:40:5e:25:64:2d:e5:f8:ec:4f:f0:1c:76:f4:32:
87:ef:65:00:e5:9a:28:20:ab:95:ab:42:da:48:ba:
f9:60:b3:c0:7d:15:4d:31:ba:8c:4b:ab:19:50:99:
98:6a:dd:39:60:39:74:bd:68:38:a6:41:35:10:83:
f2:89:c6:61:68:f6:3a:12:87:91:92:23:a2:58:f7:
75:29:83:19:cd:ac:f6:c1:7e:c5:c1:70:9c:63:37:
fc:b9:8e:78:5d:2f:bd:ef:98:a2:06:4e:7d:19:b5:
40:b0:23:51:77:74:f0:4b:ba:dc:45:ca:c0:85:d5:
cd:a9:a8:d5:dc:83:c9:90:10:b2:7c:1f:d9:44:ca:
ea:81:cc:4f:b6:8b:a8:62:53:f6:5a:51:9c:f6:e4:
3b:67:da:cf:bb:f4:8b:21:54:7f:74:1d:ae:1e:92:
11:49:28:81:1d:d4:ef:19:2a:cd:23:82:57:0b:67:
a5:0a:8c:b5:14:77:f7:f9:03:4f:a9:f1:fe:c9:82:
7a:a4:79:42:5d:e4:39:f6:3f:7c:c2:4e:6e:c0:64:
d0:4d:ca:ae:5b:76:05:c9:b9:c7:9d:2b:83:ae:56:
86:1f:c2:57:37:6b:2f:4a:b7:71:f7:1f:fe:f6:f3:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:8D:1F:95:EE:33:0B:7D:2E:0F:67:B8:50:49:9F:CE:A3:5C:37
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:f9:7b:d6:d9:79:6f:61:86:c0:75:57:2f:5f:01:1d:cf:
9f:31:b2:bc:d3:2b:06:50:7a:b3:29:0b:9f:00:40:06:76:5f:
b1:bc:a2:53:79:26:23:61:67:b0:b0:19:09:a4:8c:13:da:b9:
ab:9a:29:5b:51:1a:f8:93:c2:6f:0b:69:a3:3a:fc:89:29:e8:
af:c5:b4:f6:84:04:54:57:67:81:b5:a3:39:88:06:ec:d8:2d:
0c:77:0c:83:c2:69:b4:45:02:2e:9c:a9:0d:ae:04:9e:4c:51:
6a:d9:fa:ed:41:eb:8c:f6:d5:11:84:f7:17:2a:f5:f4:d8:b4:
08:50:2d:d4:b8:c9:3c:63:b8:fa:9f:26:0d:4f:38:61:27:1b:
e1:0b:59:1a:3c:2a:44:ab:40:ab:79:4c:73:f3:7d:96:71:3c:
65:d1:99:4b:d7:2c:d6:6d:80:8e:05:3f:96:b5:8a:3c:2a:e8:
42:64:69:75:d2:31:ae:76:b6:a3:2b:01:2b:aa:c8:8c:2d:7b:
12:1e:a7:a7:15:ef:eb:38:28:79:fe:1c:c5:60:bf:9d:05:c5:
66:68:66:86:da:43:d3:06:7f:b1:d8:81:c1:51:75:f3:89:3a:
09:34:76:b5:bd:21:be:08:43:da:ee:3f:a5:3b:d3:55:cd:e8:
59:87:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:29 2026 by rpki-client