Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: GYoO1ha2MYeA6k+PGflxByDpZb2KJKKBdaFSjN6BQ1w=
Subject key identifier: B1:62:AF:09:E4:2D:B2:B2:D7:30:7D:26:65:1E:39:96:36:89:EA:AE
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019D99993500584D75A22739890B2C4B9FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 07B1
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: 84lhNVWjfCNBvr3PCV47ce0nnfU.roa (hash: 4T3jn28U+vBZ4NxTYxbLOUMX86XF3V96DLzXoQSnwmA=)
2: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (hash: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=)
3: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: 61D4VOe7en0T/K/DyrTjQxETa0EYmdkdatxZrec+SeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:35:00:58:4d:75:a2:27:39:89:0b:2c:4b:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=b162af09e42db2b2d7307d26651e39963689eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:fd:fb:27:91:ff:bd:eb:cd:39:1b:c9:85:
2e:12:25:64:5c:28:95:df:ad:82:50:83:8a:97:48:
04:89:d5:4a:f3:f9:4b:14:c6:7d:f7:81:dd:10:6d:
e8:0a:73:e0:56:17:46:6e:b6:ad:5c:d0:9f:10:96:
8e:2e:d7:06:88:d0:5e:4e:20:38:72:3e:39:84:b9:
f7:b6:b5:2e:ef:3f:99:b9:0a:fa:82:2a:86:f1:f7:
be:3e:71:47:bc:bb:21:3a:81:85:2f:7f:54:82:a8:
e7:f5:9e:48:6e:2e:09:ff:94:c1:0a:2b:54:cb:ea:
67:9a:d1:70:1a:bf:af:c9:74:d3:64:05:e7:d3:8d:
df:c7:5e:11:95:db:ea:e6:74:02:31:c0:e4:33:35:
19:a7:0c:77:1d:04:59:6b:c8:b0:78:cc:f1:e1:42:
e0:38:f5:ec:5e:d2:cb:08:02:f8:13:3b:1e:ad:77:
af:a4:2a:7a:ce:d9:2c:2b:a3:76:d5:d8:86:e4:14:
e0:09:31:13:83:a3:de:7b:a5:b4:57:ec:54:48:69:
bb:22:17:82:4b:59:b3:b7:39:7a:92:92:8e:50:35:
9c:70:6d:89:d7:3b:70:da:2b:06:1c:a7:c7:8f:5c:
c9:37:76:76:d4:2a:49:50:d5:e5:a1:fa:49:2d:1a:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:AF:09:E4:2D:B2:B2:D7:30:7D:26:65:1E:39:96:36:89:EA:AE
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ab:d5:92:ea:10:c1:40:7d:36:98:9c:f2:3f:8d:83:cc:76:
ca:58:9f:69:59:29:13:39:72:98:44:c5:da:a1:75:6c:6f:16:
a9:6a:8f:29:ca:c8:65:c1:e1:a8:4d:11:34:62:e7:e0:02:7c:
b6:40:18:51:52:96:44:4d:09:9f:0d:05:4c:46:62:3d:6d:3f:
12:22:51:ed:ea:14:1c:e4:a5:95:1e:3b:6c:be:3f:d7:2c:ad:
60:c6:77:2c:c8:48:e2:01:b2:87:d8:86:96:e1:fa:9e:84:f7:
a6:e0:2f:e4:31:90:53:03:65:bd:12:fb:29:6d:36:bb:db:f7:
1f:81:dc:b6:18:62:79:9f:e5:96:a3:41:8e:3a:01:f5:18:72:
b9:b7:e8:4d:e0:0c:e0:15:c1:10:13:73:e7:dc:88:9a:3a:48:
b9:04:fb:16:ed:64:f8:a5:38:fb:4b:85:37:93:8d:6d:18:93:
1d:00:d0:8e:1c:f3:af:cf:ca:37:1a:b5:e4:42:57:09:78:0b:
28:97:71:49:30:dc:d7:68:fd:d0:83:92:a5:21:39:35:d5:a3:
54:88:62:74:a0:c6:bb:9c:e2:21:8a:cc:64:a5:6c:d1:c8:17:
5d:a9:76:30:0d:16:c6:11:5b:d6:b8:44:c3:e4:70:6f:09:ae:
02:d5:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:43 2026 by rpki-client