Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: fS3x7xaIFGdi1RdTtkw++17FrFscVBjPHzFK8/nifuE=
Subject key identifier: F7:66:71:C9:E8:F6:36:33:BD:77:A3:A7:4A:7A:D3:FB:56:01:A8:DE
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019D3865EF944B1BDD32CF43C3BA475AE68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: 09+GcSzknLlnKNk9puGPe0gc2PBJHKDWX/hDv3349co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ef:94:4b:1b:dd:32:cf:43:c3:ba:47:5a:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=f76671c9e8f63633bd77a3a74a7ad3fb5601a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:2c:58:f8:51:de:1d:e1:3c:6d:d3:c2:60:
53:76:10:71:e4:b0:f4:e8:f5:f7:8c:0b:3d:79:8a:
3a:2d:a5:87:34:60:51:06:3b:1c:76:7d:d8:3c:c0:
82:ce:10:54:9c:d7:43:8e:63:71:d6:72:1b:33:5a:
3d:b8:e3:63:81:5e:b5:cc:76:24:c2:46:07:88:e9:
3e:ca:6f:bc:72:a6:34:6c:55:0d:77:c3:7f:80:4c:
72:58:8a:79:81:9e:b8:c6:bd:09:60:a3:3b:41:d3:
f1:ee:b5:d0:02:32:e9:d4:1a:ec:41:37:a2:4d:b3:
02:4b:11:75:01:d7:7b:ca:34:20:dd:4d:dc:18:36:
0e:6d:3e:99:31:8f:00:b1:2d:07:8c:a2:9c:04:56:
fb:84:8f:0b:b0:83:a7:87:79:1d:c4:7f:7e:f2:c1:
e4:61:80:8e:86:69:17:a6:40:84:2a:46:6a:55:43:
47:2a:05:d8:98:8a:47:32:92:aa:a2:7f:fa:59:c2:
f8:f5:20:4f:18:4d:80:1c:33:2f:85:c7:1c:b8:3e:
2f:eb:e2:1f:7a:8e:ca:49:0b:35:88:61:11:f7:e5:
4e:09:01:13:c1:46:e0:43:e2:7e:22:90:85:0a:91:
33:bc:4b:b4:5f:b2:a9:df:b3:d3:07:9c:1d:9a:39:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:71:C9:E8:F6:36:33:BD:77:A3:A7:4A:7A:D3:FB:56:01:A8:DE
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:83:0f:36:61:b1:2c:80:1f:77:ce:69:8c:19:82:bb:ec:
7f:b8:eb:f9:1b:89:e7:26:3b:7b:91:4e:7c:4c:92:82:fd:b4:
e8:42:16:86:b6:2b:a5:7c:fd:14:07:e2:9d:93:ed:7e:16:53:
3c:05:03:44:3c:0f:21:73:46:0a:38:7b:03:f4:da:49:b7:d9:
b8:e3:52:91:60:07:ef:2b:ab:aa:71:ed:40:be:c1:1a:59:19:
c0:2b:fa:ba:2d:da:83:8d:22:ed:bd:3c:71:47:e5:93:cd:6d:
8f:35:4c:15:d9:93:3d:11:bd:55:1f:ef:67:ab:1e:29:29:92:
78:81:50:f1:22:9a:7c:3d:22:4d:bd:0c:dd:5b:d5:40:0d:32:
71:66:35:a3:b2:b8:17:1e:7a:64:fd:4f:70:10:01:bc:d0:18:
05:8e:fe:57:7d:89:dd:d7:bc:d2:53:6b:a5:df:1d:35:c9:55:
9f:73:45:82:16:4a:e8:e0:e9:dc:32:12:61:ec:06:6f:c1:f2:
41:07:aa:d2:6d:21:31:fa:4a:31:ce:56:3e:87:81:ab:a2:c4:
25:ef:77:be:52:8d:08:1c:cd:ea:b7:88:e1:5e:28:88:5f:06:
ce:04:a1:d4:dd:03:de:c8:08:42:17:ea:9f:a0:de:62:7e:2f:
c5:1f:db:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ze+USxvdMs9Dw7pHWuaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4
Nzg3MDUwHhcNMjYwMzI5MDcwMTM3WhcNMjYwMzMwMDcwMTM3WjAzMTEwLwYDVQQD
EyhmNzY2NzFjOWU4ZjYzNjMzYmQ3N2EzYTc0YTdhZDNmYjU2MDFhOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ0sWPhR3h3hPG3TwmBTdhBx5LD0
6PX3jAs9eYo6LaWHNGBRBjscdn3YPMCCzhBUnNdDjmNx1nIbM1o9uONjgV61zHYk
wkYHiOk+ym+8cqY0bFUNd8N/gExyWIp5gZ64xr0JYKM7QdPx7rXQAjLp1BrsQTei
TbMCSxF1Add7yjQg3U3cGDYObT6ZMY8AsS0HjKKcBFb7hI8LsIOnh3kdxH9+8sHk
YYCOhmkXpkCEKkZqVUNHKgXYmIpHMpKqon/6WcL49SBPGE2AHDMvhcccuD4v6+If
eo7KSQs1iGER9+VOCQETwUbgQ+J+IpCFCpEzvEu0X7Kp37PTB5wdmjlTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdmccno9jYzvXejp0p60/tWAajeMB8GA1UdIwQY
MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt
YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk
LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxCDDzZh
sSyAH3fOaYwZgrvsf7jr+RuJ5yY7e5FOfEySgv206EIWhrYrpXz9FAfinZPtfhZT
PAUDRDwPIXNGCjh7A/TaSbfZuONSkWAH7yurqnHtQL7BGlkZwCv6ui3ag40i7b08
cUflk81tjzVMFdmTPRG9VR/vZ6seKSmSeIFQ8SKafD0iTb0M3VvVQA0ycWY1o7K4
Fx56ZP1PcBABvNAYBY7+V32J3de80lNrpd8dNclVn3NFghZK6ODp3DISYewGb8Hy
QQeq0m0hMfpKMc5WPoeBq6LEJe93vlKNCBzN6reI4V4oiF8GzgSh1N0D3sgIQhfq
n6DeYn4vxR/bQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client