Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: HG0LI2Q/G+MVTGmaLjdz65iDnvgTtIybe2nmPRTZKYo=
Subject key identifier: DA:2E:B1:B8:0E:99:7B:D1:A9:E9:01:1F:10:F5:39:46:2C:41:59:3F
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 01A184883F9AD07B22021C83809F587E034A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 16BA
Signing time: Wed 28 Oct 2026 22:01:24 +0000
Manifest this update: Wed 28 Oct 2026 22:01:24 +0000
Manifest next update: Thu 29 Oct 2026 22:01:24 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: AEl38EJCTP0cKKHb984UdGqDX2sdQOm0me+PdSM98Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:3f:9a:d0:7b:22:02:1c:83:80:9f:58:7e:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Oct 28 22:01:24 2026 GMT
Not After : Oct 29 22:01:24 2026 GMT
Subject: CN=da2eb1b80e997bd1a9e9011f10f539462c41593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:8c:55:44:92:39:77:18:38:b3:56:52:13:
10:a5:7c:e6:3b:a4:1b:fa:5a:94:c7:40:fe:7b:c3:
62:97:7c:15:61:51:6d:2f:aa:05:bb:34:47:c1:01:
cb:a9:10:30:a4:47:d2:31:d8:9c:87:33:14:f3:86:
1e:72:6d:c6:52:ca:8f:db:04:fb:d7:b3:5f:0b:e7:
61:70:ca:fd:27:5b:25:1f:d3:a1:f9:71:3a:7e:86:
f9:38:19:54:06:e3:3a:c9:03:0b:c0:51:66:8e:59:
4d:3d:d5:6b:a9:09:5b:f6:91:30:9b:ec:30:df:8e:
ef:32:0c:e9:d3:25:6e:fe:2b:8a:b0:7d:9b:56:c3:
a1:b4:0b:01:ab:2f:1f:38:13:0f:da:a5:5e:08:1a:
43:4a:79:9e:d1:60:03:ee:01:ec:6f:dd:c5:39:b6:
c9:b6:54:8e:e3:fe:c7:63:d4:fc:c5:a3:d3:6f:ae:
35:11:50:ff:88:25:ee:73:9f:f2:b2:49:27:8d:72:
de:4a:b0:09:7d:53:2d:7c:60:07:6d:2b:32:54:bc:
d5:37:9e:7c:c1:3d:03:23:22:23:ec:3b:3e:f4:22:
6d:45:dc:de:ae:ce:a9:67:c5:e2:e9:ae:59:c3:13:
66:a8:aa:99:cb:4d:29:68:1b:3c:66:f3:75:50:e3:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:B1:B8:0E:99:7B:D1:A9:E9:01:1F:10:F5:39:46:2C:41:59:3F
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:18:50:51:a7:2f:d0:98:1d:fc:ad:dc:88:50:d7:a3:8d:
b6:89:d2:69:46:6b:ee:2d:7b:f0:40:61:97:46:83:b4:71:6b:
8a:bb:28:88:c7:de:01:a5:69:07:d1:e0:70:3d:18:ad:96:4a:
65:0e:93:0b:62:65:7b:86:5b:f4:f0:0c:0b:bb:71:07:f7:62:
7f:2d:63:25:aa:f7:ba:af:6d:e8:a9:1b:0e:b0:6f:d2:1e:12:
63:fb:9a:4f:33:63:d7:cb:ae:23:9b:e5:69:87:3c:ef:81:6d:
ff:46:c8:e1:c3:9e:2b:a7:d8:99:2b:58:9a:8d:fc:2b:2b:bd:
6e:e1:63:a1:56:60:4f:4a:4d:9b:32:d8:96:25:f1:57:cf:f5:
e8:82:f8:9a:3a:f6:7e:d6:d0:8b:92:54:ef:72:f5:21:6e:e4:
05:b4:98:a9:8d:9d:de:20:fa:ae:4c:f8:c9:d5:0a:a5:e9:18:
02:8b:a2:22:cd:52:2b:b7:9d:db:7b:b3:38:23:f2:ff:a2:33:
68:fc:c6:0c:61:65:ae:47:53:e7:fa:17:5c:df:83:b1:b9:62:
f4:bc:84:09:31:ed:3d:0b:83:82:17:7c:2d:ed:6f:f8:d4:ac:
28:4b:ad:03:73:2b:8d:de:65:35:de:e4:96:af:69:c0:79:b3:
07:a9:4c:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEiD+a0HsiAhyDgJ9YfgNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTdhMGUyZDZlNjA3MmU4OGQzNzc0ZGQ3Y2NmYmYwN2Ex
Yzg2MzIwHhcNMjYxMDI4MjIwMTI0WhcNMjYxMDI5MjIwMTI0WjAzMTEwLwYDVQQD
EyhkYTJlYjFiODBlOTk3YmQxYTllOTAxMWYxMGY1Mzk0NjJjNDE1OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcGMVUSSOXcYOLNWUhMQpXzmO6Qb
+lqUx0D+e8Nil3wVYVFtL6oFuzRHwQHLqRAwpEfSMdichzMU84Yecm3GUsqP2wT7
17NfC+dhcMr9J1slH9Oh+XE6fob5OBlUBuM6yQMLwFFmjllNPdVrqQlb9pEwm+ww
347vMgzp0yVu/iuKsH2bVsOhtAsBqy8fOBMP2qVeCBpDSnme0WAD7gHsb93FObbJ
tlSO4/7HY9T8xaPTb641EVD/iCXuc5/yskknjXLeSrAJfVMtfGAHbSsyVLzVN558
wT0DIyIj7Ds+9CJtRdzers6pZ8Xi6a5ZwxNmqKqZy00paBs8ZvN1UOP8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNousbgOmXvRqekBHxD1OUYsQVk/MB8GA1UdIwQY
MBaAFIYXoOLW5gcuiNN3TdfM+/B6HIYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5Njgt
ZWJkYzMyYTZhYjI3LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5NjgtZWJkYzMyYTZhYjI3
LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYsYUFGn
L9CYHfyt3IhQ16ONtonSaUZr7i178EBhl0aDtHFrirsoiMfeAaVpB9HgcD0YrZZK
ZQ6TC2Jle4Zb9PAMC7txB/dify1jJar3uq9t6KkbDrBv0h4SY/uaTzNj18uuI5vl
aYc874Ft/0bI4cOeK6fYmStYmo38Kyu9buFjoVZgT0pNmzLYliXxV8/16IL4mjr2
ftbQi5JU73L1IW7kBbSYqY2d3iD6rkz4ydUKpekYAouiIs1SK7ed23uzOCPy/6Iz
aPzGDGFlrkdT5/oXXN+Dsbli9LyECTHtPQuDghd8Le1v+NSsKEutA3Mrjd5lNd7k
lq9pwHmzB6lMpA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 03:55:37 2026 by rpki-client