Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: wJcLLBvH2CqQWrQcKUj4kxfum4rTVUIfZwAwsGRXrFs=
Subject key identifier: C0:68:9F:C5:FC:45:98:9A:CF:70:C0:38:EE:22:BB:14:9A:BB:66:4D
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 01A0883006E2D9228365A912BAF6384D4B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 1166
Signing time: Wed 09 Sep 2026 22:00:43 +0000
Manifest this update: Wed 09 Sep 2026 22:00:43 +0000
Manifest next update: Thu 10 Sep 2026 22:00:43 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: iP2Ja/oFNRM6+a7fM1eeXYzrk7d4JuJ3oDkZR6nrycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:30:06:e2:d9:22:83:65:a9:12:ba:f6:38:4d:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Sep 9 22:00:43 2026 GMT
Not After : Sep 10 22:00:43 2026 GMT
Subject: CN=c0689fc5fc45989acf70c038ee22bb149abb664d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:e8:ac:11:7b:d4:63:83:a0:f7:73:b9:c1:
3b:6e:8a:42:cf:29:08:ca:22:1a:59:f3:ca:2e:b6:
be:74:e7:30:77:e5:2c:fe:f7:bc:b0:66:d6:82:d9:
84:f1:c6:82:cf:64:8c:8d:99:54:58:ab:de:d6:cb:
4b:6f:bc:42:fe:43:77:51:10:c7:25:b8:af:9d:8a:
1c:64:ed:a0:89:0c:4a:99:5b:9e:1b:fc:a8:e6:78:
ee:80:39:a9:7d:0d:51:77:22:cb:c0:43:5a:71:30:
a4:be:36:29:70:31:8a:f6:bc:cd:a2:6c:21:a0:73:
f5:8d:7b:ca:b7:1b:72:25:d5:76:d9:3b:e1:c7:df:
49:09:4f:48:26:3e:69:6a:fa:02:85:bd:85:c2:89:
a8:5a:19:20:f0:77:7d:a0:62:25:02:fb:b8:25:e7:
81:a3:2b:a1:d0:82:8a:f2:27:b0:87:16:e3:0b:01:
b5:b6:17:51:6c:65:c2:c2:db:29:51:61:7b:7d:51:
b5:5e:c5:06:8e:35:6d:2b:12:25:e9:85:bd:ee:15:
79:54:98:fc:37:45:6c:5f:1f:b5:3d:bb:55:56:c6:
8d:87:22:2e:27:0f:16:0b:d0:21:2d:81:3a:4d:ed:
c8:7f:38:fa:e3:ee:ad:71:1e:60:eb:33:9d:5e:b2:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:9F:C5:FC:45:98:9A:CF:70:C0:38:EE:22:BB:14:9A:BB:66:4D
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a8:5a:ab:6a:f8:11:44:04:9e:25:b5:95:97:09:7a:68:66:
ec:68:6e:02:40:e4:59:d8:1c:18:5a:f3:6a:98:e5:ba:78:75:
21:43:a3:cc:e4:d8:6c:91:1a:30:31:39:98:2e:d3:55:0a:ac:
81:55:e6:98:c3:46:0e:eb:3c:50:a3:70:89:47:09:f4:d4:71:
af:5e:c5:c8:6a:2c:61:6d:29:58:b8:bc:a1:ae:d9:9a:ea:7d:
e0:81:10:da:7a:64:9c:49:94:34:4e:85:93:1b:c4:ea:06:10:
24:72:df:68:c6:5e:65:57:10:b1:22:fb:70:13:01:c4:d9:45:
0f:7b:76:93:3a:2b:92:d3:21:f7:d0:4a:14:67:b5:bf:a0:67:
21:b0:6a:10:da:cd:11:55:26:64:7a:27:10:64:d8:ec:d2:ce:
a3:48:12:65:b1:c7:39:ff:1d:7f:50:f6:29:c4:a1:94:b0:57:
0d:b8:05:6b:dc:77:ed:cf:ec:4a:53:e7:4d:a5:33:ed:88:4f:
dd:09:ba:c7:8d:b0:2b:7c:f1:e0:d2:14:de:ba:d9:ce:38:52:
2f:e9:42:2b:17:30:fb:44:f6:1a:5e:e1:40:8d:49:9e:aa:32:
de:2d:91:59:18:0a:12:b1:37:92:cb:8c:da:57:78:46:01:b7:
8a:4e:13:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCIMAbi2SKDZakSuvY4TUuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4
Njg2NmMwHhcNMjYwOTA5MjIwMDQzWhcNMjYwOTEwMjIwMDQzWjAzMTEwLwYDVQQD
EyhjMDY4OWZjNWZjNDU5ODlhY2Y3MGMwMzhlZTIyYmIxNDlhYmI2NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngnorBF71GODoPdzucE7bopCzykI
yiIaWfPKLra+dOcwd+Us/ve8sGbWgtmE8caCz2SMjZlUWKve1stLb7xC/kN3URDH
JbivnYocZO2giQxKmVueG/yo5njugDmpfQ1RdyLLwENacTCkvjYpcDGK9rzNomwh
oHP1jXvKtxtyJdV22Tvhx99JCU9IJj5pavoChb2FwomoWhkg8Hd9oGIlAvu4JeeB
oyuh0IKK8iewhxbjCwG1thdRbGXCwtspUWF7fVG1XsUGjjVtKxIl6YW97hV5VJj8
N0VsXx+1PbtVVsaNhyIuJw8WC9AhLYE6Te3Ifzj64+6tcR5g6zOdXrLlyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBon8X8RZiaz3DAOO4iuxSau2ZNMB8GA1UdIwQY
MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt
YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw
LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYahaq2r4
EUQEniW1lZcJemhm7GhuAkDkWdgcGFrzapjlunh1IUOjzOTYbJEaMDE5mC7TVQqs
gVXmmMNGDus8UKNwiUcJ9NRxr17FyGosYW0pWLi8oa7Zmup94IEQ2npknEmUNE6F
kxvE6gYQJHLfaMZeZVcQsSL7cBMBxNlFD3t2kzorktMh99BKFGe1v6BnIbBqENrN
EVUmZHonEGTY7NLOo0gSZbHHOf8df1D2KcShlLBXDbgFa9x37c/sSlPnTaUz7YhP
3Qm6x42wK3zx4NIU3rrZzjhSL+lCKxcw+0T2Gl7hQI1Jnqoy3i2RWRgKErE3ksuM
2ld4RgG3ik4TUw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:47:42 2026 by rpki-client