Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: 96M6QhGq4k335vSTjmZaxFXEzK4EytAWh81mrHbRWuE=
Subject key identifier: 24:4E:9E:00:B1:AF:67:59:53:7C:94:40:21:FF:FA:3E:80:E8:B1:88
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019DD050A7419879CE2200C3337A6C8EB0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 089E
Signing time: Mon 27 Apr 2026 19:00:39 +0000
Manifest this update: Mon 27 Apr 2026 19:00:39 +0000
Manifest next update: Tue 28 Apr 2026 19:00:39 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: ctBeGXQ8btpGRNrkp7Vt9CHRXex/AtGymaL2BJtMvWA=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:a7:41:98:79:ce:22:00:c3:33:7a:6c:8e:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Apr 27 19:00:39 2026 GMT
Not After : Apr 28 19:00:39 2026 GMT
Subject: CN=244e9e00b1af6759537c944021fffa3e80e8b188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:0c:5c:e3:4b:4d:ca:5b:7e:76:03:ba:06:
d8:a3:7f:2d:c4:68:d8:76:4f:cb:38:21:da:7d:ef:
0e:e9:e4:af:90:4f:2b:ec:d5:c4:fc:0c:5a:62:00:
4c:ef:73:41:cd:80:25:15:85:68:54:70:b6:02:bd:
dc:ee:b4:c0:ea:8f:75:cb:4d:ab:f3:22:2c:8a:9a:
4d:22:5a:eb:c6:08:10:ef:c5:f3:62:fc:be:0e:9c:
04:9a:d1:5c:a9:5f:17:d2:43:f9:c5:cd:a1:b6:f9:
1a:c1:2c:1a:92:c8:0b:da:16:0a:17:ac:31:1a:6b:
3a:15:cf:97:16:42:6a:49:e8:77:a8:52:30:a7:40:
52:ef:ab:1b:94:ed:62:1f:a6:51:4f:58:63:28:47:
df:6f:7d:f8:ab:91:85:16:24:90:95:f7:62:ef:2c:
b6:85:94:26:a6:45:61:30:ae:d8:46:ea:3b:0a:24:
04:4c:8e:f1:42:c1:e0:09:43:58:b5:22:0a:90:60:
91:b8:d5:a6:9d:d8:d2:9c:02:42:ed:0e:02:70:d5:
8d:95:c5:0d:6f:d7:f0:58:4d:6e:60:51:ca:ce:ad:
f2:2d:c7:e3:7a:d3:98:97:17:9a:c2:75:6c:30:d1:
89:e8:fb:d0:fc:9b:cc:24:98:bb:30:cd:b3:91:54:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:9E:00:B1:AF:67:59:53:7C:94:40:21:FF:FA:3E:80:E8:B1:88
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:7b:8f:4c:dc:63:67:5b:e2:6d:ab:c3:52:52:de:25:0d:
29:2c:60:0e:76:a1:49:b7:a1:9c:9c:fd:bf:d7:e8:b1:22:ba:
bc:6c:d0:48:95:53:d3:ad:d1:cd:71:be:87:35:5e:1d:a1:fe:
d4:67:fb:91:c6:f5:6b:49:e4:2f:9f:a0:cc:ca:04:4a:56:08:
88:5d:19:c4:51:a4:a6:3c:b9:bb:ce:59:54:64:60:ce:79:29:
1e:9f:eb:22:a7:4a:a2:d7:80:a7:c6:89:12:a0:69:a7:0b:35:
7b:ae:28:de:da:7c:3b:0b:18:8d:1f:b4:96:42:e9:c1:47:0a:
4b:80:12:1c:3c:e4:23:b2:5f:10:d1:0a:e7:e7:8a:ef:eb:75:
1d:9b:19:20:70:dd:0d:d3:ce:79:91:c9:7b:f5:d6:90:d9:68:
86:d1:db:b3:79:f5:0b:1d:45:8b:58:48:f9:cd:50:43:85:8f:
29:3e:c1:9b:a4:4d:75:9c:c5:3b:79:f3:ed:1c:08:3a:5a:0b:
c3:0b:37:28:61:92:7b:ca:86:f2:f1:2e:27:ca:d3:18:31:d7:
f3:52:60:53:f4:3f:38:75:94:df:e3:77:28:28:0c:bf:fd:4d:
f0:f7:8c:4b:de:f1:8a:56:1a:38:de:0a:16:1b:b2:9a:68:30:
c3:17:69:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUKdBmHnOIgDDM3psjrCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjYwNDI3MTkwMDM5WhcNMjYwNDI4MTkwMDM5WjAzMTEwLwYDVQQD
EygyNDRlOWUwMGIxYWY2NzU5NTM3Yzk0NDAyMWZmZmEzZTgwZThiMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jQMXONLTcpbfnYDugbYo38txGjY
dk/LOCHafe8O6eSvkE8r7NXE/AxaYgBM73NBzYAlFYVoVHC2Ar3c7rTA6o91y02r
8yIsippNIlrrxggQ78XzYvy+DpwEmtFcqV8X0kP5xc2htvkawSwaksgL2hYKF6wx
Gms6Fc+XFkJqSeh3qFIwp0BS76sblO1iH6ZRT1hjKEffb334q5GFFiSQlfdi7yy2
hZQmpkVhMK7YRuo7CiQETI7xQsHgCUNYtSIKkGCRuNWmndjSnAJC7Q4CcNWNlcUN
b9fwWE1uYFHKzq3yLcfjetOYlxeawnVsMNGJ6PvQ/JvMJJi7MM2zkVRKJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCROngCxr2dZU3yUQCH/+j6A6LGIMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblN7j0zc
Y2db4m2rw1JS3iUNKSxgDnahSbehnJz9v9fosSK6vGzQSJVT063RzXG+hzVeHaH+
1Gf7kcb1a0nkL5+gzMoESlYIiF0ZxFGkpjy5u85ZVGRgznkpHp/rIqdKoteAp8aJ
EqBppws1e64o3tp8OwsYjR+0lkLpwUcKS4ASHDzkI7JfENEK5+eK7+t1HZsZIHDd
DdPOeZHJe/XWkNlohtHbs3n1Cx1Fi1hI+c1QQ4WPKT7Bm6RNdZzFO3nz7RwIOloL
wws3KGGSe8qG8vEuJ8rTGDHX81JgU/Q/OHWU3+N3KCgMv/1N8PeMS97xilYaON4K
FhuymmgwwxdpDw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 01:16:02 2026 by rpki-client