Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: OOHs/kqEwBr2LqXeZ3CbEy67sg+B/GQNGyQpbkoeG3g=
Subject key identifier: 99:31:3B:87:FF:5E:4A:3D:86:C6:9D:DA:20:B2:46:B9:90:FA:09:E8
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 019D3865E43361167564E2E801DBB86A51EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: F6+beIDc+AFsROTXL/oeA4r41208rM6rueRgkFUEdc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e4:33:61:16:75:64:e2:e8:01:db:b8:6a:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=99313b87ff5e4a3d86c69dda20b246b990fa09e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:90:c1:13:73:a5:d4:2b:59:4d:46:2c:4e:
3f:93:11:56:e8:30:0a:0d:8f:78:b6:57:64:23:f6:
99:2e:b7:39:da:d2:ce:e0:e1:45:99:81:e2:d0:72:
87:f1:21:be:67:6d:aa:cd:3e:63:94:42:1b:bb:15:
5a:dc:12:75:03:e9:7c:53:25:a3:25:9e:9f:5b:16:
d1:36:e0:3f:f1:ec:6a:b3:75:28:88:39:06:a1:dc:
05:40:ca:e9:a1:10:3d:aa:a7:ff:93:07:00:45:87:
10:29:07:9d:a4:13:92:60:c4:78:6d:ad:3c:c1:a9:
f2:0a:cd:bd:64:c8:d0:93:33:7b:95:c4:1f:53:d9:
c0:bc:4d:85:26:92:e5:5f:30:18:04:96:ad:96:63:
36:ca:b2:88:bb:a8:3f:54:21:30:82:af:52:d0:31:
b6:d1:5e:cb:d5:2a:08:7c:1c:c5:c3:69:75:9f:96:
06:08:54:93:d7:1c:92:02:31:fd:24:11:3c:6a:02:
fa:29:98:f5:03:ab:3b:c7:6e:7d:f1:81:82:0b:4d:
5c:38:bd:21:4e:af:c3:69:89:ec:e1:a9:1a:fc:16:
e3:cb:1d:03:f3:ac:75:3d:50:4d:b1:73:65:87:11:
3e:0a:a5:da:05:d8:fa:04:26:2a:31:66:ba:eb:e1:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:3B:87:FF:5E:4A:3D:86:C6:9D:DA:20:B2:46:B9:90:FA:09:E8
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:f1:af:ab:35:0c:c8:18:8f:3d:0c:ce:3b:16:2e:21:d4:
45:29:cb:0a:2e:d7:a8:e6:65:3a:15:17:84:eb:e7:ba:22:bf:
a9:e2:52:e0:fe:a9:5b:ca:9d:8e:23:a3:20:0e:8c:6f:86:4c:
cc:ad:e5:3d:1a:1d:b2:8c:d0:7a:9e:45:5b:4a:9a:67:f6:c5:
d5:9e:68:c9:b4:5c:29:3e:93:c5:00:5f:34:66:11:ef:43:8b:
79:45:55:df:ef:dc:1d:b1:20:89:17:89:11:60:eb:de:f8:fd:
73:67:66:96:d6:38:70:d8:a1:c8:5f:58:5e:95:3c:b3:56:af:
1c:d3:1c:27:d5:05:24:e5:c0:c9:0d:7e:5a:ca:0d:06:16:a5:
1f:5e:e0:9e:3c:e9:d1:42:1d:63:11:cc:44:da:aa:eb:d5:6d:
df:56:0b:95:2c:40:af:b1:4e:42:1f:2b:85:c1:64:72:a2:65:
bd:d8:6a:88:df:89:c2:ea:2b:85:ad:af:f6:e1:d2:d3:0e:27:
2a:66:52:c6:43:28:2c:17:33:8d:2e:7b:2a:b8:78:bb:bb:11:
1b:9f:79:f5:25:ce:54:81:bc:c0:25:95:79:d6:c5:00:a8:38:
f5:db:67:c3:d2:26:c4:fe:3e:95:b8:a5:ff:29:c0:3e:20:b0:
b9:a5:dc:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeQzYRZ1ZOLoAdu4alHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MThiMDU0ZDIwZGZkYzljNTQ5M2M1MmM4NjIzNDc3NDkw
NGJlNzcwHhcNMjYwMzI5MDcwMTM0WhcNMjYwMzMwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg5OTMxM2I4N2ZmNWU0YTNkODZjNjlkZGEyMGIyNDZiOTkwZmEwOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilWQwRNzpdQrWU1GLE4/kxFW6DAK
DY94tldkI/aZLrc52tLO4OFFmYHi0HKH8SG+Z22qzT5jlEIbuxVa3BJ1A+l8UyWj
JZ6fWxbRNuA/8exqs3UoiDkGodwFQMrpoRA9qqf/kwcARYcQKQedpBOSYMR4ba08
wanyCs29ZMjQkzN7lcQfU9nAvE2FJpLlXzAYBJatlmM2yrKIu6g/VCEwgq9S0DG2
0V7L1SoIfBzFw2l1n5YGCFST1xySAjH9JBE8agL6KZj1A6s7x2598YGCC01cOL0h
Tq/DaYns4aka/Bbjyx0D86x1PVBNsXNlhxE+CqXaBdj6BCYqMWa66+Hd8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxO4f/Xko9hsad2iCyRrmQ+gnoMB8GA1UdIwQY
MBaAFIYYsFTSDf3JxUk8UshiNHdJBL53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEt
YzQ3MzZjYTVjMjVhLzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEtYzQ3MzZjYTVjMjVh
LzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2Lxr6s1
DMgYjz0MzjsWLiHURSnLCi7XqOZlOhUXhOvnuiK/qeJS4P6pW8qdjiOjIA6Mb4ZM
zK3lPRodsozQep5FW0qaZ/bF1Z5oybRcKT6TxQBfNGYR70OLeUVV3+/cHbEgiReJ
EWDr3vj9c2dmltY4cNihyF9YXpU8s1avHNMcJ9UFJOXAyQ1+WsoNBhalH17gnjzp
0UIdYxHMRNqq69Vt31YLlSxAr7FOQh8rhcFkcqJlvdhqiN+Jwuorha2v9uHS0w4n
KmZSxkMoLBczjS57Krh4u7sRG5959SXOVIG8wCWVedbFAKg49dtnw9ImxP4+lbil
/ynAPiCwuaXcSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:01 2026 by rpki-client