Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: iQcPTl9aQc7sEp/8yMJTxBPEM9MTLotgrbj5jXw+WSQ=
Subject key identifier: 44:18:A6:21:5F:3C:C3:D6:91:52:B0:C8:DA:0B:0F:44:80:57:8C:29
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 019CABD91AACAB803504EFB56043C45FF758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 07E5
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: XDFnDEPsiEu3IlDWfDcWsLNV2hITLIf34R933iqbxRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1a:ac:ab:80:35:04:ef:b5:60:43:c4:5f:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=4418a6215f3cc3d69152b0c8da0b0f4480578c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:85:40:eb:dc:01:9c:47:86:81:aa:0b:85:
fe:ee:16:fd:38:a4:7c:fe:98:3e:63:c3:ce:4f:37:
cd:2f:91:fa:18:95:4e:fc:7a:94:91:ae:26:02:84:
4e:cd:2e:24:d6:db:94:10:30:c5:a2:16:f4:a3:54:
99:a3:04:c5:c1:35:64:ac:55:9d:0a:86:ef:25:c2:
dc:18:13:09:ef:1c:be:45:5b:c9:6a:d5:ba:32:1d:
f4:3c:33:56:2b:79:ae:05:13:3b:b2:7e:8e:77:1f:
a0:74:20:df:9f:d9:e7:4f:b4:65:8c:be:96:54:b8:
d5:d6:e0:bf:4a:3f:f2:cd:75:80:47:fb:a0:66:2d:
20:95:07:fd:1d:a5:67:b9:9c:d9:97:0d:be:db:fd:
e8:b4:38:7e:84:49:cc:43:19:16:39:fd:06:da:09:
ca:5f:77:19:3c:08:4b:9e:b2:ad:1a:4b:2e:81:f5:
6c:5f:1f:b1:42:60:bf:a4:66:9f:44:70:2f:a6:e4:
5a:35:c1:00:e4:10:15:af:b7:18:93:f3:86:32:03:
3f:9d:ac:20:2b:d0:a3:f0:9c:59:ee:a6:b4:7b:a7:
af:ce:ae:f1:70:f0:29:c3:4b:64:7a:3e:be:1d:02:
29:92:76:9b:8a:cf:4d:85:9f:83:6c:03:b1:d0:e0:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:A6:21:5F:3C:C3:D6:91:52:B0:C8:DA:0B:0F:44:80:57:8C:29
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:a2:ed:43:a0:bb:c0:b9:7c:3b:ba:37:52:88:35:d8:9e:
f7:cb:a8:80:53:e9:dc:61:d5:8a:1d:07:22:89:10:db:3b:0e:
63:a2:7e:18:52:1e:22:9e:f5:a8:3d:69:ca:0d:00:4d:b8:6e:
1e:17:a7:9e:4d:40:5c:a9:f0:e7:dd:4d:8c:61:ad:28:67:95:
d1:1c:b7:f4:09:36:ef:88:82:db:9f:9e:87:79:0c:ef:01:37:
43:7f:bc:fe:a9:32:a6:12:c1:e0:27:6b:1d:2d:1f:6a:dc:5c:
d1:18:fc:fc:c9:e7:76:27:48:44:0e:0b:7e:bb:a5:f7:3d:c7:
74:00:3f:25:56:5c:57:4f:95:24:fc:ab:7d:20:26:8c:ad:03:
21:c8:3b:9d:af:c6:1c:8b:51:76:6e:68:a9:0e:8f:28:78:35:
39:f2:2d:3e:9c:66:d7:b9:5f:ce:e6:40:05:97:52:ae:9b:a0:
c9:e8:52:9e:7f:8f:24:37:08:bd:47:1a:24:9a:49:72:f7:d6:
a2:b0:95:b2:26:71:7c:ff:46:5a:15:62:1c:d6:32:79:fa:3e:
47:ca:d2:15:b1:8c:a9:07:39:97:33:38:70:53:92:5b:75:a9:
c7:02:d8:7d:55:21:95:d5:fe:9a:1e:9f:4a:20:59:e1:6e:06:
8c:7d:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:26 2026 by rpki-client