Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: 1NQy3D62Xqywk6x6RqPGuhTTbKfsExrzXS1qp4dt3XU=
Subject key identifier: 43:7A:25:4B:82:32:B7:11:16:67:C7:AB:23:AB:6C:98:80:F0:73:C9
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 019D9B511E142E807015F49F80D52DEA7736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 0861
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: V9iZUaIjeteP/4CArAC/QC+w57BfjvTM27vF0mZbf5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1e:14:2e:80:70:15:f4:9f:80:d5:2d:ea:77:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=437a254b8232b7111667c7ab23ab6c9880f073c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:6f:17:45:83:a0:a1:ae:2b:e8:77:6c:f6:
7b:92:dd:ad:30:be:ee:1f:10:fd:03:8e:a7:64:08:
97:16:57:f5:42:84:f2:12:99:db:b4:2f:ab:8f:d9:
5e:29:02:96:9a:f1:51:c2:d6:f6:ee:77:c8:8f:cc:
fc:65:ff:7e:51:bd:25:e2:d8:91:5c:1e:70:65:10:
e4:d6:74:ef:23:89:9a:01:0a:86:64:0b:49:4f:15:
32:de:7d:0b:30:55:fd:50:08:f6:d6:d4:6e:e6:ab:
a0:2c:ab:97:fe:1f:29:9b:fe:00:76:40:66:57:34:
e7:26:c3:92:00:08:e2:84:e7:6c:40:36:ba:27:6f:
ae:2c:07:77:3d:72:9f:57:19:a0:c3:2b:5a:aa:de:
46:93:0f:cc:0a:8d:33:8b:65:cd:84:8e:ef:a2:63:
61:e4:62:e8:8b:c5:df:20:15:56:a0:dc:70:de:d4:
7d:ba:b0:8a:01:33:32:ab:3c:70:80:2a:09:ff:ef:
42:02:46:53:96:68:0c:dc:20:7a:4c:3f:e5:9b:7e:
d0:7c:5b:17:c4:8e:39:c8:bf:00:16:31:0a:6c:ce:
7b:e0:f2:cc:61:30:08:19:1a:86:09:77:f7:f0:3f:
41:b1:d9:b9:91:53:94:39:83:ea:34:b1:d1:34:57:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:25:4B:82:32:B7:11:16:67:C7:AB:23:AB:6C:98:80:F0:73:C9
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:cd:1f:56:36:ff:9d:0c:46:9f:6b:60:70:c2:e5:b9:4d:
87:cb:d5:92:55:fa:e9:b6:48:c4:80:f1:93:ae:55:5a:99:30:
c8:8b:5b:d7:0c:df:da:e7:f1:b2:3f:04:08:85:1b:9a:e2:3f:
60:c3:17:db:20:1a:13:bb:13:74:3e:d3:58:5b:bc:f0:a6:e6:
67:a6:4c:4f:e9:04:e7:4b:b5:01:3a:bd:7a:24:69:3d:94:6b:
c0:fd:b1:e7:dc:fc:58:19:77:3e:32:c8:dd:d9:64:06:f6:15:
68:83:77:5d:47:b0:9d:94:6d:76:e3:d6:a1:b6:53:96:9d:54:
2b:72:15:0e:8c:9c:af:89:bf:ce:17:af:b6:7b:32:0f:cf:96:
0b:dd:56:fd:0d:7b:ef:46:5d:2e:fe:82:e6:4c:cc:db:e7:5a:
6c:f8:9d:54:18:94:4f:27:b6:2f:58:a0:94:f5:69:b4:8e:58:
dc:6a:ba:26:e6:a5:cf:d0:04:1f:cd:49:6a:fe:d6:48:98:0d:
73:0a:93:c0:d1:3c:e1:0a:2f:9b:97:6e:48:7c:77:22:bf:b3:
5e:d0:ec:27:0d:a0:44:a0:4e:0e:7c:d8:52:3d:98:45:7c:6b:
3c:3e:e4:ff:e6:84:f5:dd:0a:c2:e4:cd:9a:7f:8e:2c:28:eb:
4a:39:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:04 2026 by rpki-client