Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: uryXvmjJWIPWQu7eqs6vJmPxuQJrIegAJhnyj5Evvts=
Subject key identifier: 6B:17:66:FA:47:7A:70:EF:5E:7D:7C:B6:6B:DF:CF:4D:77:B4:9C:92
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019D98F54B35F5AF53EADFC67A5A1EA819FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:45 +0000
Manifest this update: Fri 17 Apr 2026 01:01:45 +0000
Manifest next update: Sat 18 Apr 2026 01:01:45 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: qDOMVyWS3gy9t7HncHryEzJlcL89VpvZT4gQoMfm0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4b:35:f5:af:53:ea:df:c6:7a:5a:1e:a8:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Apr 17 01:01:45 2026 GMT
Not After : Apr 18 01:01:45 2026 GMT
Subject: CN=6b1766fa477a70ef5e7d7cb66bdfcf4d77b49c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:27:03:bb:f3:c5:9c:cc:4d:97:5e:fd:b0:
59:5c:11:8c:50:8d:6b:97:79:e8:22:bb:7b:5a:30:
24:d5:13:3d:3e:a6:10:40:f9:8b:e5:25:fc:31:b6:
ca:b5:e7:82:f3:3b:43:30:24:3d:cd:b5:7b:9f:34:
8e:0d:16:18:fd:a8:9c:fe:8b:54:1f:91:3f:e7:c2:
6f:ce:c7:33:02:ca:ed:cd:64:96:a5:d6:82:9f:6d:
57:f3:41:d9:31:e2:b2:87:d2:fb:ea:85:72:90:7f:
c7:5c:d4:b5:6e:35:9a:78:0e:47:a4:9f:f9:bd:3f:
5a:28:5f:c6:8c:e2:92:53:45:fb:85:92:7e:4d:2e:
76:f5:84:55:60:96:5e:4c:f8:1e:fa:06:04:32:ad:
a3:3c:d0:b1:46:a7:07:cc:76:bf:63:4b:19:31:5c:
0c:6c:03:d8:b1:16:f0:2f:82:2c:ae:e7:ac:5c:0c:
c6:a0:85:9f:a1:ab:ad:82:d1:58:25:a1:84:d8:1e:
3c:31:3b:e0:ae:67:09:9c:53:77:22:48:44:93:90:
6c:0e:2e:1e:56:62:be:87:18:43:79:f5:2b:90:bf:
8b:22:66:88:52:17:a0:c8:31:c5:4d:bf:09:60:3c:
bc:b1:4f:a3:19:ad:9d:4e:68:d8:54:88:7b:d6:e4:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:66:FA:47:7A:70:EF:5E:7D:7C:B6:6B:DF:CF:4D:77:B4:9C:92
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:17:d3:7c:02:0a:c9:8f:d6:a2:4b:31:07:4b:bc:36:eb:
88:50:ca:f9:53:96:cf:09:1a:1e:cf:77:cc:72:25:3f:d8:0a:
fa:96:b8:00:bd:0a:14:b7:18:8f:1a:49:80:58:12:92:1e:6b:
e2:72:bd:ce:df:d3:57:f3:01:fc:7f:dd:fe:1d:ad:b5:34:4d:
85:0e:a2:0a:5b:01:65:70:43:a9:f7:b0:b0:65:b2:27:70:d3:
1e:d5:d6:32:26:3f:98:b9:3b:82:a3:65:95:85:61:d4:4b:8a:
fe:79:4a:61:33:90:4f:13:50:5b:61:c7:ff:09:d1:03:57:17:
c6:97:c2:11:a8:8f:80:f8:df:8b:97:56:fb:0a:7b:ee:c3:74:
99:10:6a:cb:77:fb:78:e1:90:79:14:1f:93:6b:55:9c:ac:ff:
b3:96:27:9f:4c:f9:f7:aa:74:ac:96:ee:ca:f6:17:96:27:08:
df:90:5a:3e:98:bf:60:f7:be:91:59:4e:04:f3:66:53:df:a3:
c4:31:df:de:9e:90:24:b4:78:4d:ec:a7:3a:3a:b9:78:e4:a4:
a4:91:95:4f:c2:af:b5:5a:f6:43:51:3a:d6:12:d8:59:82:48:
47:4c:54:b3:30:80:05:60:4e:50:4f:98:78:61:87:c8:87:11:
4c:c8:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:22 2026 by rpki-client