Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: a3vZFadLVAx5II+SL5YpJe0dJwKcSp4l3nkahuJMTmo=
Subject key identifier: 2A:6C:96:A8:27:F6:16:67:70:61:06:0B:0C:4B:87:25:AD:81:5C:11
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019CAB6B4E20C72A502A5D7BDC3FB3F60071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: 6zmsfpzIKqpCsQUPjf+aPXZlxMN05WZgGj3FUz8IJUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4e:20:c7:2a:50:2a:5d:7b:dc:3f:b3:f6:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=2a6c96a827f616677061060b0c4b8725ad815c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:99:53:b5:f0:8c:64:2f:0f:85:bf:16:ff:
e2:18:ef:5f:bf:39:3c:11:ae:26:8e:6b:43:a7:f8:
bb:9d:2e:db:92:50:72:07:44:aa:60:84:18:43:b7:
e0:44:fe:f3:85:36:b4:8f:4f:b8:70:68:21:b0:e3:
3d:2d:a7:58:dd:41:dc:f5:13:18:7a:b5:c4:d0:26:
11:1d:af:8f:5c:04:e6:c0:b8:ff:dd:cd:71:21:98:
ed:7e:cd:0d:df:ec:b5:ab:f6:18:c2:a7:26:a5:8c:
35:32:3a:26:1d:46:e0:22:c8:8b:cc:bd:21:bd:21:
60:34:3e:e8:c7:0a:4d:70:ea:5a:78:6c:fe:df:2e:
13:0d:6c:48:93:f1:e5:1b:00:1d:68:60:db:b6:55:
e8:03:dd:41:58:e5:e3:87:56:c3:6a:92:02:55:d1:
c9:a9:4e:4c:da:54:cc:fd:e5:10:4d:13:da:fc:69:
a6:15:10:1a:f0:a5:7f:b4:e3:27:ca:50:86:54:3b:
a4:db:9d:88:30:82:95:82:9e:df:6e:6d:ff:aa:16:
37:e7:d0:ea:17:24:0c:33:89:08:dd:49:b1:8e:f1:
1f:5b:be:67:a4:35:db:61:18:6c:e8:2b:90:5e:7d:
85:a3:e1:da:bf:a8:db:11:8d:06:32:f3:ca:b0:8b:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:96:A8:27:F6:16:67:70:61:06:0B:0C:4B:87:25:AD:81:5C:11
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:73:c8:cb:d5:5f:4c:98:b7:d5:2e:1e:13:0f:65:90:f3:
4f:25:98:c5:b9:0d:04:62:39:5b:de:2c:cc:10:82:f5:61:f0:
e9:9e:39:c3:b8:8a:a2:d2:26:fc:5c:6c:b5:46:e6:e3:ba:69:
cd:9c:20:e3:da:fd:00:8c:0f:ee:3c:07:67:88:55:4e:82:1e:
da:b0:67:26:7e:92:77:83:81:88:56:63:d2:78:06:f3:60:ba:
f8:e6:72:ee:e6:7a:30:36:4e:ff:18:e6:3c:9d:31:84:4d:7c:
8b:6d:ef:19:fb:32:4f:37:cb:e2:ad:79:f1:39:66:7b:d0:4a:
62:3c:60:77:1a:6a:69:5f:79:45:3f:7e:18:0f:fc:08:9f:f0:
81:fb:fd:e8:41:42:be:9a:b3:f8:08:53:51:f5:aa:f5:bf:ae:
bb:3c:b6:21:b9:c1:a2:7a:e1:cb:97:87:03:79:f4:50:65:bf:
69:9c:23:7f:4f:c5:3d:4d:5a:7f:e8:99:ae:fd:34:b0:b5:58:
77:e3:58:f6:c2:bd:8f:36:3c:59:ed:3f:6a:0b:21:e6:8f:e5:
a6:85:91:86:bb:99:0c:ee:5f:f6:97:f3:52:64:f6:98:e2:6a:
38:ff:9e:9c:3d:da:48:c5:c2:ae:37:be:22:d2:d4:01:5f:31:
6b:63:4e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra04gxypQKl173D+z9gBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4
Nzg3MDUwHhcNMjYwMzAxMjIwMTAyWhcNMjYwMzAyMjIwMTAyWjAzMTEwLwYDVQQD
EygyYTZjOTZhODI3ZjYxNjY3NzA2MTA2MGIwYzRiODcyNWFkODE1YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CeZU7XwjGQvD4W/Fv/iGO9fvzk8
Ea4mjmtDp/i7nS7bklByB0SqYIQYQ7fgRP7zhTa0j0+4cGghsOM9LadY3UHc9RMY
erXE0CYRHa+PXATmwLj/3c1xIZjtfs0N3+y1q/YYwqcmpYw1MjomHUbgIsiLzL0h
vSFgND7oxwpNcOpaeGz+3y4TDWxIk/HlGwAdaGDbtlXoA91BWOXjh1bDapICVdHJ
qU5M2lTM/eUQTRPa/GmmFRAa8KV/tOMnylCGVDuk252IMIKVgp7fbm3/qhY359Dq
FyQMM4kI3UmxjvEfW75npDXbYRhs6CuQXn2Fo+Hav6jbEY0GMvPKsItoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpslqgn9hZncGEGCwxLhyWtgVwRMB8GA1UdIwQY
MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt
YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk
LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKhzyMvV
X0yYt9UuHhMPZZDzTyWYxbkNBGI5W94szBCC9WHw6Z45w7iKotIm/FxstUbm47pp
zZwg49r9AIwP7jwHZ4hVToIe2rBnJn6Sd4OBiFZj0ngG82C6+OZy7uZ6MDZO/xjm
PJ0xhE18i23vGfsyTzfL4q158Tlme9BKYjxgdxpqaV95RT9+GA/8CJ/wgfv96EFC
vpqz+AhTUfWq9b+uuzy2IbnBonrhy5eHA3n0UGW/aZwjf0/FPU1af+iZrv00sLVY
d+NY9sK9jzY8We0/agsh5o/lpoWRhruZDO5f9pfzUmT2mOJqOP+enD3aSMXCrje+
ItLUAV8xa2NOkA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:58 2026 by rpki-client