Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: LRTHItYJaoEk+YRzX+p84w+mapB/GOiZUA4JFOU4p5A=
Subject key identifier: 35:78:F3:C4:AE:2B:01:E6:39:62:82:BE:BB:C6:63:6C:7D:51:CE:D7
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019D9C2CE3C344F0047EB15006B84E3AB4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0883
Signing time: Fri 17 Apr 2026 16:01:20 +0000
Manifest this update: Fri 17 Apr 2026 16:01:20 +0000
Manifest next update: Sat 18 Apr 2026 16:01:20 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: YfZQjZaE3y1GJ09CelnD8K/e1LfpoUaRWM1QU0M380E=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:e3:c3:44:f0:04:7e:b1:50:06:b8:4e:3a:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Apr 17 16:01:20 2026 GMT
Not After : Apr 18 16:01:20 2026 GMT
Subject: CN=3578f3c4ae2b01e6396282bebbc6636c7d51ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:1e:c2:40:89:e9:b4:fa:37:09:02:47:e2:
a9:c3:40:b1:4f:00:16:7a:dc:f6:81:90:bf:f9:87:
e7:ec:c2:f0:82:87:84:5a:60:52:e8:7c:0e:79:e8:
79:8d:d0:06:57:d5:42:54:11:d8:7b:02:25:ee:6a:
ad:d4:51:25:4b:99:60:38:73:15:3c:25:cf:f6:7e:
fb:01:a0:98:f8:5e:d0:4d:ba:11:9f:8a:8e:0d:41:
20:a0:8a:f6:37:da:50:4a:8b:6e:f8:bd:34:d5:44:
67:23:e8:cb:d9:43:be:0d:de:8e:f1:46:ea:64:5e:
59:c5:5a:74:c9:7d:1f:39:5e:8d:e1:67:0c:20:db:
ad:f9:58:f0:f4:b5:99:a5:15:91:43:62:25:a5:f9:
dc:1c:7b:66:73:68:a4:ac:ad:33:82:80:20:fc:07:
3d:42:c5:48:c9:92:81:34:f4:74:cf:a3:93:30:53:
32:35:8d:47:8c:90:fb:95:17:ec:4a:7a:9b:60:42:
a6:3a:ae:a8:46:1f:b7:08:bf:de:8e:e0:59:58:37:
c8:ff:10:85:14:7a:fd:ba:b3:4b:5f:bd:c6:e9:97:
c6:a9:c9:7e:22:cd:f2:dd:cb:0e:6b:2c:c7:81:46:
d0:27:23:50:ee:95:b7:ed:74:6e:1c:bb:60:c7:26:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:F3:C4:AE:2B:01:E6:39:62:82:BE:BB:C6:63:6C:7D:51:CE:D7
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:bc:38:f4:e0:dd:30:47:a1:f7:88:a2:3c:8d:37:82:0f:59:
0f:40:65:43:b3:81:d7:26:2b:9e:1b:31:60:12:c7:89:f9:e6:
9c:a9:99:17:b4:80:9f:8f:0a:63:5e:aa:66:99:49:52:82:38:
ab:9e:50:5a:5b:61:6f:10:e2:a3:01:ba:75:a2:e6:56:ae:f2:
85:09:2b:5d:71:2d:4d:94:80:d3:46:ff:b2:5e:d2:b5:69:a7:
f7:49:20:9c:69:be:98:4d:78:b9:26:70:9f:e0:2c:58:03:f6:
88:44:e8:ba:4c:8e:e2:46:9f:01:2f:19:3b:4f:5e:d5:96:29:
0f:83:d9:a3:a4:37:61:85:09:8c:29:c1:1d:61:58:d6:bd:b9:
80:35:d6:f3:27:78:d4:fb:3d:9b:71:89:7e:93:35:19:1d:88:
25:d2:32:a2:74:0e:ed:ad:02:b3:64:7c:f3:52:7d:78:ce:6b:
43:25:a9:66:85:e4:57:38:32:9d:a0:4a:09:ec:cd:78:30:e2:
7b:4e:32:b3:37:30:b7:df:0f:db:94:74:40:cf:f3:92:a8:2a:
09:0f:6e:49:5c:cb:af:e6:43:d3:c9:67:80:4d:f2:d9:14:7a:
ef:77:1e:2d:1f:4b:33:75:d4:1f:46:04:38:32:76:1f:ac:71:
98:a1:ff:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLOPDRPAEfrFQBrhOOrSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjYwNDE3MTYwMTIwWhcNMjYwNDE4MTYwMTIwWjAzMTEwLwYDVQQD
EygzNTc4ZjNjNGFlMmIwMWU2Mzk2MjgyYmViYmM2NjM2YzdkNTFjZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gMewkCJ6bT6NwkCR+Kpw0CxTwAW
etz2gZC/+Yfn7MLwgoeEWmBS6HwOeeh5jdAGV9VCVBHYewIl7mqt1FElS5lgOHMV
PCXP9n77AaCY+F7QTboRn4qODUEgoIr2N9pQSotu+L001URnI+jL2UO+Dd6O8Ubq
ZF5ZxVp0yX0fOV6N4WcMINut+Vjw9LWZpRWRQ2IlpfncHHtmc2ikrK0zgoAg/Ac9
QsVIyZKBNPR0z6OTMFMyNY1HjJD7lRfsSnqbYEKmOq6oRh+3CL/ejuBZWDfI/xCF
FHr9urNLX73G6ZfGqcl+Is3y3csOayzHgUbQJyNQ7pW37XRuHLtgxyZ1+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV488SuKwHmOWKCvrvGY2x9Uc7XMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Lw49ODd
MEeh94iiPI03gg9ZD0BlQ7OB1yYrnhsxYBLHifnmnKmZF7SAn48KY16qZplJUoI4
q55QWlthbxDiowG6daLmVq7yhQkrXXEtTZSA00b/sl7StWmn90kgnGm+mE14uSZw
n+AsWAP2iEToukyO4kafAS8ZO09e1ZYpD4PZo6Q3YYUJjCnBHWFY1r25gDXW8yd4
1Ps9m3GJfpM1GR2IJdIyonQO7a0Cs2R881J9eM5rQyWpZoXkVzgynaBKCezNeDDi
e04yszcwt98P25R0QM/zkqgqCQ9uSVzLr+ZD08lngE3y2RR673ceLR9LM3XUH0YE
ODJ2H6xxmKH/9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:14 2026 by rpki-client