Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: 8CRcc+6ljSq5SjHrqs5aJHguWtqn9s/mLbVztPkf8T8=
Subject key identifier: 6D:BA:25:24:5F:52:FE:DD:0F:86:D8:F3:FE:FD:83:B1:1A:ED:15:7E
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 019D98F499196AD4F8C417503E1B688A32FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: X+IwNCd5lzfuwJkYBKtPhqwTKiNAv2tGITCTtruIttY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:99:19:6a:d4:f8:c4:17:50:3e:1b:68:8a:32:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=6dba25245f52fedd0f86d8f3fefd83b11aed157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:03:45:80:bf:04:6c:cf:30:dc:31:3b:23:
98:fd:66:ab:ef:7f:c2:05:dd:91:9e:14:27:c4:9b:
c6:a7:67:b4:ff:be:03:85:b6:bc:68:76:05:6a:ab:
4e:5b:fa:0d:9b:c4:68:a3:18:dd:7e:e7:c7:24:18:
c5:eb:12:f7:0f:1f:12:f9:69:87:86:70:08:d5:69:
a9:4f:30:c1:0a:5b:d6:68:5d:11:7b:8f:85:f6:97:
d0:2b:f0:7f:b0:a6:c5:c8:e8:2c:16:ac:f6:e6:99:
d2:0b:5b:13:30:2d:09:0d:ab:58:18:a6:e6:8a:f2:
1b:dd:a9:02:e3:f2:13:47:d3:1c:79:1c:77:be:63:
74:fd:96:78:f5:ee:f0:68:9a:96:d7:e7:67:27:33:
0c:5d:0f:73:c2:03:28:29:ff:07:c8:32:3e:ae:22:
f1:ef:1a:f6:47:3c:e9:85:eb:64:7f:bb:ad:c1:0c:
86:86:e4:96:e6:2d:70:90:94:05:e0:1b:69:c1:ae:
20:81:04:9b:94:5e:67:83:2b:f6:8d:41:82:8e:ea:
29:11:41:af:5c:ab:50:54:97:6e:61:33:56:79:d3:
e6:fd:08:4c:7d:2b:c9:ca:11:9a:bd:53:8b:25:80:
b9:e0:48:29:b8:2d:04:1b:30:07:80:bc:d4:7b:0c:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:25:24:5F:52:FE:DD:0F:86:D8:F3:FE:FD:83:B1:1A:ED:15:7E
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:0b:e1:1b:22:df:8a:93:38:2d:ec:b7:c7:44:03:c0:32:
db:e1:c1:70:39:9d:e9:2a:0e:9e:45:1d:fc:4c:a0:6a:3c:42:
74:5f:c7:38:6d:d5:a4:ea:64:8b:eb:92:61:c6:f1:1e:fd:d7:
96:a8:b6:06:12:f3:cb:9e:05:aa:5b:f6:23:80:40:01:9f:1b:
03:7a:59:9a:27:3c:32:3c:34:b8:18:79:da:1f:ab:52:32:30:
b3:5b:9a:aa:e2:0f:d1:13:16:b6:58:4e:fb:43:f4:87:4d:99:
d7:4a:47:c8:dc:3b:14:0c:d7:61:07:55:96:1b:5a:85:fb:05:
a7:5a:1e:a6:bd:8b:3e:bf:9a:c8:2e:d6:e5:1d:cc:68:18:0f:
70:85:ef:cf:a6:fb:64:2b:1c:36:1a:f9:40:80:73:f1:b9:00:
75:f2:b5:b7:d7:c4:5f:8b:b7:d3:c9:9c:1c:d2:d6:d7:e6:5e:
e5:a6:1b:06:a5:59:cd:56:f8:bf:90:3a:1e:93:f7:4e:d1:00:
51:9d:86:39:b4:e6:7b:7c:6a:a4:cc:4d:7a:dd:0b:b1:96:c4:
df:df:4f:13:44:dc:f7:2d:2f:8e:9c:95:07:a7:c8:89:be:f5:
08:71:92:1e:95:19:3d:a5:de:d6:1a:73:2c:cb:9c:9d:68:b0:
5d:f2:a6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9JkZatT4xBdQPhtoijL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MThiMDU0ZDIwZGZkYzljNTQ5M2M1MmM4NjIzNDc3NDkw
NGJlNzcwHhcNMjYwNDE3MDEwMDU5WhcNMjYwNDE4MDEwMDU5WjAzMTEwLwYDVQQD
Eyg2ZGJhMjUyNDVmNTJmZWRkMGY4NmQ4ZjNmZWZkODNiMTFhZWQxNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx8DRYC/BGzPMNwxOyOY/War73/C
Bd2RnhQnxJvGp2e0/74Dhba8aHYFaqtOW/oNm8RooxjdfufHJBjF6xL3Dx8S+WmH
hnAI1WmpTzDBClvWaF0Re4+F9pfQK/B/sKbFyOgsFqz25pnSC1sTMC0JDatYGKbm
ivIb3akC4/ITR9MceRx3vmN0/ZZ49e7waJqW1+dnJzMMXQ9zwgMoKf8HyDI+riLx
7xr2Rzzphetkf7utwQyGhuSW5i1wkJQF4Btpwa4ggQSblF5ngyv2jUGCjuopEUGv
XKtQVJduYTNWedPm/QhMfSvJyhGavVOLJYC54EgpuC0EGzAHgLzUewykwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG26JSRfUv7dD4bY8/79g7Ea7RV+MB8GA1UdIwQY
MBaAFIYYsFTSDf3JxUk8UshiNHdJBL53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEt
YzQ3MzZjYTVjMjVhLzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEtYzQ3MzZjYTVjMjVh
LzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReYL4Rsi
34qTOC3st8dEA8Ay2+HBcDmd6SoOnkUd/EygajxCdF/HOG3VpOpki+uSYcbxHv3X
lqi2BhLzy54Fqlv2I4BAAZ8bA3pZmic8Mjw0uBh52h+rUjIws1uaquIP0RMWtlhO
+0P0h02Z10pHyNw7FAzXYQdVlhtahfsFp1oepr2LPr+ayC7W5R3MaBgPcIXvz6b7
ZCscNhr5QIBz8bkAdfK1t9fEX4u308mcHNLW1+Ze5aYbBqVZzVb4v5A6HpP3TtEA
UZ2GObTme3xqpMxNet0LsZbE399PE0Tc9y0vjpyVB6fIib71CHGSHpUZPaXe1hpz
LMucnWiwXfKmLA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:22:55 2026 by rpki-client