Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: o5+qDbVkXtUPjhpQfrBjAoSjIzhPi+uPrCMYBK3SMOo=
Subject key identifier: CC:43:24:A6:51:22:44:85:66:9D:59:FB:14:FE:A7:51:C4:2F:9B:97
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 019DA341891E26DAFEB27EBB841B8AFDEF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 185F
Signing time: Sun 19 Apr 2026 01:01:14 +0000
Manifest this update: Sun 19 Apr 2026 01:01:14 +0000
Manifest next update: Mon 20 Apr 2026 01:01:14 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: DYBio4LOumaxj1mxGjR2YqAtxIqisBd7LTa/RHPRlOc=)
2: tlD44Wx1jNalDCHqe8b7_I-CeqY.roa (hash: CC0WAHVS98jNAUQJOBCkbiv7wZ63BOatDHNReSwvX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:89:1e:26:da:fe:b2:7e:bb:84:1b:8a:fd:ef:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Apr 19 01:01:14 2026 GMT
Not After : Apr 20 01:01:14 2026 GMT
Subject: CN=cc4324a651224485669d59fb14fea751c42f9b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:56:b4:ec:70:08:00:f1:4b:f6:b4:24:76:
8a:a3:db:12:56:c7:49:5e:15:a8:bd:85:d8:4a:aa:
d8:05:ee:af:3d:57:9c:bf:01:53:26:9f:c0:38:31:
07:ec:6e:95:32:ab:bf:dd:f3:45:59:0d:49:0d:5a:
2b:b3:3f:a0:70:c7:85:52:9e:63:4c:3a:9e:3f:e7:
60:88:92:38:21:4e:90:1f:62:c2:ee:e8:2f:f0:72:
d4:8c:87:07:6c:f9:d8:e3:f6:c5:0d:5f:6f:c7:11:
ba:bb:07:87:e8:fa:71:16:b7:59:ea:85:ed:91:8e:
44:59:c2:27:7f:8c:aa:69:55:71:c5:24:45:2a:c8:
8c:ba:18:f4:62:0c:f0:e0:96:18:b0:b2:60:13:18:
79:bb:6b:cb:ac:4a:55:63:55:ae:1d:36:1c:ee:13:
bf:fb:ab:1c:af:b1:c6:37:2a:24:45:63:1a:1c:1c:
de:d8:79:29:ff:d1:57:1a:bd:e8:7e:70:50:3e:86:
73:80:d4:39:d4:bd:33:ea:a4:ac:69:7f:51:e1:24:
4a:b6:59:05:44:c2:66:f9:45:4d:e4:2a:a1:ab:f8:
21:f0:b6:5f:95:00:7e:7b:f4:26:fd:63:34:5f:9f:
8b:b8:48:54:67:df:09:24:cf:47:0c:05:b6:67:79:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:24:A6:51:22:44:85:66:9D:59:FB:14:FE:A7:51:C4:2F:9B:97
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f7:1d:2f:af:ea:3d:99:0f:f6:a4:d2:d4:6c:99:a2:66:1b:
b7:b6:13:62:79:ae:69:10:a9:22:f8:78:31:ec:3c:9f:a1:6f:
5a:e2:67:d9:d3:2f:fd:3d:7b:c4:b8:02:8b:8c:4d:44:a7:a0:
7f:64:57:09:b2:a4:ab:33:3e:62:c9:c1:8e:58:19:8d:c0:4f:
3e:5c:c4:b5:cf:49:ed:d9:c7:fe:6b:cd:6c:28:3e:12:6f:e8:
c9:60:0c:3b:1f:1b:9e:c2:a3:28:7c:70:ce:27:10:33:fd:30:
43:35:59:61:60:23:55:b9:91:e5:ba:54:31:83:12:75:75:34:
df:2b:60:8e:ba:db:45:44:0c:d6:39:0b:5a:33:c4:86:a5:ac:
a5:84:3a:f4:7d:d7:ce:4f:68:d5:63:b2:ca:cf:dc:09:df:d3:
cd:cb:90:f9:de:45:26:fb:a0:cf:bf:18:7a:8e:4e:b0:90:d0:
6e:70:fc:70:38:11:cd:79:9f:82:95:7f:e8:09:c6:0c:a5:f8:
0a:f2:ea:1f:71:8d:3e:25:d8:57:c9:cf:a8:91:4e:af:95:4b:
48:dc:fc:5d:7e:1d:68:aa:51:ec:57:5a:d1:60:e3:9c:9e:10:
0e:89:a4:2c:56:7b:6e:43:07:28:cf:7b:95:38:10:ca:80:75:
34:d3:3b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQYkeJtr+sn67hBuK/e90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3
NjIyMjUwHhcNMjYwNDE5MDEwMTE0WhcNMjYwNDIwMDEwMTE0WjAzMTEwLwYDVQQD
EyhjYzQzMjRhNjUxMjI0NDg1NjY5ZDU5ZmIxNGZlYTc1MWM0MmY5Yjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6dWtOxwCADxS/a0JHaKo9sSVsdJ
XhWovYXYSqrYBe6vPVecvwFTJp/AODEH7G6VMqu/3fNFWQ1JDVorsz+gcMeFUp5j
TDqeP+dgiJI4IU6QH2LC7ugv8HLUjIcHbPnY4/bFDV9vxxG6uweH6PpxFrdZ6oXt
kY5EWcInf4yqaVVxxSRFKsiMuhj0Ygzw4JYYsLJgExh5u2vLrEpVY1WuHTYc7hO/
+6scr7HGNyokRWMaHBze2Hkp/9FXGr3ofnBQPoZzgNQ51L0z6qSsaX9R4SRKtlkF
RMJm+UVN5Cqhq/gh8LZflQB+e/Qm/WM0X5+LuEhUZ98JJM9HDAW2Z3mxDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxDJKZRIkSFZp1Z+xT+p1HEL5uXMB8GA1UdIwQY
MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt
MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx
LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/cdL6/q
PZkP9qTS1GyZomYbt7YTYnmuaRCpIvh4Mew8n6FvWuJn2dMv/T17xLgCi4xNRKeg
f2RXCbKkqzM+YsnBjlgZjcBPPlzEtc9J7dnH/mvNbCg+Em/oyWAMOx8bnsKjKHxw
zicQM/0wQzVZYWAjVbmR5bpUMYMSdXU03ytgjrrbRUQM1jkLWjPEhqWspYQ69H3X
zk9o1WOyys/cCd/TzcuQ+d5FJvugz78Yeo5OsJDQbnD8cDgRzXmfgpV/6AnGDKX4
CvLqH3GNPiXYV8nPqJFOr5VLSNz8XX4daKpR7Fda0WDjnJ4QDomkLFZ7bkMHKM97
lTgQyoB1NNM75Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:33 2026 by rpki-client