Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File: HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier: g6NBRQO6tuCWE7iApvVzim9YVp21+KAb4cVIV0+Wris=
Subject key identifier: 21:7A:BD:DA:41:18:33:E4:DD:57:5A:35:5A:BA:7E:1F:D5:AF:60:25
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial: 019D9886C37E939F6897A993C563252029FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:01:01 +0000
Manifest this update: Thu 16 Apr 2026 23:01:01 +0000
Manifest next update: Fri 17 Apr 2026 23:01:01 +0000
Files and hashes: 1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: qMwA5ARA9TlRXMzQbYYjtaEB8q160AQSkp5RcbBdukI=)
2: NECq5bb7SIXry0rZHvapUwXLa2Q.roa (hash: dYpsXQiT0mqcppDxERSn5No7Emz9UKQhwW4R+PdVL/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c3:7e:93:9f:68:97:a9:93:c5:63:25:20:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Validity
Not Before: Apr 16 23:01:01 2026 GMT
Not After : Apr 17 23:01:01 2026 GMT
Subject: CN=217abdda411833e4dd575a355aba7e1fd5af6025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:2c:30:e2:83:af:2e:b3:7b:4d:58:e1:31:
02:08:f9:3f:81:03:8e:2d:9f:b3:c9:c2:ea:70:a0:
f7:08:b3:7b:19:6d:41:b8:03:60:a0:37:bc:21:84:
14:47:23:65:02:37:d7:82:8a:2e:f4:73:79:b1:cc:
f8:d7:cd:62:04:84:a1:7a:9c:1f:67:4e:d6:36:07:
55:f6:6f:49:04:67:60:c0:39:34:5a:68:aa:e1:d0:
71:d9:ca:50:b1:09:64:d7:22:60:b8:0d:16:37:fd:
cf:eb:99:07:74:30:a9:b0:54:65:58:16:d8:f4:e4:
d3:0d:a7:d5:dd:87:45:31:b9:e9:28:5d:5e:a1:76:
a8:80:a8:5a:42:fd:f0:e1:ef:47:96:9c:7f:d7:77:
a3:1a:04:cf:98:0a:2c:ff:56:6b:69:f5:0a:37:7f:
27:ce:27:a2:5e:ad:b7:50:c6:4b:e1:fc:6c:3c:a3:
d8:e2:4e:97:95:14:20:ff:ab:aa:cc:ad:1b:11:1b:
40:13:2e:ba:ba:08:91:4b:a7:68:1c:7a:cd:59:22:
65:c7:70:9d:cb:a2:1e:8d:7c:ae:e7:52:26:87:ac:
f0:99:ee:16:f2:39:6e:b3:a5:ce:bf:ae:d4:aa:69:
d2:0e:d8:25:fa:87:c2:cf:50:f3:f1:fa:b2:8c:38:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:BD:DA:41:18:33:E4:DD:57:5A:35:5A:BA:7E:1F:D5:AF:60:25
X509v3 Authority Key Identifier:
keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:7c:6e:4a:f8:ea:ba:16:2b:03:1b:1d:46:3f:7d:89:cc:
4e:df:6a:4f:16:ad:ee:c8:57:aa:45:f8:b0:11:8c:7c:2f:e8:
4a:57:30:db:ba:d1:2f:05:4a:d5:03:c3:05:1d:cf:b5:0e:38:
3b:ec:3d:25:5e:43:66:b8:af:c9:4d:59:0b:75:6e:b3:d2:fe:
a1:40:cf:db:f9:a7:1b:ad:32:1c:2a:1b:53:f3:df:5e:5d:8d:
3c:66:b3:2d:96:42:07:2e:55:3f:f2:62:c7:76:0b:d9:4e:86:
ae:9e:9c:f3:a0:2b:3e:db:01:90:f0:4e:f2:b9:06:20:bc:79:
89:b0:ef:1e:cb:58:b6:c6:62:98:6d:4a:c9:06:6c:f9:cb:df:
ac:e4:ef:95:73:6e:78:17:95:85:88:59:9a:63:03:c2:8e:ae:
74:7c:25:76:7f:73:69:10:b1:75:07:1e:5b:ad:f8:ed:1f:6c:
1b:b1:8a:41:d3:a5:8d:78:86:ee:a2:82:d5:5c:d4:2a:f7:5e:
d6:61:2e:95:c7:da:b9:9a:38:bf:02:8a:00:e1:17:23:83:1e:
28:38:51:c5:21:1a:76:f6:8e:bf:a3:59:64:1e:3d:f3:cc:9f:
55:1e:5f:a0:1b:30:2d:0d:0e:e3:3b:7e:f0:b1:66:b5:ef:f0:
d4:87:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:02 2026 by rpki-client