Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: 3HbhiqIBzL/lCkYfYI+7JYVr5pX1UFXdHRsKcmUPS/U=
Subject key identifier: E2:DA:B5:D0:E7:13:77:AB:A3:75:0A:5D:0C:1B:5E:00:D9:15:59:17
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 019D2B4F2B095E43249DD4BF1108737B74F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 0827
Signing time: Thu 26 Mar 2026 18:01:41 +0000
Manifest this update: Thu 26 Mar 2026 18:01:41 +0000
Manifest next update: Fri 27 Mar 2026 18:01:41 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: 655CJt0BF+804Nhb2U6AzokMypdoi5affEL9Dnt07pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:2b:09:5e:43:24:9d:d4:bf:11:08:73:7b:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: Mar 26 18:01:41 2026 GMT
Not After : Mar 27 18:01:41 2026 GMT
Subject: CN=e2dab5d0e71377aba3750a5d0c1b5e00d9155917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:1e:5b:ad:c9:0a:42:8b:6a:f8:aa:3e:8e:
fd:91:5e:95:fc:79:7f:d2:c4:66:41:b3:50:e7:62:
a7:6f:3b:4e:fe:e6:48:f0:08:0b:8c:12:50:10:58:
55:65:4a:09:58:29:2e:00:08:ae:c2:69:68:c1:8c:
da:9f:58:11:1c:c1:99:40:30:86:7e:46:c0:04:91:
3e:08:00:77:33:ae:d1:28:4b:e2:c0:53:3a:e8:bc:
11:a0:c1:d2:7e:89:c5:7f:3e:b6:7a:02:ee:0c:b0:
24:92:17:5a:86:a3:7a:e2:8d:4a:94:10:cf:30:65:
d1:dc:aa:e5:4c:e3:26:56:3a:54:39:65:09:b7:fe:
0c:0d:6f:28:74:b7:c8:77:68:10:25:64:0b:e9:bc:
5a:ee:cc:75:4f:eb:ea:66:4b:95:84:ea:9b:de:1c:
d9:67:b3:42:8e:e7:ab:4b:d4:60:4d:35:6a:dc:ad:
7a:99:93:53:85:82:b6:b3:7c:71:d4:72:2f:21:17:
a2:d4:44:f5:2e:0d:10:91:fc:a1:67:f1:88:93:43:
78:bd:68:53:d2:1b:cb:b7:9d:25:86:d1:3e:32:93:
10:4c:5b:67:55:d1:94:4b:8f:f8:b3:d1:3b:27:74:
f4:49:cd:6c:72:d9:f2:b2:33:20:9d:89:e2:66:e0:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:B5:D0:E7:13:77:AB:A3:75:0A:5D:0C:1B:5E:00:D9:15:59:17
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:ab:a8:8a:4a:c5:6b:c9:2c:16:51:16:f5:a2:94:ca:12:
0f:37:7d:a5:14:aa:7d:bf:32:c2:20:93:52:57:33:fd:8d:78:
2e:48:62:ef:4c:c3:6a:e3:76:10:9d:b1:b5:a1:7b:55:78:a2:
b8:99:15:c3:86:f1:17:f6:b0:b9:16:f2:06:be:97:01:3b:07:
bb:ab:7e:9c:a9:84:0f:86:e2:3d:70:21:07:f8:a3:54:53:ff:
61:e2:ff:02:c4:01:70:f0:19:47:9c:2d:5f:d4:71:ae:9c:be:
c0:52:d8:0d:21:06:47:d7:d3:c9:b0:1c:12:64:a9:a3:5f:a8:
91:61:94:b3:59:12:e9:6f:ac:43:46:f8:a8:e3:4f:a5:09:c7:
92:3f:44:d6:dc:c0:8d:b7:6f:d9:91:06:39:bd:00:0c:31:35:
a1:be:41:4a:ef:87:c5:93:9a:db:16:87:74:46:a9:1b:1d:0b:
ab:d1:97:78:a8:4f:13:33:a0:33:15:93:15:33:8a:22:7b:d8:
33:81:c5:bd:80:cb:7d:f3:7f:07:c4:b1:be:df:2e:3a:c1:b4:
69:c1:51:87:01:c4:ed:df:df:76:60:32:b8:57:6f:aa:ed:4d:
86:81:ce:e3:09:99:0d:dd:aa:3b:30:82:e2:2e:ec:df:6f:27:
ed:52:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:12 2026 by rpki-client