Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: nYawIeb11tmtrJgE/bqnyQrTj05UA8kSZoFLtM9w07c=
Subject key identifier: 98:2A:47:35:E1:92:37:88:D5:48:0E:AD:89:6C:49:81:6A:32:25:62
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019D28F2DFBF1B5D3504BF6965722A4D9E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: EAFANwepk7+GSaTveLuXsle4LtOGCQHY7C1p5piQnJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:df:bf:1b:5d:35:04:bf:69:65:72:2a:4d:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=982a4735e1923788d5480ead896c49816a322562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:79:f6:d0:0d:7d:f5:b3:ef:5f:a5:ba:ff:
d6:fc:ca:21:27:b9:62:9e:d6:07:01:a7:16:07:c1:
6a:b3:0c:9a:c6:f4:d2:81:ff:52:6f:88:54:02:c3:
a7:ab:57:b4:28:01:39:58:df:76:28:51:cb:08:1b:
74:41:49:73:1c:16:e6:59:8c:37:ac:27:3c:4c:7b:
f5:62:4f:77:da:4d:62:c2:7c:d9:36:25:63:7c:55:
c8:db:53:6e:91:13:10:cb:3c:ff:a9:5a:40:37:13:
14:b1:9e:98:be:dc:b3:1c:ca:d2:11:a0:ca:78:d2:
96:08:0e:14:ce:d4:4e:34:20:27:07:38:bb:94:f6:
fb:17:e7:55:22:86:3d:9f:f5:2d:a0:39:e6:af:e5:
c5:a4:44:06:d5:6f:a7:02:1d:72:57:4a:0c:8a:2c:
f5:b4:ab:56:6c:da:8b:91:cd:52:99:5b:64:60:12:
14:84:ed:d5:95:e1:7d:75:0b:66:cb:a1:fb:74:86:
8c:05:e0:6a:7c:7e:0f:d8:2f:f5:8f:bc:12:8a:8b:
98:cc:38:0a:fd:df:fd:19:a4:0a:0c:db:8a:21:6f:
4d:d5:bd:2f:73:4f:ed:63:84:84:6c:19:6a:42:05:
f8:2d:52:cc:d2:4e:f5:ed:e0:e2:ea:1d:74:94:e4:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:47:35:E1:92:37:88:D5:48:0E:AD:89:6C:49:81:6A:32:25:62
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:3b:96:bd:c7:dd:78:00:bc:e4:10:ce:bb:f6:c6:a4:0b:
c9:09:c2:11:a9:3f:86:3d:59:99:6f:66:df:b3:6a:fd:b7:2a:
cc:67:6a:47:00:9e:9b:f5:2a:f8:d6:55:12:dd:a9:ba:50:c2:
a3:a5:6d:66:70:7f:43:3d:d6:c2:6e:b4:fe:88:69:1f:98:a0:
a6:01:26:5c:57:00:7a:59:9e:19:5a:b1:ef:0f:2f:3b:ab:8f:
5f:24:b2:db:04:b7:ec:b3:cd:92:00:cc:f5:87:91:d1:b5:12:
3a:44:0b:61:ab:a3:34:ca:5d:ee:6a:fb:db:93:03:59:11:86:
fc:db:1f:c9:90:48:95:0c:3c:d3:71:83:01:84:ea:15:57:bc:
de:58:85:05:ca:70:51:90:3f:08:5c:57:8b:d4:ad:aa:02:ef:
c7:2c:ae:8d:db:30:df:02:f5:7b:b7:09:86:5b:9f:be:de:20:
ad:b2:b5:4f:d9:65:2e:a3:3a:f1:ad:97:dd:44:d5:61:0f:84:
0a:4a:26:07:09:fc:2a:2c:65:c0:8e:66:54:20:6d:39:fa:ed:
8f:cb:f0:87:0e:1c:79:3f:8b:58:de:6d:52:1a:61:26:5f:28:
ab:3e:a1:f5:92:47:f0:78:9a:66:2b:ab:63:b0:ee:0d:03:52:
d1:6d:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:06 2026 by rpki-client