Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: 2oQExKHC2hp13mbwHlD/xcqwRJVooj5oLboPqUe2TTk=
Subject key identifier: A9:2A:BC:F6:94:4B:61:4C:E4:AE:7C:B1:4A:7B:C9:2A:87:63:8F:54
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 019D2703BCA491C5E828301E1D26000726CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0FA6
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: eFBj4MOxkYGVVNEzjw38mRdwW1Ag15wNzTqyrI3uowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bc:a4:91:c5:e8:28:30:1e:1d:26:00:07:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=a92abcf6944b614ce4ae7cb14a7bc92a87638f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:88:7f:8d:88:88:92:50:ea:89:21:c4:73:
88:de:56:b9:16:0c:23:8c:e4:a2:00:34:51:43:a7:
4a:77:85:ca:80:f5:b2:4b:9c:2c:e3:81:d0:fe:65:
da:5c:17:67:5a:9d:ed:e0:50:d8:95:2f:bb:7a:24:
41:dd:96:d9:3e:9a:d6:b9:78:02:fa:e4:c8:dd:aa:
d5:e1:73:0c:0e:91:cb:09:64:d0:34:3d:5f:dd:20:
6b:7c:e8:2e:3e:d2:67:51:63:b3:9b:0c:78:c0:87:
dd:bc:59:23:d2:f0:1b:93:d1:1e:66:6d:27:a6:0c:
d7:72:6d:d5:26:b7:ea:85:11:46:59:87:41:c5:ec:
e1:3a:87:d0:e8:dd:5b:02:1f:e6:16:2b:5b:90:2a:
29:0f:39:15:79:05:fe:83:d1:36:36:15:aa:c0:26:
67:d3:fa:9c:c8:46:0b:4e:d2:c6:f2:e1:33:54:54:
30:1b:e1:9e:bd:54:de:32:d5:f5:ca:83:ea:e2:84:
19:ef:39:19:70:a9:4a:66:87:27:1e:8b:d4:97:6f:
93:bb:dd:6e:fa:44:29:7b:38:b0:a3:02:fb:8f:ab:
86:73:19:88:4d:6d:04:cf:d9:c8:d9:7b:10:ae:02:
d1:bc:d6:91:a6:cb:20:d6:08:4a:ea:8a:44:73:ff:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:BC:F6:94:4B:61:4C:E4:AE:7C:B1:4A:7B:C9:2A:87:63:8F:54
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8c:77:66:48:a1:c3:b7:b4:6c:ec:f1:02:69:5a:6f:4c:16:
39:ba:b0:9b:a9:f6:48:1d:c7:21:90:7a:37:a0:95:4b:61:58:
9e:4a:a4:f4:47:23:d9:62:8d:b4:51:55:36:32:a7:92:3b:5d:
a0:fe:aa:a4:c0:b9:37:fe:90:04:98:33:82:da:f1:df:03:19:
9d:b1:52:b7:51:a7:01:06:ce:86:52:d7:7a:ce:fd:6d:28:ea:
a6:f1:ca:99:55:00:0d:a8:8d:a5:bc:8a:5d:a2:b3:0b:5d:fa:
f2:46:0d:19:c0:cd:9b:a0:13:fc:c6:f5:c0:ec:93:42:2e:4a:
ab:5b:47:3a:c2:75:94:c6:79:38:a1:40:28:d7:ff:09:0b:18:
a0:b0:59:1b:68:92:93:39:02:8f:65:19:7b:e8:e5:f0:3c:2d:
20:b9:67:bb:1d:e9:ab:6c:46:01:f2:a8:37:0e:4c:60:5b:c0:
46:00:48:1e:fe:47:e3:ba:cb:81:bc:5d:9b:5c:bf:84:7c:4c:
4a:65:e6:6b:c5:85:55:76:63:ca:ae:83:6d:a4:fa:67:0c:20:
50:4a:23:0f:92:d0:76:bf:a1:4a:8e:27:09:1a:ac:ed:5c:c8:
ca:75:93:21:93:98:0e:ea:58:27:d3:72:b2:b9:05:dc:29:0a:
f1:6a:23:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7ykkcXoKDAeHSYABybNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4
Njg2NmMwHhcNMjYwMzI1MjIwMDQ5WhcNMjYwMzI2MjIwMDQ5WjAzMTEwLwYDVQQD
EyhhOTJhYmNmNjk0NGI2MTRjZTRhZTdjYjE0YTdiYzkyYTg3NjM4ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuaIf42IiJJQ6okhxHOI3la5Fgwj
jOSiADRRQ6dKd4XKgPWyS5ws44HQ/mXaXBdnWp3t4FDYlS+7eiRB3ZbZPprWuXgC
+uTI3arV4XMMDpHLCWTQND1f3SBrfOguPtJnUWOzmwx4wIfdvFkj0vAbk9EeZm0n
pgzXcm3VJrfqhRFGWYdBxezhOofQ6N1bAh/mFitbkCopDzkVeQX+g9E2NhWqwCZn
0/qcyEYLTtLG8uEzVFQwG+GevVTeMtX1yoPq4oQZ7zkZcKlKZocnHovUl2+Tu91u
+kQpeziwowL7j6uGcxmITW0Ez9nI2XsQrgLRvNaRpssg1ghK6opEc//WTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkqvPaUS2FM5K58sUp7ySqHY49UMB8GA1UdIwQY
MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt
YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw
LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYx3Zkih
w7e0bOzxAmlab0wWObqwm6n2SB3HIZB6N6CVS2FYnkqk9Ecj2WKNtFFVNjKnkjtd
oP6qpMC5N/6QBJgzgtrx3wMZnbFSt1GnAQbOhlLXes79bSjqpvHKmVUADaiNpbyK
XaKzC1368kYNGcDNm6AT/Mb1wOyTQi5Kq1tHOsJ1lMZ5OKFAKNf/CQsYoLBZG2iS
kzkCj2UZe+jl8DwtILlnux3pq2xGAfKoNw5MYFvARgBIHv5H47rLgbxdm1y/hHxM
SmXma8WFVXZjyq6DbaT6ZwwgUEojD5LQdr+hSo4nCRqs7VzIynWTIZOYDupYJ9Ny
srkF3CkK8Wojbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:26 2026 by rpki-client