Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File: d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier: 24TX30xY6Upay0XwUZ87ASv5PEnSV4wldx5GJH1ZoqI=
Subject key identifier: 70:2D:19:1A:78:72:5C:58:82:EB:1A:9D:51:9A:41:7C:42:08:76:1B
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 01A0E4AC158310D0D639BB5167166F89788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number: 0B8A
Signing time: Sun 27 Sep 2026 21:01:17 +0000
Manifest this update: Sun 27 Sep 2026 21:01:17 +0000
Manifest next update: Mon 28 Sep 2026 21:01:17 +0000
Files and hashes: 1: 2aVju54fgg9bD1JRsSNN37U-9Hk.roa (hash: gQ2ZXX3Kuvxj5T+dbec4hU1fv3yACHxOQmVvGeAb560=)
2: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: l/FitqGNyIe3lMbrJI8KClK7tmoiXLyw0lvR1UcvZK4=)
3: sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa (hash: e8cW0JrKBdNEagEPQSlGciScba5vYX0jEPFos43/Uno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ac:15:83:10:d0:d6:39:bb:51:67:16:6f:89:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Sep 27 21:01:17 2026 GMT
Not After : Sep 28 21:01:17 2026 GMT
Subject: CN=702d191a78725c5882eb1a9d519a417c4208761b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:1b:67:87:2b:4a:52:36:73:4b:3e:90:0b:
3c:c2:64:78:ec:46:b4:a2:9a:c6:34:2f:b6:ea:68:
31:a0:55:c8:f1:a8:3c:18:53:b8:5c:62:4d:b0:a7:
78:58:22:85:ed:a8:18:eb:0d:53:56:c0:0e:19:e4:
c9:87:78:55:45:dc:65:87:06:9e:2b:a9:ad:97:87:
fc:5a:5f:3e:90:4f:58:2f:fa:10:12:31:4f:b9:6a:
60:92:c3:d3:33:9a:40:ae:9c:fd:72:61:18:57:8c:
af:99:bd:64:b3:c6:16:aa:f2:e4:3d:ed:b0:8f:c5:
de:b8:f2:94:62:ab:f1:55:57:e0:5c:4e:fc:37:35:
d7:f5:81:c0:3b:03:c0:b0:02:df:18:9f:4c:65:83:
ef:e9:5c:fa:dd:4b:57:64:b9:c9:ec:93:90:28:b5:
99:9a:82:d6:8b:cf:1d:67:8a:f6:e0:55:e7:b4:0b:
1f:b2:bc:b5:cc:0f:b2:4d:8e:d1:a7:fa:3f:11:14:
d7:51:bf:f9:a3:f3:3b:d5:90:81:08:b5:17:29:d4:
0d:2f:25:ae:c1:19:6d:86:3e:c8:ab:46:84:1b:56:
bf:b1:7f:0d:85:44:e4:25:db:22:58:79:58:58:29:
9b:8b:72:8d:6e:8b:9b:96:6f:38:b4:da:a2:c8:52:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:19:1A:78:72:5C:58:82:EB:1A:9D:51:9A:41:7C:42:08:76:1B
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d7:fd:d4:d4:f9:6c:ac:51:a4:90:17:65:c6:b6:21:7f:6b:
54:2a:86:f7:c2:36:52:3a:b9:a1:de:c7:90:50:e1:95:7c:f1:
82:ff:db:5f:ce:29:cc:5b:19:6f:33:f2:2f:3d:ea:2f:89:b6:
d1:9f:e2:a0:00:ae:9e:59:f7:aa:43:cf:86:c7:79:04:08:de:
06:49:b3:fa:80:50:4a:37:65:be:0f:20:47:89:6a:57:53:c2:
9c:71:3f:df:f7:f0:ae:24:15:4e:fb:56:e3:72:9c:75:cf:ca:
a5:a3:3d:27:2b:f3:89:99:f1:fa:19:9c:fe:69:40:10:c3:bb:
cf:86:ad:89:52:b8:f4:20:00:af:da:ba:61:7d:33:6c:43:af:
48:51:3d:f8:39:25:3f:4c:94:af:cf:24:0d:79:e5:d2:5b:b5:
7d:e8:49:96:73:b7:d0:67:21:3a:b0:c7:ef:32:ad:57:8f:ec:
54:c0:dd:34:70:5d:e9:89:eb:98:5e:f9:6e:23:eb:5e:78:ce:
a9:94:1b:59:d3:02:b7:45:34:98:df:b0:fd:76:97:7f:76:87:
88:22:3c:7d:9a:6c:27:d3:8c:c9:4f:af:74:06:20:d9:5c:2b:
21:bb:1f:21:e0:71:31:9d:a9:bd:81:0f:b2:3e:0d:79:7b:20:
8c:5c:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:43 2026 by rpki-client