Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: 4tmG74Y8dk0ebGAZpfxCnSuRHED8Sl97Ln3o/INYKGM=
Subject key identifier: 11:03:9E:B0:94:6D:2F:85:82:1C:94:7B:CE:72:44:B1:D1:B0:48:95
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 01A0D26E769231E3EFE30D719ED0BE04494A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 0B4D
Signing time: Thu 24 Sep 2026 08:00:49 +0000
Manifest this update: Thu 24 Sep 2026 08:00:49 +0000
Manifest next update: Fri 25 Sep 2026 08:00:49 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: RhN5ffn5aa256yze1mi19Jr+VNS2e5yh8OMcVeMg2MI=)
2: qW7GPOXUB2kOz17G8MW05EGL-qI.roa (hash: 23gVv5PC4uk3d5shuh+rzrrM1ECcEw5rTuYmm2m+M2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:76:92:31:e3:ef:e3:0d:71:9e:d0:be:04:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Sep 24 08:00:49 2026 GMT
Not After : Sep 25 08:00:49 2026 GMT
Subject: CN=11039eb0946d2f85821c947bce7244b1d1b04895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:eb:d3:3c:c3:26:0a:4e:47:cc:54:c9:15:
29:1b:a2:6a:ea:31:62:ea:a2:aa:78:32:5e:69:f5:
73:2b:5c:24:81:af:06:52:6b:74:81:30:1a:dd:01:
d7:4e:3f:93:07:67:23:b6:b6:2a:68:6f:2f:f3:56:
77:7e:a8:d1:4f:e6:d2:84:9a:b7:fa:3c:1f:fd:a5:
fe:8b:e4:73:57:4a:77:e7:84:d5:29:c9:44:a7:f4:
98:00:16:f8:3d:13:03:03:47:9e:12:4c:56:e0:05:
ad:46:21:90:47:96:39:70:b3:2c:60:b4:ce:69:80:
f5:ec:41:f2:ed:9a:1d:ae:ad:77:3e:6b:74:6b:ce:
a3:22:18:6d:74:63:08:d6:a6:e9:54:c1:1c:de:7f:
51:b3:87:9d:56:6e:01:53:7d:c7:b0:d8:e7:fc:55:
9a:24:c3:02:53:38:e6:c0:fc:c9:a8:ed:be:65:89:
db:f8:1a:cf:bb:5d:4f:da:15:ba:56:e4:98:0a:66:
27:78:3d:ba:6d:b4:72:79:c5:f5:66:17:c8:1a:65:
41:41:d0:0c:68:ca:3a:1c:42:12:ca:03:bf:cd:4e:
9e:46:23:b4:4b:74:9e:19:34:14:7d:5a:a1:63:b9:
2e:b1:8c:59:f2:9e:b5:0e:cf:dd:8a:fc:fb:cd:7b:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:9E:B0:94:6D:2F:85:82:1C:94:7B:CE:72:44:B1:D1:B0:48:95
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:bd:5c:fd:d1:e3:fb:f6:31:30:e0:34:1a:07:e2:b2:e4:
a5:18:ab:4c:ab:43:6e:60:b3:1f:95:7d:e2:31:0a:18:60:4d:
b2:eb:f0:eb:99:b8:d3:de:f6:1a:ba:58:52:15:9c:8a:06:e2:
7c:eb:20:2d:8f:f5:39:bf:7f:c5:19:44:5f:51:6b:6b:e0:71:
d4:00:13:e1:72:7c:64:b9:56:15:7d:a0:50:2d:07:9a:8e:a3:
f7:19:7b:ac:ba:1d:79:e1:46:bc:79:be:c5:7a:6d:10:46:c1:
16:b9:aa:cb:d0:31:81:bc:b4:46:c4:7c:f9:3d:a7:f4:8e:8f:
d3:c8:7f:a6:61:20:40:ba:6a:ca:19:6d:18:63:83:70:9e:77:
b4:c9:f3:41:7c:50:90:0a:c9:ee:0a:70:4b:1e:92:f2:20:0a:
ba:7f:0a:c3:7f:a6:5c:05:9c:8f:af:88:8b:14:13:d3:1b:30:
a4:20:81:74:1a:dc:67:93:40:82:fd:f3:28:39:8f:ad:77:19:
fb:24:04:9b:e2:57:58:87:57:6a:53:40:4a:01:29:48:fd:47:
ad:7d:b0:c3:b4:42:cb:de:82:58:32:5a:27:01:e3:84:3b:3b:
bb:ca:36:f4:bc:b2:7c:8c:da:60:7c:19:86:0b:db:88:4b:a9:
d6:72:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:21 2026 by rpki-client