Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: D1lkmzcxAaq7jdnbY0wg86izG60SLqXAmT/pmR9KNcY=
Subject key identifier: 3A:F6:DD:CF:01:1C:BD:26:4D:F1:D8:F0:73:F7:EC:F5:6A:38:04:31
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 019F8FEC30B35BF93E7EDF3EB3A8D84CFE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 0AA6
Signing time: Thu 23 Jul 2026 17:00:48 +0000
Manifest this update: Thu 23 Jul 2026 17:00:48 +0000
Manifest next update: Fri 24 Jul 2026 17:00:48 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: Xf3VhsPPWXA52lPAY2VltxvP8uQJPPLYMT2G4oiosJg=)
2: qW7GPOXUB2kOz17G8MW05EGL-qI.roa (hash: 23gVv5PC4uk3d5shuh+rzrrM1ECcEw5rTuYmm2m+M2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:30:b3:5b:f9:3e:7e:df:3e:b3:a8:d8:4c:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jul 23 17:00:48 2026 GMT
Not After : Jul 24 17:00:48 2026 GMT
Subject: CN=3af6ddcf011cbd264df1d8f073f7ecf56a380431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:e5:90:94:36:92:bb:be:60:45:5e:9b:bf:
bb:a4:2e:1f:49:ea:2d:21:6f:b4:ad:de:da:bf:5f:
a6:83:fb:75:38:52:b1:10:53:b2:df:cd:7b:be:d2:
74:d4:cc:3b:96:ce:41:2c:45:7b:66:fc:c1:74:dd:
d6:8f:94:09:eb:87:e5:dc:aa:bd:4b:d9:d7:80:ea:
11:f9:12:07:16:7e:b8:0e:01:8a:22:2f:76:ee:66:
0a:92:28:e2:4a:cd:d1:f9:50:b6:13:ee:7c:f2:48:
8d:5b:ba:e2:6f:63:bd:14:7c:49:06:31:80:f7:c1:
f3:cd:e3:19:02:74:ec:d9:81:4b:cb:be:20:ec:44:
e1:d6:27:ba:b0:b9:0a:ff:87:19:4c:9d:03:ca:39:
25:2e:73:b8:d4:a3:94:39:83:6c:e3:ec:13:09:f5:
cb:0e:82:ef:65:eb:4d:2d:e1:60:04:93:eb:db:57:
e9:58:4e:a4:b2:ca:15:34:f3:77:6e:eb:6a:d2:77:
89:68:b3:78:2b:a3:21:31:6c:fe:62:83:16:46:f0:
87:3a:39:93:e9:15:9f:ac:49:cf:85:45:6b:d2:16:
d4:ec:71:18:8b:b3:dd:9c:5b:15:7e:f0:ba:c3:f0:
47:c3:38:93:87:9f:01:53:73:b7:a0:98:3c:d8:c6:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:DD:CF:01:1C:BD:26:4D:F1:D8:F0:73:F7:EC:F5:6A:38:04:31
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:65:f9:ad:30:a2:21:a0:3b:66:c5:2e:1b:6f:ce:0b:ba:
43:3c:d5:73:57:f7:98:5a:f4:f7:c8:a6:e9:46:34:f1:94:6e:
09:a7:5e:72:ce:7d:98:a2:56:da:2e:98:b2:fe:a6:68:f2:41:
95:7b:7f:f0:79:18:3b:81:c8:69:14:b4:90:06:32:d2:a8:11:
1b:62:1f:51:66:f9:e9:46:fd:5b:e2:fd:bc:c0:17:fd:fc:0d:
53:ab:73:5a:b0:72:a8:18:62:c4:1d:17:d8:2c:80:8d:bc:51:
86:d0:dd:71:fd:9e:3c:ad:a9:cb:30:30:bf:cd:25:7b:7e:59:
d6:23:08:2d:ea:52:52:79:f8:de:18:f1:02:22:e4:e6:f7:4d:
ce:63:c2:20:f5:c0:a1:de:e3:a0:17:3d:ca:92:f7:93:26:ec:
53:de:7f:f0:e4:35:4b:59:58:0a:d2:ec:af:8e:8e:65:8e:ee:
3b:6d:b0:71:f5:6c:bb:5b:9d:fb:81:ee:01:a7:3e:16:2a:0c:
f0:df:14:ec:d0:ea:43:a4:a7:be:6c:cd:69:cf:c7:c8:94:e0:
82:42:f9:a5:ce:30:24:11:46:b9:aa:9d:16:0e:5e:a7:53:b8:
1b:47:e8:e4:29:30:c0:55:93:b1:92:83:40:33:e3:be:07:b8:
34:38:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:04 2026 by rpki-client