Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: CRItBMqnsFwWQ8jRDUl936yuWH5ge3yZAts7qdjlN+0=
Subject key identifier: BE:4D:B3:96:06:5D:8B:18:04:72:6A:B7:F0:A4:9F:55:FA:1D:85:05
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 019E1D22A126B01D30E37E6801C59665F1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 09E6
Signing time: Tue 12 May 2026 17:01:09 +0000
Manifest this update: Tue 12 May 2026 17:01:09 +0000
Manifest next update: Wed 13 May 2026 17:01:09 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: +J2ho9cI+Kwz9j6FzKrgPuI4X4lFBXAeajXfYon5/Zw=)
2: qW7GPOXUB2kOz17G8MW05EGL-qI.roa (hash: 23gVv5PC4uk3d5shuh+rzrrM1ECcEw5rTuYmm2m+M2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a1:26:b0:1d:30:e3:7e:68:01:c5:96:65:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: May 12 17:01:09 2026 GMT
Not After : May 13 17:01:09 2026 GMT
Subject: CN=be4db396065d8b1804726ab7f0a49f55fa1d8505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:4d:ec:26:a2:91:82:86:b8:b9:84:23:cb:
d8:3f:c0:7e:73:a5:69:d0:ae:69:8e:7a:fd:1e:94:
01:51:ee:62:f5:e8:d2:0a:5f:83:cf:7d:37:93:b5:
80:36:46:99:01:0d:f6:6c:da:c5:8b:0c:1a:20:f6:
ad:47:61:63:0e:14:59:ec:41:ee:df:a8:98:3b:00:
e3:e3:22:7b:09:80:a6:5f:b4:5e:9a:ed:23:48:87:
be:0f:f4:80:70:17:54:34:aa:7c:f2:d4:7a:2a:1b:
d6:42:36:0f:60:53:96:b5:7a:d1:bc:94:eb:1e:7e:
50:cb:02:29:dc:cf:6e:80:99:74:51:8f:e7:57:46:
e7:7c:58:c9:d7:c3:ee:15:d7:6e:2f:f1:e3:86:ff:
5c:d5:9c:90:6b:2c:d6:97:ac:49:56:14:06:89:b8:
d4:71:ff:ce:5a:26:2e:10:65:73:5d:8d:e2:80:bd:
49:86:e2:9f:68:ec:a6:e6:32:04:d7:2a:9a:a7:68:
8e:e2:18:25:66:78:c3:50:6d:83:83:45:c9:9f:63:
46:4e:63:d8:a8:cf:d6:78:be:62:2c:34:e8:4f:d0:
b3:15:81:c1:92:27:ba:06:08:b5:ad:e9:4f:c3:56:
2a:44:70:41:53:1a:71:9d:6e:c8:b4:43:fd:14:85:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:B3:96:06:5D:8B:18:04:72:6A:B7:F0:A4:9F:55:FA:1D:85:05
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:62:3b:dd:a7:8b:cc:01:de:1c:56:53:20:de:dd:ec:14:14:
66:9f:37:01:4e:15:02:47:cb:8d:a2:61:22:79:c8:90:be:23:
2f:0f:ba:a5:d3:75:68:47:46:1e:48:75:68:92:e1:a4:c1:dc:
8e:2e:e4:d1:f0:4f:c6:9d:5d:c8:12:cd:5d:48:45:48:28:63:
4c:63:f9:2c:eb:2c:49:01:d4:12:09:60:6c:35:04:42:43:79:
cf:c8:70:39:14:86:7f:52:bb:8a:6f:a1:70:c5:a9:14:9a:aa:
c6:03:2c:ed:5a:6e:d6:38:aa:e5:a5:be:31:fb:3d:d7:92:8b:
d1:8f:46:d1:2e:dc:51:7b:7f:cc:59:55:4c:86:06:3f:1f:7a:
8e:fe:b3:9c:2b:9e:1e:c3:ee:66:c3:51:da:98:14:93:93:37:
94:b5:10:5f:c8:f8:f1:34:d7:be:b0:a7:e4:00:95:37:ca:68:
61:60:b4:92:b7:91:89:b5:fc:51:e7:32:01:e4:e1:ff:e6:25:
dc:f9:d8:93:11:21:fe:2e:a6:61:37:37:b1:f9:ed:8d:ae:ea:
4d:a9:ee:3c:3b:81:de:95:01:48:85:83:4b:36:9f:3d:ab:2b:
88:a8:c3:18:02:f8:c6:94:9a:d5:83:6b:ca:4f:9a:74:eb:03:
3c:a1:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:32 2026 by rpki-client